@fayz-ai/plugin-automations 0.12.6 → 0.13.0

package/dist/index.js

@@ -1,10 +1,10 @@
 import * as React4 from 'react';
-import React4__default from 'react';
-import { getSupabaseClientOptional, startEventLog, getMessageDefaults, normalizeMessageActions, usePluginRuntimeOptional, resolveMessages, errorMessage, resolveMessage, renderMessageTemplate, loadEventRuns, getActiveTenantId } from '@fayz-ai/core';
-import { resolveFayzAgentConnection, registerRailPage, getFayzSupabaseClientOptional, useConnectors, useAgentSurface, PageActions, askAI, SettingsTabs, adminNavigateTo, RightRailPage, AskAIButton, useOrganizationStore, connectorRoute, ConnectorMark, ConnectorDeliveries } from '@fayz-ai/admin';
+import React4__default, { useState, useCallback, useRef, useEffect, useMemo } from 'react';
+import { getSupabaseClientOptional, startEventLog, getMessageDefaults, normalizeMessageActions, useTranslation, errorMessage, usePluginRuntimeOptional, resolveMessages, resolveMessage, renderMessageTemplate, loadEventRuns, getActiveTenantId } from '@fayz-ai/core';
+import { resolveFayzAgentConnection, registerRailPage, getFayzSupabaseClientOptional, PageActions, useConnectors, useAgentSurface, askAI, SettingsTabs, adminNavigateTo, RightRailPage, AskAIButton, useOrganizationStore, connectorRoute, ConnectorMark, ConnectorDeliveries } from '@fayz-ai/admin';
 import * as LucideIcons from 'lucide-react';
-import { WandSparkles, Zap, Receipt, Megaphone, MessageSquare, Smartphone, Mail, ChevronRight, RotateCcw, Check, Clock, Monitor, RefreshCw, History, Send, AlertTriangle, CircleCheck, CircleSlash } from 'lucide-react';
-import { PageHeaderActions, PageTabs, Card, WhatsAppIcon, Switch, SubpageHeader, Button, Badge, Hint, HeaderTabs, toast, PhoneField } from '@fayz-ai/ui';
+import { Loader2, Plus, ChevronRight, WandSparkles, Zap, Receipt, Megaphone, MessageSquare, Smartphone, Mail, RotateCcw, Check, Clock, Monitor, ListChecks, Trash2, RefreshCw, History, Send, AlertTriangle, CircleCheck, CircleSlash } from 'lucide-react';
+import { toast, PageHeaderActions, Card, Switch, DataTable, PageTabs, WhatsAppIcon, SubpageHeader, Button, Badge, Hint, HeaderTabs, PhoneField } from '@fayz-ai/ui';
 import { createFayzAutomationsClient, FayzAutomationsError } from '@fayz-ai/sdk/automations';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 
@@ -591,7 +591,7 @@ var SAMPLE = {
   appointment_date: "12/08/2026",
   appointment_time: "14:30"
 };
-function AutomationDetailPage({ eventKey, channel, store, backTo = "/automations", embedded, onDone }) {
+function AutomationDetailPage({ eventKey, channel, store: store2, backTo = "/automations", embedded, onDone }) {
   const tenantId = useOrganizationStoreLike();
   const runtime = usePluginRuntimeOptional();
   const fayzConnection = React4__default.useMemo(() => resolveFayzAgentConnection(), []);
@@ -652,14 +652,14 @@ function AutomationDetailPage({ eventKey, channel, store, backTo = "/automations
     }
     let overrides = [];
     try {
-      overrides = await store.list(tenantId);
+      overrides = await store2.list(tenantId);
     } catch (err) {
       console.warn("[automations] could not load overrides; showing defaults", err);
     }
     const found = resolveMessage(decodeURIComponent(eventKey), channel, overrides, runtime?.events ?? []);
     setMessage(found);
     if (found) setDraft({ subject: found.subject, body: found.body });
-  }, [eventKey, channel, store, tenantId, runtime]);
+  }, [eventKey, channel, store2, tenantId, runtime]);
   React4__default.useEffect(() => {
     void reload();
   }, [reload]);
@@ -703,7 +703,7 @@ function AutomationDetailPage({ eventKey, channel, store, backTo = "/automations
   const patch = async (input) => {
     setSaving(true);
     try {
-      await store.upsert(input, tenantId);
+      await store2.upsert(input, tenantId);
       await reload();
     } catch (err) {
       console.warn("[automations] save failed", err);
@@ -723,7 +723,7 @@ function AutomationDetailPage({ eventKey, channel, store, backTo = "/automations
     setDraft({ subject: fallback?.subject ?? "", body: fallback?.body ?? "" });
     setSaving(true);
     try {
-      await store.reset(event.name, message.channel, tenantId);
+      await store2.reset(event.name, message.channel, tenantId);
       await reload();
       toast.success("Texto restaurado");
     } catch (err) {
@@ -1207,7 +1207,7 @@ function readSelection(basePath) {
   if (!eventKey || !channel) return null;
   return { eventKey, channel };
 }
-function AutomationsList({ store, variant = "page", basePath = "/automations" }) {
+function AutomationsList({ store: store2, variant = "page", basePath = "/automations" }) {
   const tenantId = useOrganizationStoreLike();
   const runtime = usePluginRuntimeOptional();
   const [messages, setMessages] = React4__default.useState(null);
@@ -1225,17 +1225,17 @@ function AutomationsList({ store, variant = "page", basePath = "/automations" })
   const reload = React4__default.useCallback(async () => {
     let overrides = [];
     try {
-      overrides = await store.list(tenantId);
+      overrides = await store2.list(tenantId);
     } catch (err) {
       console.warn("[automations] could not load template overrides; showing defaults", err);
     }
     setMessages(resolveMessages(overrides, runtime?.events ?? []));
-  }, [store, tenantId, runtime]);
+  }, [store2, tenantId, runtime]);
   React4__default.useEffect(() => {
     void reload();
   }, [reload]);
-  const surfaceRef = React4__default.useRef({ messages, store, tenantId, reload, basePath });
-  surfaceRef.current = { messages, store, tenantId, reload, basePath };
+  const surfaceRef = React4__default.useRef({ messages, store: store2, tenantId, reload, basePath });
+  surfaceRef.current = { messages, store: store2, tenantId, reload, basePath };
   const agentSurface = React4__default.useMemo(() => ({
     id: "automations.list",
     pluginId: "automations",
@@ -1303,7 +1303,7 @@ function AutomationsList({ store, variant = "page", basePath = "/automations" })
   const toggle = async (m, enabled) => {
     setMessages((prev) => prev?.map((x) => x.event.name === m.event.name && x.channel === m.channel ? { ...x, enabled } : x) ?? null);
     try {
-      await store.upsert({ eventKey: m.event.name, channel: m.channel, enabled }, tenantId);
+      await store2.upsert({ eventKey: m.event.name, channel: m.channel, enabled }, tenantId);
       await reload();
     } catch (err) {
       console.warn("[automations] toggle failed", err);
@@ -1459,7 +1459,7 @@ function AutomationsList({ store, variant = "page", basePath = "/automations" })
           {
             eventKey: selected.eventKey,
             channel: selected.channel,
-            store,
+            store: store2,
             backTo: basePath,
             embedded: true
           }
@@ -1527,21 +1527,1492 @@ function createSupabaseTemplateStore() {
     }
   };
 }
+var FLOWS = "plg_automations_flows";
+var STEPS = "plg_automations_flow_steps";
+var ENROLLMENTS = "plg_automations_enrollments";
+var STEP_STATS = "v_automations_flow_steps";
+function rowToFlow(r) {
+  return {
+    id: r.id,
+    tenantId: r.tenant_id,
+    name: r.name,
+    description: r.description ?? null,
+    entryEvent: r.entry_event,
+    exitEvents: Array.isArray(r.exit_events) ? r.exit_events : [],
+    isActive: r.is_active === true,
+    createdAt: r.created_at,
+    updatedAt: r.updated_at ?? r.created_at
+  };
+}
+function rowToStepStats(r) {
+  return {
+    id: r.step_id ?? r.id,
+    flowId: r.flow_id,
+    position: r.position,
+    delayMinutes: r.delay_minutes ?? 0,
+    kind: r.kind === "task" ? "task" : "message",
+    templateKey: r.template_key ?? null,
+    channel: r.channel ?? null,
+    taskTitle: r.task_title ?? null,
+    taskDueDays: r.task_due_days ?? null,
+    queued: Number(r.queued ?? 0),
+    sent: Number(r.sent ?? 0),
+    blocked: Number(r.blocked ?? 0),
+    failed: Number(r.failed ?? 0),
+    cancelled: Number(r.cancelled ?? 0)
+  };
+}
+function nextPosition(steps) {
+  if (steps.length === 0) return 10;
+  return Math.max(...steps.map((s) => s.position)) + 10;
+}
+function describeDelay(minutes, t) {
+  if (minutes <= 0) return t("automations.flow.delayNow");
+  if (minutes % 1440 === 0) return t("automations.flow.delayDays", { count: String(minutes / 1440) });
+  if (minutes % 60 === 0) return t("automations.flow.delayHours", { count: String(minutes / 60) });
+  return t("automations.flow.delayMinutes", { count: String(minutes) });
+}
+function createSupabaseFlowStore() {
+  function client() {
+    const supabase = getSupabaseClientOptional();
+    if (!supabase) throw new Error("Supabase not initialized");
+    return supabase;
+  }
+  const store2 = {
+    async listFlows() {
+      const { data, error } = await client().from(FLOWS).select("*").order("name");
+      if (error) throw new Error(error.message);
+      return (data ?? []).map(rowToFlow);
+    },
+    async saveFlow(input) {
+      const row = {
+        name: input.name,
+        description: input.description ?? null,
+        entry_event: input.entryEvent,
+        exit_events: input.exitEvents ?? []
+      };
+      if (input.id) {
+        const { data: data2, error: error2 } = await client().from(FLOWS).update(row).eq("id", input.id).select().single();
+        if (error2) throw new Error(error2.message);
+        return rowToFlow(data2);
+      }
+      row.tenant_id = getActiveTenantId();
+      const { data, error } = await client().from(FLOWS).insert(row).select().single();
+      if (error) throw new Error(error.message);
+      return rowToFlow(data);
+    },
+    async setFlowActive(id, isActive) {
+      const { error } = await client().from(FLOWS).update({ is_active: isActive, updated_at: (/* @__PURE__ */ new Date()).toISOString() }).eq("id", id);
+      if (error) throw new Error(error.message);
+    },
+    async deleteFlow(id) {
+      const { error } = await client().from(FLOWS).delete().eq("id", id);
+      if (error) throw new Error(error.message);
+    },
+    async listSteps(flowId) {
+      const { data, error } = await client().from(STEP_STATS).select("*").eq("flow_id", flowId).order("position");
+      if (error) throw new Error(error.message);
+      return (data ?? []).map(rowToStepStats);
+    },
+    async saveStep(flowId, input) {
+      const row = {
+        flow_id: flowId,
+        position: input.position,
+        delay_minutes: input.delayMinutes ?? 0,
+        kind: input.kind ?? "message",
+        template_key: input.kind === "task" ? null : input.templateKey ?? null,
+        channel: input.kind === "task" ? null : input.channel ?? null,
+        task_title: input.kind === "task" ? input.taskTitle ?? null : null,
+        task_due_days: input.kind === "task" ? input.taskDueDays ?? null : null
+      };
+      if (input.id) {
+        const { error: error2 } = await client().from(STEPS).update(row).eq("id", input.id);
+        if (error2) throw new Error(error2.message);
+        return;
+      }
+      row.tenant_id = getActiveTenantId();
+      const { error } = await client().from(STEPS).insert(row);
+      if (error) throw new Error(error.message);
+    },
+    async deleteStep(id) {
+      const { error } = await client().from(STEPS).delete().eq("id", id);
+      if (error) throw new Error(error.message);
+    },
+    async countsFor(flowId) {
+      const { data, error } = await client().from(ENROLLMENTS).select("status").eq("flow_id", flowId);
+      if (error) throw new Error(error.message);
+      const rows = data ?? [];
+      return {
+        active: rows.filter((r) => r.status === "active").length,
+        completed: rows.filter((r) => r.status === "completed").length,
+        exited: rows.filter((r) => r.status === "exited").length
+      };
+    }
+  };
+  return store2;
+}
+var store = createSupabaseFlowStore();
+var DELAY_CHOICES = [0, 60, 1440, 2880, 4320, 10080];
+function useStepColumns(onDelete) {
+  const t = useTranslation();
+  return useMemo(() => [
+    {
+      accessorKey: "position",
+      header: "#",
+      cell: ({ getValue }) => /* @__PURE__ */ jsx("span", { className: "text-xs tabular-nums text-muted-foreground", children: getValue() })
+    },
+    {
+      id: "step",
+      header: t("automations.flow.colStep"),
+      cell: ({ row }) => {
+        const s = row.original;
+        const isTask = s.kind === "task";
+        return /* @__PURE__ */ jsxs("span", { className: "inline-flex items-center gap-1.5 text-sm", children: [
+          isTask ? /* @__PURE__ */ jsx(ListChecks, { className: "h-3.5 w-3.5 text-muted-foreground" }) : /* @__PURE__ */ jsx(MessageSquare, { className: "h-3.5 w-3.5 text-muted-foreground" }),
+          isTask ? s.taskTitle : s.templateKey,
+          !isTask && s.channel && /* @__PURE__ */ jsx("span", { className: "rounded bg-muted px-1.5 py-0.5 text-[10px] text-muted-foreground", children: s.channel })
+        ] });
+      }
+    },
+    {
+      accessorKey: "delayMinutes",
+      header: t("automations.flow.colWait"),
+      cell: ({ getValue }) => /* @__PURE__ */ jsxs("span", { className: "inline-flex items-center gap-1 text-xs text-muted-foreground", children: [
+        /* @__PURE__ */ jsx(Clock, { className: "h-3 w-3" }),
+        describeDelay(getValue(), t)
+      ] })
+    },
+    // The scoreboard. Zeroes are shown rather than hidden: a step that has never
+    // sent is the finding, not an empty cell.
+    {
+      accessorKey: "queued",
+      header: t("automations.flow.colQueued"),
+      cell: ({ getValue }) => /* @__PURE__ */ jsx("span", { className: "text-xs tabular-nums", children: getValue() })
+    },
+    {
+      accessorKey: "sent",
+      header: t("automations.flow.colSent"),
+      cell: ({ getValue }) => /* @__PURE__ */ jsx("span", { className: "text-xs tabular-nums", children: getValue() })
+    },
+    {
+      accessorKey: "blocked",
+      header: t("automations.flow.colBlocked"),
+      cell: ({ getValue }) => {
+        const n = getValue();
+        return /* @__PURE__ */ jsx("span", { className: `text-xs tabular-nums ${n > 0 ? "text-warning" : ""}`, children: n });
+      }
+    },
+    {
+      accessorKey: "failed",
+      header: t("automations.flow.colFailed"),
+      cell: ({ getValue }) => {
+        const n = getValue();
+        return /* @__PURE__ */ jsx("span", { className: `text-xs tabular-nums ${n > 0 ? "text-destructive" : ""}`, children: n });
+      }
+    },
+    {
+      id: "actions",
+      header: "",
+      cell: ({ row }) => /* @__PURE__ */ jsx("div", { className: "flex justify-end", children: /* @__PURE__ */ jsx(
+        "button",
+        {
+          onClick: (e) => {
+            e.stopPropagation();
+            onDelete(row.original.id);
+          },
+          title: t("automations.flow.deleteStep"),
+          className: "inline-flex h-7 w-7 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-muted hover:text-destructive",
+          children: /* @__PURE__ */ jsx(Trash2, { className: "h-3.5 w-3.5" })
+        }
+      ) })
+    }
+  ], [t, onDelete]);
+}
+function StepComposer({ steps, onAdd }) {
+  const t = useTranslation();
+  const [kind, setKind] = useState("message");
+  const [delay, setDelay] = useState(1440);
+  const [value, setValue] = useState("");
+  const submit = () => {
+    if (!value.trim()) {
+      toast.error(t(kind === "task" ? "automations.flow.needTitle" : "automations.flow.needTemplate"));
+      return;
+    }
+    onAdd({
+      kind,
+      delayMinutes: delay,
+      position: nextPosition(steps),
+      ...kind === "task" ? { taskTitle: value.trim() } : { templateKey: value.trim() }
+    });
+    setValue("");
+  };
+  return /* @__PURE__ */ jsxs("div", { className: "mt-3 flex flex-wrap items-center gap-2 rounded-lg border border-dashed p-3", children: [
+    /* @__PURE__ */ jsxs(
+      "select",
+      {
+        value: kind,
+        onChange: (e) => {
+          setKind(e.target.value);
+          setValue("");
+        },
+        className: "rounded-md border bg-background px-2 py-1.5 text-sm",
+        children: [
+          /* @__PURE__ */ jsx("option", { value: "message", children: t("automations.flow.kindMessage") }),
+          /* @__PURE__ */ jsx("option", { value: "task", children: t("automations.flow.kindTask") })
+        ]
+      }
+    ),
+    /* @__PURE__ */ jsx(
+      "select",
+      {
+        value: delay,
+        onChange: (e) => setDelay(Number(e.target.value)),
+        className: "rounded-md border bg-background px-2 py-1.5 text-sm",
+        children: DELAY_CHOICES.map((m) => /* @__PURE__ */ jsx("option", { value: m, children: describeDelay(m, t) }, m))
+      }
+    ),
+    /* @__PURE__ */ jsx(
+      "input",
+      {
+        value,
+        onChange: (e) => setValue(e.target.value),
+        onKeyDown: (e) => {
+          if (e.key === "Enter") submit();
+        },
+        placeholder: t(kind === "task" ? "automations.flow.titlePlaceholder" : "automations.flow.templatePlaceholder"),
+        className: "min-w-[200px] flex-1 rounded-md border bg-background px-2 py-1.5 text-sm"
+      }
+    ),
+    /* @__PURE__ */ jsxs(
+      "button",
+      {
+        onClick: submit,
+        className: "inline-flex items-center gap-1 rounded-md bg-primary px-3 py-1.5 text-sm text-primary-foreground hover:opacity-90",
+        children: [
+          /* @__PURE__ */ jsx(Plus, { className: "h-3.5 w-3.5" }),
+          t("automations.flow.addStep")
+        ]
+      }
+    )
+  ] });
+}
+function FlowsPage() {
+  const t = useTranslation();
+  const [flows, setFlows] = useState([]);
+  const [loading, setLoading] = useState(true);
+  const [selectedId, setSelectedId] = useState(null);
+  const [steps, setSteps] = useState([]);
+  const [counts, setCounts] = useState(null);
+  const load = useCallback(async () => {
+    setLoading(true);
+    try {
+      setFlows(await store.listFlows());
+    } catch (e) {
+      toast.error(errorMessage(e));
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+  const selectedRef = useRef(null);
+  selectedRef.current = selectedId;
+  const loadDetail = useCallback(async (flowId) => {
+    try {
+      const [s, c] = await Promise.all([store.listSteps(flowId), store.countsFor(flowId)]);
+      if (selectedRef.current !== flowId) return;
+      setSteps(s);
+      setCounts(c);
+    } catch (e) {
+      toast.error(errorMessage(e));
+    }
+  }, []);
+  const deleteStep = useCallback((id) => {
+    void (async () => {
+      try {
+        await store.deleteStep(id);
+        if (selectedId) await loadDetail(selectedId);
+      } catch (e) {
+        toast.error(errorMessage(e));
+      }
+    })();
+  }, [selectedId, loadDetail]);
+  const stepColumns = useStepColumns(deleteStep);
+  useEffect(() => {
+    void load();
+  }, [load]);
+  useEffect(() => {
+    setSteps([]);
+    setCounts(null);
+    if (selectedId) void loadDetail(selectedId);
+  }, [selectedId, loadDetail]);
+  flows.find((f) => f.id === selectedId) ?? null;
+  async function createFlow() {
+    const name = window.prompt(t("automations.flow.namePrompt"));
+    if (!name?.trim()) return;
+    const entryEvent = window.prompt(t("automations.flow.entryPrompt"), "crm.lead_created");
+    if (!entryEvent?.trim()) return;
+    try {
+      const flow = await store.saveFlow({ name: name.trim(), entryEvent: entryEvent.trim() });
+      await load();
+      setSelectedId(flow.id);
+      toast.success(t("automations.flow.created"));
+    } catch (e) {
+      toast.error(errorMessage(e));
+    }
+  }
+  async function toggleActive(flow) {
+    if (!flow.isActive) {
+      const s = await store.listSteps(flow.id);
+      if (s.length === 0) {
+        toast.error(t("automations.flow.needStepsToActivate"));
+        return;
+      }
+    }
+    try {
+      await store.setFlowActive(flow.id, !flow.isActive);
+      await load();
+    } catch (e) {
+      toast.error(errorMessage(e));
+    }
+  }
+  if (loading) {
+    return /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2 p-6 text-sm text-muted-foreground", children: [
+      /* @__PURE__ */ jsx(Loader2, { className: "h-4 w-4 animate-spin" }),
+      t("automations.flow.loading")
+    ] });
+  }
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsx(PageHeaderActions, { children: /* @__PURE__ */ jsx(
+      PageActions,
+      {
+        actions: [{
+          id: "new-flow",
+          label: t("automations.flow.new"),
+          icon: Plus,
+          intent: "primary",
+          creates: true,
+          onSelect: () => {
+            void createFlow();
+          }
+        }]
+      }
+    ) }),
+    flows.length === 0 ? /* @__PURE__ */ jsxs(Card, { className: "flex flex-col items-center gap-1 border-dashed py-12 text-center", children: [
+      /* @__PURE__ */ jsx("p", { className: "text-sm font-medium", children: t("automations.flow.emptyTitle") }),
+      /* @__PURE__ */ jsx("p", { className: "max-w-md text-xs text-muted-foreground", children: t("automations.flow.emptyHint") })
+    ] }) : /* @__PURE__ */ jsx("div", { className: "space-y-2", children: flows.map((flow) => /* @__PURE__ */ jsxs(Card, { className: "p-3", children: [
+      /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-3", children: [
+        /* @__PURE__ */ jsxs(
+          "button",
+          {
+            onClick: () => setSelectedId(selectedId === flow.id ? null : flow.id),
+            className: "flex flex-1 items-center gap-2 text-left",
+            children: [
+              /* @__PURE__ */ jsx(
+                ChevronRight,
+                {
+                  className: `h-4 w-4 text-muted-foreground transition-transform ${selectedId === flow.id ? "rotate-90" : ""}`
+                }
+              ),
+              /* @__PURE__ */ jsx("span", { className: "text-sm font-medium", children: flow.name }),
+              /* @__PURE__ */ jsx("span", { className: "rounded bg-muted px-1.5 py-0.5 text-[10px] text-muted-foreground", children: flow.entryEvent })
+            ]
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          Switch,
+          {
+            checked: flow.isActive,
+            onCheckedChange: () => {
+              void toggleActive(flow);
+            },
+            "aria-label": t("automations.flow.toggle")
+          }
+        )
+      ] }),
+      selectedId === flow.id && /* @__PURE__ */ jsxs("div", { className: "mt-3 border-t pt-3", children: [
+        counts && /* @__PURE__ */ jsx("p", { className: "mb-2 text-xs text-muted-foreground", children: t("automations.flow.counts", {
+          active: String(counts.active),
+          completed: String(counts.completed),
+          exited: String(counts.exited)
+        }) }),
+        /* @__PURE__ */ jsx(
+          DataTable,
+          {
+            columns: stepColumns,
+            data: steps,
+            emptyMessage: /* @__PURE__ */ jsx("p", { className: "py-4 text-xs text-muted-foreground", children: t("automations.flow.noSteps") })
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          StepComposer,
+          {
+            steps,
+            onAdd: (input) => {
+              void (async () => {
+                try {
+                  await store.saveStep(flow.id, input);
+                  await loadDetail(flow.id);
+                } catch (e) {
+                  toast.error(errorMessage(e));
+                }
+              })();
+            }
+          }
+        )
+      ] })
+    ] }, flow.id)) })
+  ] });
+}
+
+// src/locales/en.ts
+var en = {
+  "automations.flow.new": "New flow",
+  "automations.flow.loading": "Loading flows\u2026",
+  "automations.flow.emptyTitle": "No cadence flows yet",
+  "automations.flow.emptyHint": "A flow touches the same lead more than once \u2014 a message today, a call in two days, another message on Friday \u2014 and stops on its own when they answer.",
+  "automations.flow.namePrompt": "Name this flow",
+  "automations.flow.entryPrompt": "Which event puts someone in?",
+  "automations.flow.created": "Flow created. It starts switched off.",
+  "automations.flow.toggle": "Active",
+  "automations.flow.needStepsToActivate": "Add a step first \u2014 an empty flow enrols people into nothing.",
+  "automations.flow.noSteps": "No steps yet.",
+  "automations.flow.counts": "{{active}} in the flow \xB7 {{completed}} finished \xB7 {{exited}} left early",
+  "automations.flow.colStep": "Step",
+  "automations.flow.colWait": "Wait",
+  "automations.flow.colQueued": "Queued",
+  "automations.flow.colSent": "Sent",
+  "automations.flow.colBlocked": "Blocked",
+  "automations.flow.colFailed": "Failed",
+  "automations.flow.addStep": "Add step",
+  "automations.flow.deleteStep": "Remove step",
+  "automations.flow.kindMessage": "Message",
+  "automations.flow.kindTask": "Task",
+  "automations.flow.templatePlaceholder": "Template key, e.g. lead.followup",
+  "automations.flow.titlePlaceholder": "What should somebody do?",
+  "automations.flow.needTemplate": "A message step needs a template.",
+  "automations.flow.needTitle": "A task step needs a title.",
+  "automations.flow.delayNow": "Right away",
+  "automations.flow.delayMinutes": "{{count}} min later",
+  "automations.flow.delayHours": "{{count}}h later",
+  "automations.flow.delayDays": "{{count}} days later"
+};
+
+// src/locales/pt-BR.ts
+var ptBR = {
+  "automations.flow.new": "Novo fluxo",
+  "automations.flow.loading": "Carregando fluxos\u2026",
+  "automations.flow.emptyTitle": "Nenhum fluxo de cad\xEAncia ainda",
+  "automations.flow.emptyHint": "Um fluxo toca o mesmo lead mais de uma vez \u2014 uma mensagem hoje, uma liga\xE7\xE3o em dois dias, outra mensagem na sexta \u2014 e para sozinho quando a pessoa responde.",
+  "automations.flow.namePrompt": "Nome do fluxo",
+  "automations.flow.entryPrompt": "Qual evento coloca algu\xE9m aqui?",
+  "automations.flow.created": "Fluxo criado. Ele nasce desligado.",
+  "automations.flow.toggle": "Ativo",
+  "automations.flow.needStepsToActivate": "Adicione um passo antes \u2014 um fluxo vazio inscreve gente em nada.",
+  "automations.flow.noSteps": "Nenhum passo ainda.",
+  "automations.flow.counts": "{{active}} no fluxo \xB7 {{completed}} conclu\xEDram \xB7 {{exited}} sa\xEDram antes",
+  "automations.flow.colStep": "Passo",
+  "automations.flow.colWait": "Espera",
+  "automations.flow.colQueued": "Na fila",
+  "automations.flow.colSent": "Enviados",
+  "automations.flow.colBlocked": "Bloqueados",
+  "automations.flow.colFailed": "Falharam",
+  "automations.flow.addStep": "Adicionar passo",
+  "automations.flow.deleteStep": "Remover passo",
+  "automations.flow.kindMessage": "Mensagem",
+  "automations.flow.kindTask": "Tarefa",
+  "automations.flow.templatePlaceholder": "Chave do modelo, ex.: lead.followup",
+  "automations.flow.titlePlaceholder": "O que algu\xE9m precisa fazer?",
+  "automations.flow.needTemplate": "Um passo de mensagem precisa de um modelo.",
+  "automations.flow.needTitle": "Um passo de tarefa precisa de um t\xEDtulo.",
+  "automations.flow.delayNow": "Na hora",
+  "automations.flow.delayMinutes": "{{count}} min depois",
+  "automations.flow.delayHours": "{{count}}h depois",
+  "automations.flow.delayDays": "{{count}} dias depois"
+};
+
+// src/locales/index.ts
+var automationsLocales = {
+  en,
+  "pt-BR": ptBR
+};
+
+// src/migrations/index.ts
+var MIGRATION_000_BASELINE = `-- ============================================================================
+-- plugins/plugin-automations/migrations/000_baseline.sql \u2014 what installing this provisions, as one file.
+--
+-- GENERATED by scripts/emit-unit-baselines.mjs (#338). Do not edit by hand:
+-- change the schema, regenerate, and let scripts/check-chain-equivalence.mjs
+-- prove the result still matches.
+--
+-- This replaced 4 migration files. They are kept, unapplied, in
+-- migrations.archive/ \u2014 a year of decisions is worth reading even when it is no
+-- longer worth replaying.
+--
+-- Object order is fixed rather than dependency-sorted: schemas, types,
+-- sequences, tables, defaults, functions, constraints, views, indexes, foreign
+-- keys, triggers, row security, policies, grants. Dependencies BETWEEN units
+-- are carried by the order packages/db/chain.json declares.
+-- ============================================================================
+
+-- A LANGUAGE sql function binds its body at CREATE time, and 570 functions
+-- sorted by name are not sorted by who calls whom. This is what lets them load
+-- in any order; every body is still compiled on first call, so a genuinely
+-- broken reference surfaces then rather than never. Session-scoped.
+SET check_function_bodies = false;
+
+
+
+-- \u2500\u2500 default privileges: reset \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- Cleared BEFORE anything is created, so every object below gets the ACL the
+-- dump describes rather than the image's defaults on top of it. Restored at
+-- the end of this file.
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+
+-- \u2500\u2500 table \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE TABLE public.plg_automations_provider_templates (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid,
+    event_key text NOT NULL,
+    channel text DEFAULT 'whatsapp'::text NOT NULL,
+    provider text DEFAULT 'tyxter'::text NOT NULL,
+    provider_template_id text,
+    template_name text NOT NULL,
+    language text DEFAULT 'pt_BR'::text NOT NULL,
+    variable_map jsonb DEFAULT '[]'::jsonb NOT NULL,
+    actions_map jsonb DEFAULT '[]'::jsonb NOT NULL,
+    status text DEFAULT 'draft'::text NOT NULL,
+    rejection_reason text,
+    body_snapshot text,
+    submitted_at timestamp with time zone,
+    approved_at timestamp with time zone,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT plg_automations_provider_templates_status_check CHECK ((status = ANY (ARRAY['draft'::text, 'submitted'::text, 'approved'::text, 'rejected'::text, 'paused'::text, 'disabled'::text])))
+);
+
+CREATE TABLE public.plg_automations_templates (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    event_key text NOT NULL,
+    channel text DEFAULT 'email'::text NOT NULL,
+    enabled boolean,
+    subject text,
+    body text,
+    name text,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    actions jsonb
+);
+
+
+-- \u2500\u2500 function \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE FUNCTION public.automations_set_updated_at() RETURNS trigger
+    LANGUAGE plpgsql
+    AS $$
+BEGIN
+  NEW.updated_at = now();
+  RETURN NEW;
+END $$;
+
+
+-- \u2500\u2500 constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE ONLY public.plg_automations_provider_templates
+    ADD CONSTRAINT plg_automations_provider_templates_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_automations_templates
+    ADD CONSTRAINT plg_automations_templates_pkey PRIMARY KEY (id);
+
+
+-- \u2500\u2500 index \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE INDEX idx_plg_automations_provider_templates_lookup ON public.plg_automations_provider_templates USING btree (event_key, channel, provider, status);
+
+CREATE INDEX plg_automations_templates_tenant_idx ON public.plg_automations_templates USING btree (tenant_id);
+
+CREATE UNIQUE INDEX plg_automations_templates_unique_idx ON public.plg_automations_templates USING btree (tenant_id, event_key, channel);
+
+CREATE UNIQUE INDEX uq_plg_automations_provider_templates_owner ON public.plg_automations_provider_templates USING btree (COALESCE(tenant_id, '00000000-0000-0000-0000-000000000000'::uuid), event_key, channel, provider);
+
+CREATE UNIQUE INDEX uq_plg_automations_provider_templates_provider_id ON public.plg_automations_provider_templates USING btree (provider, provider_template_id) WHERE (provider_template_id IS NOT NULL);
+
+
+-- \u2500\u2500 fk constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE ONLY public.plg_automations_provider_templates
+    ADD CONSTRAINT plg_automations_provider_templates_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+
+-- \u2500\u2500 trigger \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE TRIGGER plg_automations_provider_templates_set_updated_at BEFORE UPDATE ON public.plg_automations_provider_templates FOR EACH ROW EXECUTE FUNCTION public.automations_set_updated_at();
+
+CREATE TRIGGER plg_automations_templates_set_updated_at BEFORE UPDATE ON public.plg_automations_templates FOR EACH ROW EXECUTE FUNCTION public.automations_set_updated_at();
+
+
+-- \u2500\u2500 row security \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE public.plg_automations_provider_templates ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_automations_templates ENABLE ROW LEVEL SECURITY;
+
+
+-- \u2500\u2500 policy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE POLICY plg_automations_provider_templates_select ON public.plg_automations_provider_templates FOR SELECT TO authenticated USING (((tenant_id IS NULL) OR (tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids))));
+
+CREATE POLICY plg_automations_templates_member_all ON public.plg_automations_templates TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids))) WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+
+-- \u2500\u2500 acl \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+GRANT ALL ON FUNCTION public.automations_set_updated_at() TO authenticated;
+GRANT ALL ON FUNCTION public.automations_set_updated_at() TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_automations_provider_templates TO anon;
+GRANT ALL ON TABLE public.plg_automations_provider_templates TO authenticated;
+GRANT ALL ON TABLE public.plg_automations_provider_templates TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_automations_templates TO anon;
+GRANT ALL ON TABLE public.plg_automations_templates TO authenticated;
+GRANT ALL ON TABLE public.plg_automations_templates TO service_role;
+
+
+-- \u2500\u2500 comment \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+COMMENT ON COLUMN public.plg_automations_templates.actions IS 'Channel-neutral message actions: [{id: confirm|cancel|pay, label, kind: reply|payment}]. NULL = the catalog default; [] = deliberately no buttons.';
+
+
+-- \u2500\u2500 default privileges: restore \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- Put back, so the NEXT thing installed inherits what the chain had.
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$--
+-- PostgreSQL database dump complete
+--$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$--
+-- PostgreSQL database dump complete
+--$stmt$;
+END $dp$;
+`;
+var MIGRATION_001_THE_FLOW_HAS_STEPS = `-- 001_the_flow_has_steps.sql
+--
+-- A CADENCE: the same lead touched on day 0, day 2 and day 5, by itself.
+--
+-- This plugin's README has promised "multi-step sequences, and enrollment
+-- stats" since M1, and \`AutomationsList.tsx\` says plainly what shipped instead:
+-- "um fluxo de um passo \xE9 o texto com o gatilho escrito na frente". One row per
+-- (event, channel). Nothing waits, nothing remembers where a person got to, and
+-- nothing stops when they reply.
+--
+-- WHAT THIS DOES NOT BUILD, BECAUSE IT ALREADY EXISTS.
+--
+--   * The clock. \`fayz_event_runner\` is a pg_cron job that already calls
+--     \`event_runner_tick(200)\` every minute. This adds a fifth call to it
+--     (packages/db 046), guarded like the other four.
+--   * The delay. \`notifications_enqueue(..., p_scheduled_for, p_dedupe_key)\`
+--     already means "send this at time T, and not twice". A cadence step is a
+--     row in that queue with a computed \`scheduled_for\`.
+--   * Consent, channel preference and quiet-channel fallback \u2014 all inside
+--     \`notifications_resolve_channel\`, which plugin-notifications 002 just
+--     taught to read the opt-out correctly. A cadence that dodged the queue
+--     would dodge consent with it, which is the whole reason it does not.
+--   * The claim-and-retry shape. \`marketing_run_due\` / \`marketing_campaign_run\`
+--     already solve "advance a set of enrolled people on a tick" with
+--     \`FOR UPDATE SKIP LOCKED\`. \`automations_flows_run_due\` is that function
+--     with a step pointer.
+--
+-- THE THREE DECISIONS WORTH ARGUING WITH.
+--
+-- 1. THE DELAY IS AN OFFSET FROM THE PREVIOUS STEP, NOT FROM ENROLMENT.
+--    "Two days after the call" is how a salesperson describes a cadence, and it
+--    survives inserting a step in the middle. Absolute offsets from day 0 mean
+--    every later step silently shifts when you add one.
+--
+-- 2. THE ENROLMENT CARRIES THE STEP POINTER, AND THE DEDUPE KEY CARRIES THE
+--    POSITION. \`flow:<enrolment>:<position>\` means replaying a tick, or two
+--    workers taking the same row, cannot send a step twice \u2014
+--    \`notifications_enqueue\` refuses a repeated \`dedupe_key\` before it writes
+--    anything. The SKIP LOCKED claim is the first defence; this is the one that
+--    survives a crash between the enqueue and the pointer update.
+--
+-- 3. A FLOW IS BORN INACTIVE. \`is_active\` defaults false. A cadence that starts
+--    sending the moment somebody saves a draft is a cadence that sends a draft.
+--
+-- WHAT IS STILL MISSING AFTER THIS, AND IS NOT PRETENDED OTHERWISE: e-mail and
+-- SMS still resolve to \`notifications_send_to_log\`, which records and sends
+-- nothing. A cadence on those channels will enqueue, drain, and deliver to a
+-- log row. WhatsApp reaches a provider; in-app reaches the bell.
+
+SET check_function_bodies = false;
+
+-- \u2500\u2500 tables \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE TABLE IF NOT EXISTS public.plg_automations_flows (
+  id uuid DEFAULT gen_random_uuid() NOT NULL,
+  tenant_id uuid NOT NULL,
+  unit_id uuid,
+  name text NOT NULL,
+  description text,
+  -- The fact that puts somebody in. Names an event from the aggregated plugin
+  -- catalog (\`crm.lead_created\`, \`crm.stage_changed\`, \u2026); it is text and not a
+  -- foreign key because the catalog is assembled at runtime from whichever
+  -- plugins an app mounts.
+  entry_event text NOT NULL,
+  -- The facts that take somebody out. Empty means the flow only ends by
+  -- running out of steps.
+  exit_events text[] DEFAULT '{}'::text[] NOT NULL,
+  is_active boolean DEFAULT false NOT NULL,
+  owner_id uuid,
+  created_at timestamptz DEFAULT now() NOT NULL,
+  updated_at timestamptz DEFAULT now() NOT NULL,
+  CONSTRAINT plg_automations_flows_pkey PRIMARY KEY (id)
+);
+
+CREATE TABLE IF NOT EXISTS public.plg_automations_flow_steps (
+  id uuid DEFAULT gen_random_uuid() NOT NULL,
+  tenant_id uuid NOT NULL,
+  flow_id uuid NOT NULL,
+  -- Sparse on purpose (10, 20, 30\u2026): inserting between two steps should not
+  -- renumber the ones after it, and the enrolment's pointer names a position.
+  position integer NOT NULL,
+  -- Minutes to wait AFTER THE PREVIOUS STEP. The first step's delay is measured
+  -- from enrolment, so 0 means "right away".
+  delay_minutes integer DEFAULT 0 NOT NULL,
+  kind text DEFAULT 'message' NOT NULL,
+  -- kind='message': which template, and optionally force a channel. NULL
+  -- channel lets notifications_resolve_channel pick, which is what honours the
+  -- recipient's preference.
+  template_key text,
+  channel text,
+  -- kind='task': what the human is asked to do, and by when.
+  task_title text,
+  task_due_days integer,
+  created_at timestamptz DEFAULT now() NOT NULL,
+  updated_at timestamptz DEFAULT now() NOT NULL,
+  CONSTRAINT plg_automations_flow_steps_pkey PRIMARY KEY (id),
+  CONSTRAINT plg_automations_flow_steps_kind_check
+    CHECK (kind = ANY (ARRAY['message'::text, 'task'::text])),
+  CONSTRAINT plg_automations_flow_steps_delay_check CHECK (delay_minutes >= 0),
+  -- A message step with no template has nothing to send; a task step with no
+  -- title gives the human nothing to read. Either is a step that would fail at
+  -- 3am rather than at save time.
+  CONSTRAINT plg_automations_flow_steps_payload_check CHECK (
+    (kind = 'message' AND template_key IS NOT NULL)
+    OR (kind = 'task' AND task_title IS NOT NULL)
+  )
+);
+
+CREATE TABLE IF NOT EXISTS public.plg_automations_enrollments (
+  id uuid DEFAULT gen_random_uuid() NOT NULL,
+  tenant_id uuid NOT NULL,
+  flow_id uuid NOT NULL,
+  person_id uuid NOT NULL,
+  -- What put them here, for the timeline: ('lead', <id>) or ('deal', <id>).
+  subject_type text,
+  subject_id uuid,
+  status text DEFAULT 'active' NOT NULL,
+  -- The position of the step that runs NEXT. NULL once nothing is left.
+  current_position integer,
+  next_run_at timestamptz DEFAULT now() NOT NULL,
+  entered_at timestamptz DEFAULT now() NOT NULL,
+  exited_at timestamptz,
+  exit_reason text,
+  created_at timestamptz DEFAULT now() NOT NULL,
+  updated_at timestamptz DEFAULT now() NOT NULL,
+  CONSTRAINT plg_automations_enrollments_pkey PRIMARY KEY (id),
+  CONSTRAINT plg_automations_enrollments_status_check
+    CHECK (status = ANY (ARRAY['active'::text, 'completed'::text, 'exited'::text]))
+);
+
+-- \u2500\u2500 constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE public.plg_automations_flows
+  DROP CONSTRAINT IF EXISTS plg_automations_flows_tenant_fkey;
+ALTER TABLE public.plg_automations_flows
+  ADD CONSTRAINT plg_automations_flows_tenant_fkey
+  FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE public.plg_automations_flow_steps
+  DROP CONSTRAINT IF EXISTS plg_automations_flow_steps_flow_fkey;
+ALTER TABLE public.plg_automations_flow_steps
+  ADD CONSTRAINT plg_automations_flow_steps_flow_fkey
+  FOREIGN KEY (flow_id) REFERENCES public.plg_automations_flows(id) ON DELETE CASCADE;
+
+ALTER TABLE public.plg_automations_enrollments
+  DROP CONSTRAINT IF EXISTS plg_automations_enrollments_flow_fkey;
+ALTER TABLE public.plg_automations_enrollments
+  ADD CONSTRAINT plg_automations_enrollments_flow_fkey
+  FOREIGN KEY (flow_id) REFERENCES public.plg_automations_flows(id) ON DELETE CASCADE;
+
+-- \u2500\u2500 index \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE UNIQUE INDEX IF NOT EXISTS plg_automations_flow_steps_position_uq
+  ON public.plg_automations_flow_steps (flow_id, position);
+CREATE INDEX IF NOT EXISTS plg_automations_flows_tenant_idx
+  ON public.plg_automations_flows (tenant_id);
+CREATE INDEX IF NOT EXISTS plg_automations_flows_entry_idx
+  ON public.plg_automations_flows (tenant_id, entry_event) WHERE is_active;
+
+-- One live enrolment per person per flow. Re-entering a cadence somebody is
+-- already in would double every remaining message.
+CREATE UNIQUE INDEX IF NOT EXISTS plg_automations_enrollments_live_uq
+  ON public.plg_automations_enrollments (flow_id, person_id) WHERE status = 'active';
+-- The claim index: the runner only ever asks for due, active rows.
+CREATE INDEX IF NOT EXISTS plg_automations_enrollments_due_idx
+  ON public.plg_automations_enrollments (next_run_at) WHERE status = 'active';
+CREATE INDEX IF NOT EXISTS plg_automations_enrollments_person_idx
+  ON public.plg_automations_enrollments (tenant_id, person_id);
+
+-- \u2500\u2500 row security \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+-- ENABLE **and** FORCE. Without FORCE the table owner \u2014 which is the role that
+-- runs migrations and every SECURITY DEFINER function here \u2014 bypasses these
+-- policies entirely, and \`packages/db/test/pgtap/900_verification/001_posture.sql\`
+-- (N14b) fails the whole pool for it.
+ALTER TABLE public.plg_automations_flows ENABLE ROW LEVEL SECURITY;
+ALTER TABLE public.plg_automations_flows FORCE ROW LEVEL SECURITY;
+ALTER TABLE public.plg_automations_flow_steps ENABLE ROW LEVEL SECURITY;
+ALTER TABLE public.plg_automations_flow_steps FORCE ROW LEVEL SECURITY;
+ALTER TABLE public.plg_automations_enrollments ENABLE ROW LEVEL SECURITY;
+ALTER TABLE public.plg_automations_enrollments FORCE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS plg_automations_flows_authz_select ON public.plg_automations_flows;
+CREATE POLICY plg_automations_flows_authz_select ON public.plg_automations_flows
+  FOR SELECT TO authenticated USING (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.read', NULL::uuid)));
+
+DROP POLICY IF EXISTS plg_automations_flows_authz_insert ON public.plg_automations_flows;
+CREATE POLICY plg_automations_flows_authz_insert ON public.plg_automations_flows
+  FOR INSERT TO authenticated WITH CHECK (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid)));
+
+DROP POLICY IF EXISTS plg_automations_flows_authz_update ON public.plg_automations_flows;
+CREATE POLICY plg_automations_flows_authz_update ON public.plg_automations_flows
+  FOR UPDATE TO authenticated USING (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid)))
+  WITH CHECK (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid)));
+
+DROP POLICY IF EXISTS plg_automations_flows_authz_delete ON public.plg_automations_flows;
+CREATE POLICY plg_automations_flows_authz_delete ON public.plg_automations_flows
+  FOR DELETE TO authenticated USING (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid)));
+
+DROP POLICY IF EXISTS plg_automations_flow_steps_authz_select ON public.plg_automations_flow_steps;
+CREATE POLICY plg_automations_flow_steps_authz_select ON public.plg_automations_flow_steps
+  FOR SELECT TO authenticated USING (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.read', NULL::uuid)));
+
+DROP POLICY IF EXISTS plg_automations_flow_steps_authz_insert ON public.plg_automations_flow_steps;
+-- The parent flow is checked, not just the stamped tenant. A tenant-only
+-- WITH CHECK lets a caller stamp their OWN tenant_id on a step and hang it off
+-- somebody else's flow \u2014 and the engine looks steps up by flow_id alone, so the
+-- injected step runs in that tenant's cadence.
+CREATE POLICY plg_automations_flow_steps_authz_insert ON public.plg_automations_flow_steps
+  FOR INSERT TO authenticated WITH CHECK (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid))
+    AND EXISTS (SELECT 1 FROM public.plg_automations_flows f
+                 WHERE f.id = flow_id AND f.tenant_id = (SELECT app.current_tenant_id())));
+
+DROP POLICY IF EXISTS plg_automations_flow_steps_authz_update ON public.plg_automations_flow_steps;
+CREATE POLICY plg_automations_flow_steps_authz_update ON public.plg_automations_flow_steps
+  FOR UPDATE TO authenticated USING (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid)))
+  WITH CHECK (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid)));
+
+DROP POLICY IF EXISTS plg_automations_flow_steps_authz_delete ON public.plg_automations_flow_steps;
+CREATE POLICY plg_automations_flow_steps_authz_delete ON public.plg_automations_flow_steps
+  FOR DELETE TO authenticated USING (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.edit', NULL::uuid)));
+
+-- Enrolments are READ-ONLY to the operator. They are written by the engine, and
+-- a hand-edited step pointer is a cadence nobody can explain afterwards.
+-- Leaving a flow is \`automations_flow_exit\`, not an UPDATE.
+DROP POLICY IF EXISTS plg_automations_enrollments_authz_select ON public.plg_automations_enrollments;
+CREATE POLICY plg_automations_enrollments_authz_select ON public.plg_automations_enrollments
+  FOR SELECT TO authenticated USING (
+    tenant_id = (SELECT app.current_tenant_id())
+    AND (SELECT app.has_permission('automations.read', NULL::uuid)));
+
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_automations_flows TO authenticated;
+GRANT ALL ON public.plg_automations_flows TO service_role;
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_automations_flow_steps TO authenticated;
+GRANT ALL ON public.plg_automations_flow_steps TO service_role;
+GRANT SELECT ON public.plg_automations_enrollments TO authenticated;
+GRANT ALL ON public.plg_automations_enrollments TO service_role;
+
+INSERT INTO app.scaffold_registry
+  (table_schema, table_name, resource_type, plugin, owner_scoping, mode, previous_policies, audit_hook, scope, distributable)
+VALUES
+  ('public', 'plg_automations_flows', 'automations.flow', 'automations', false, 'enforce', ARRAY[]::text[], false, 'unit_optional', false),
+  ('public', 'plg_automations_flow_steps', 'automations.flow_step', 'automations', false, 'enforce', ARRAY[]::text[], false, 'tenant', false),
+  ('public', 'plg_automations_enrollments', 'automations.enrollment', 'automations', false, 'enforce', ARRAY[]::text[], false, 'tenant', false)
+ON CONFLICT DO NOTHING;
+
+-- \u2500\u2500 function \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+-- Put somebody into a flow. Returns the enrolment, or NULL when the flow is
+-- inactive, has no steps, or the person is already in it.
+CREATE OR REPLACE FUNCTION public.automations_flow_enroll(
+  p_tenant_id uuid, p_flow_id uuid, p_person_id uuid,
+  p_subject_type text DEFAULT NULL, p_subject_id uuid DEFAULT NULL
+) RETURNS uuid
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path TO ''
+AS $$
+DECLARE v_first record; v_id uuid;
+BEGIN
+  SELECT s.position, s.delay_minutes INTO v_first
+    FROM public.plg_automations_flow_steps s
+    JOIN public.plg_automations_flows f ON f.id = s.flow_id
+   WHERE s.flow_id = p_flow_id AND f.tenant_id = p_tenant_id AND f.is_active
+   ORDER BY s.position
+   LIMIT 1;
+
+  -- An inactive flow, or one with no steps, enrols nobody. Silently: this is
+  -- called from an event handler, and raising would fail the whole delivery.
+  IF v_first.position IS NULL THEN RETURN NULL; END IF;
+
+  INSERT INTO public.plg_automations_enrollments
+    (tenant_id, flow_id, person_id, subject_type, subject_id, current_position, next_run_at)
+  VALUES
+    (p_tenant_id, p_flow_id, p_person_id, p_subject_type, p_subject_id,
+     v_first.position, now() + make_interval(mins => v_first.delay_minutes))
+  ON CONFLICT DO NOTHING
+  RETURNING id INTO v_id;
+
+  RETURN v_id;
+END $$;
+
+-- Take somebody out of every flow they are in. The reason is kept, because
+-- "left because they replied" and "left because the deal was lost" are the two
+-- halves of whether a cadence works.
+CREATE OR REPLACE FUNCTION public.automations_flow_exit(
+  p_tenant_id uuid, p_person_id uuid, p_reason text, p_flow_ids uuid[] DEFAULT NULL
+) RETURNS integer
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path TO ''
+AS $$
+DECLARE v_n integer; v_gone uuid[];
+BEGIN
+  -- SCOPED TO THE FLOWS THAT ASKED. \`p_flow_ids\` NULL still means "every flow",
+  -- which is what a manual "take this person out" wants; the event handler
+  -- passes the flows whose own \`exit_events\` name the fact.
+  --
+  -- Without the scope, one flow declaring \`crm.deal_won\` pulled the person out
+  -- of EVERY flow they were in and cancelled every queued step \u2014 including a
+  -- flow that declared no exits at all, whose comment says it "only ends by
+  -- running out of steps". Flow-level exit_events were meaningless the moment a
+  -- second flow existed.
+  WITH gone AS (
+    UPDATE public.plg_automations_enrollments
+       SET status = 'exited', exited_at = now(), exit_reason = p_reason,
+           current_position = NULL, updated_at = now()
+     WHERE tenant_id = p_tenant_id AND person_id = p_person_id AND status = 'active'
+       AND (p_flow_ids IS NULL OR flow_id = ANY (p_flow_ids))
+     RETURNING id
+  )
+  SELECT count(*)::integer, array_agg(id) INTO v_n, v_gone FROM gone;
+
+  -- A step already in the queue but not yet sent must not go out after the
+  -- person left. \`cancelled\` was in the status CHECK from the beginning and
+  -- nothing ever wrote it; this is what it was for.
+  --
+  -- Keyed by the ENROLMENTS that just left, not by \`flow:%\` \u2014 the wide pattern
+  -- cancelled the pending steps of flows the person is still in.
+  IF v_n > 0 AND to_regclass('public.plg_notifications_queue') IS NOT NULL THEN
+    UPDATE public.plg_notifications_queue q
+       SET status = 'cancelled', last_error = 'left the flow: ' || p_reason
+     WHERE q.tenant_id = p_tenant_id
+       AND q.person_id = p_person_id
+       AND q.status = 'pending'
+       AND split_part(q.dedupe_key, ':', 1) = 'flow'
+       AND split_part(q.dedupe_key, ':', 2) = ANY (SELECT unnest(v_gone)::text);
+  END IF;
+
+  RETURN v_n;
+END $$;
+
+-- The tick. Claims due enrolments, runs ONE step each, moves the pointer.
+CREATE OR REPLACE FUNCTION public.automations_flows_run_due(p_limit integer DEFAULT 50)
+RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path TO ''
+AS $$
+DECLARE
+  e record; v_step record; v_next record; v_error text;
+  v_ran integer := 0; v_done integer := 0; v_failed integer := 0;
+BEGIN
+  -- JOINED to the flow, and \`f.is_active\` checked here rather than only in
+  -- \`automations_flow_enroll\`. Switching a flow off used to stop new entrants
+  -- and nothing else: everybody already mid-cadence kept receiving messages
+  -- from a flow the operator had just turned off, which is the opposite of what
+  -- the switch promises.
+  FOR e IN
+    SELECT en.* FROM public.plg_automations_enrollments en
+     JOIN public.plg_automations_flows f ON f.id = en.flow_id AND f.is_active
+     WHERE en.status = 'active' AND en.next_run_at <= now()
+     ORDER BY en.next_run_at
+     LIMIT greatest(p_limit, 0)
+     FOR UPDATE OF en SKIP LOCKED
+  LOOP
+    SELECT * INTO v_step FROM public.plg_automations_flow_steps s
+     WHERE s.flow_id = e.flow_id AND s.position = e.current_position;
+
+    -- The step was deleted while somebody stood on it. Move on rather than
+    -- spinning on a pointer that will never resolve.
+    IF v_step.id IS NULL THEN
+      SELECT * INTO v_next FROM public.plg_automations_flow_steps s
+       WHERE s.flow_id = e.flow_id AND s.position > coalesce(e.current_position, -1)
+       ORDER BY s.position LIMIT 1;
+    ELSE
+      BEGIN
+        IF v_step.kind = 'message' THEN
+          PERFORM public.notifications_enqueue(
+            e.tenant_id, v_step.template_key, e.person_id,
+            jsonb_build_object('flow_id', e.flow_id, 'enrollment_id', e.id, 'step', v_step.position),
+            'flow:' || e.id::text || ':' || v_step.position::text,
+            now(),
+            v_step.channel
+          );
+        ELSIF v_step.kind = 'task' AND to_regclass('public.tasks') IS NOT NULL THEN
+          -- \`tasks_source_uniq (tenant_id, source, source_key)\` makes this
+          -- idempotent for free \u2014 the same step cannot raise two tasks.
+          INSERT INTO public.tasks
+            (tenant_id, title, description, status, due_date, source, source_key)
+          VALUES
+            (e.tenant_id, v_step.task_title,
+             'Automation flow step ' || v_step.position::text,
+             'todo',
+             CASE WHEN v_step.task_due_days IS NOT NULL
+                  THEN (now() + make_interval(days => v_step.task_due_days))::date END,
+             'automation:flow', e.id::text || ':' || v_step.position::text)
+          ON CONFLICT DO NOTHING;
+        END IF;
+        v_ran := v_ran + 1;
+      EXCEPTION WHEN OTHERS THEN
+        -- One bad step must not stop the tick for everybody else, so the
+        -- enrolment still leaves this step: a template that no longer exists
+        -- would otherwise wedge the person forever.
+        --
+        -- But it does NOT read as a finished cadence. The first cut let the
+        -- loop fall through to \`completed\`, and because a failed step never
+        -- produces a queue row, \`v_automations_flow_steps\` \u2014 which counts queue
+        -- statuses \u2014 could not show it either. The screen built to answer
+        -- "where do people stop" reported the person as having finished.
+        v_failed := v_failed + 1;
+        v_error := SQLERRM;
+        RAISE NOTICE 'automations_flows_run_due: step % of enrolment % failed (%)',
+          v_step.position, e.id, SQLERRM;
+      END;
+
+      SELECT * INTO v_next FROM public.plg_automations_flow_steps s
+       WHERE s.flow_id = e.flow_id AND s.position > v_step.position
+       ORDER BY s.position LIMIT 1;
+    END IF;
+
+    IF v_next.id IS NULL THEN
+      UPDATE public.plg_automations_enrollments
+         SET status = 'completed', current_position = NULL,
+             exited_at = now(), updated_at = now(),
+             -- A cadence that ended on a step that could not run did not
+             -- finish; saying so is the difference between "nobody answers the
+             -- third message" and "the third message never left".
+             exit_reason = CASE WHEN v_error IS NOT NULL
+                                THEN 'last step failed: ' || v_error END
+       WHERE id = e.id;
+      v_done := v_done + 1;
+    ELSE
+      UPDATE public.plg_automations_enrollments
+         SET current_position = v_next.position,
+             next_run_at = now() + make_interval(mins => v_next.delay_minutes),
+             updated_at = now()
+       WHERE id = e.id;
+    END IF;
+
+    v_next := NULL; v_step := NULL; v_error := NULL;
+  END LOOP;
+
+  RETURN jsonb_build_object('steps_ran', v_ran, 'completed', v_done, 'failed', v_failed);
+END $$;
+
+REVOKE ALL ON FUNCTION public.automations_flow_enroll(uuid, uuid, uuid, text, uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.automations_flow_enroll(uuid, uuid, uuid, text, uuid) TO service_role;
+REVOKE ALL ON FUNCTION public.automations_flow_exit(uuid, uuid, text, uuid[]) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.automations_flow_exit(uuid, uuid, text, uuid[]) TO authenticated;
+GRANT EXECUTE ON FUNCTION public.automations_flow_exit(uuid, uuid, text, uuid[]) TO service_role;
+REVOKE ALL ON FUNCTION public.automations_flows_run_due(integer) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.automations_flows_run_due(integer) TO service_role;
+
+-- \u2500\u2500 the two handlers the event log calls \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+-- Who the event is about.
+--
+-- \`consume_event_log\` calls a handler with \`to_jsonb(v_event)\` \u2014 the whole
+-- \`event_log\` ROW. So \`tenant_id\`, \`event_key\`, \`subject_type\` and \`subject_id\`
+-- are at the top level and everything the emitter chose to send is nested under
+-- \`payload\`. The first cut read \`person_id\` at the top level, where it never is:
+-- every delivery answered "payload carries no tenant, person or event", was
+-- marked DELIVERED, and the cadence enrolled nobody, ever, with nothing
+-- reporting it.
+--
+-- \`subject_id\` first, because that is the convention the shipped handlers use
+-- (\`plg_notifications_on_fulfillment_completed\` reads exactly that), and it is
+-- \`text\` on the row. The payload fallbacks are for emitters that name the person
+-- there instead.
+CREATE OR REPLACE FUNCTION public.automations_event_person(p_event jsonb)
+RETURNS uuid
+LANGUAGE sql IMMUTABLE
+SET search_path TO ''
+AS $$
+  SELECT nullif(coalesce(
+    CASE WHEN p_event ->> 'subject_type' IN ('lead', 'person', 'contact')
+         THEN p_event ->> 'subject_id' END,
+    p_event -> 'payload' ->> 'person_id',
+    p_event -> 'payload' ->> 'lead_id',
+    p_event -> 'payload' ->> 'contact_id',
+    p_event ->> 'person_id',
+    p_event ->> 'lead_id'
+  ), '')::uuid
+$$;
+
+REVOKE ALL ON FUNCTION public.automations_event_person(jsonb) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.automations_event_person(jsonb) TO service_role;
+
+-- Enrol on the flow's entry event. The payload names the person; a fact that
+-- does not carry one cannot start a cadence.
+CREATE OR REPLACE FUNCTION public.plg_automations_on_entry_event(p_event jsonb)
+RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path TO ''
+AS $$
+DECLARE
+  v_tenant uuid := nullif(p_event ->> 'tenant_id', '')::uuid;
+  v_event text := p_event ->> 'event_key';
+  v_person uuid := public.automations_event_person(p_event);
+  f record; v_n integer := 0;
+BEGIN
+  IF v_tenant IS NULL OR v_person IS NULL OR v_event IS NULL THEN
+    RETURN jsonb_build_object('enrolled', 0, 'reason', 'event carries no tenant, person or key');
+  END IF;
+
+  FOR f IN SELECT id FROM public.plg_automations_flows
+            WHERE tenant_id = v_tenant AND entry_event = v_event AND is_active
+  LOOP
+    IF public.automations_flow_enroll(
+         v_tenant, f.id, v_person,
+         p_event ->> 'subject_type', nullif(p_event ->> 'subject_id', '')::uuid) IS NOT NULL THEN
+      v_n := v_n + 1;
+    END IF;
+  END LOOP;
+
+  RETURN jsonb_build_object('enrolled', v_n);
+END $$;
+
+-- Leave the flows whose own \`exit_events\` name this fact.
+CREATE OR REPLACE FUNCTION public.plg_automations_on_exit_event(p_event jsonb)
+RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path TO ''
+AS $$
+DECLARE
+  v_tenant uuid := nullif(p_event ->> 'tenant_id', '')::uuid;
+  v_event text := p_event ->> 'event_key';
+  v_person uuid := public.automations_event_person(p_event);
+  v_flows uuid[]; v_n integer := 0;
+BEGIN
+  IF v_tenant IS NULL OR v_person IS NULL OR v_event IS NULL THEN
+    RETURN jsonb_build_object('exited', 0, 'reason', 'event carries no tenant, person or key');
+  END IF;
+
+  SELECT array_agg(id) INTO v_flows
+    FROM public.plg_automations_flows
+   WHERE tenant_id = v_tenant AND is_active AND v_event = ANY (exit_events);
+
+  IF v_flows IS NOT NULL THEN
+    v_n := public.automations_flow_exit(v_tenant, v_person, v_event, v_flows);
+  END IF;
+
+  RETURN jsonb_build_object('exited', v_n);
+END $$;
+
+REVOKE ALL ON FUNCTION public.plg_automations_on_entry_event(jsonb) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.plg_automations_on_entry_event(jsonb) TO service_role;
+REVOKE ALL ON FUNCTION public.plg_automations_on_exit_event(jsonb) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.plg_automations_on_exit_event(jsonb) TO service_role;
+
+-- \u2500\u2500 subscription \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+-- The manifest DECLARES the reaction; this is what makes the event log call it.
+-- Both handlers on every CRM fact, because which fact opens a cadence and which
+-- closes it is the operator's choice: the handler looks the flow up and returns
+-- immediately when no flow in that tenant names the event.
+-- Written out one call per line rather than looped over an array. The loop was
+-- shorter and \`check-event-contract\` could not read it: its registration parser
+-- matches literal arguments, so a FOREACH registering fourteen subscriptions
+-- looked like zero. Same lesson as the manifest side \u2014 the gate reads source,
+-- so the source has to say it.
+SELECT public.register_event_subscription('automations', 'crm.lead_created', 'plg_automations_on_entry_event',
+  'Enrol into flows whose entry event is crm.lead_created', 5);
+SELECT public.register_event_subscription('automations', 'crm.lead_created', 'plg_automations_on_exit_event',
+  'Leave flows that exit on crm.lead_created', 5);
+SELECT public.register_event_subscription('automations', 'crm.stage_changed', 'plg_automations_on_entry_event',
+  'Enrol into flows whose entry event is crm.stage_changed', 5);
+SELECT public.register_event_subscription('automations', 'crm.stage_changed', 'plg_automations_on_exit_event',
+  'Leave flows that exit on crm.stage_changed', 5);
+SELECT public.register_event_subscription('automations', 'crm.quote_sent', 'plg_automations_on_entry_event',
+  'Enrol into flows whose entry event is crm.quote_sent', 5);
+SELECT public.register_event_subscription('automations', 'crm.quote_sent', 'plg_automations_on_exit_event',
+  'Leave flows that exit on crm.quote_sent', 5);
+SELECT public.register_event_subscription('automations', 'crm.quote_approved', 'plg_automations_on_entry_event',
+  'Enrol into flows whose entry event is crm.quote_approved', 5);
+SELECT public.register_event_subscription('automations', 'crm.quote_approved', 'plg_automations_on_exit_event',
+  'Leave flows that exit on crm.quote_approved', 5);
+SELECT public.register_event_subscription('automations', 'crm.deal_won', 'plg_automations_on_entry_event',
+  'Enrol into flows whose entry event is crm.deal_won', 5);
+SELECT public.register_event_subscription('automations', 'crm.deal_won', 'plg_automations_on_exit_event',
+  'Leave flows that exit on crm.deal_won', 5);
+SELECT public.register_event_subscription('automations', 'crm.deal_lost', 'plg_automations_on_entry_event',
+  'Enrol into flows whose entry event is crm.deal_lost', 5);
+SELECT public.register_event_subscription('automations', 'crm.deal_lost', 'plg_automations_on_exit_event',
+  'Leave flows that exit on crm.deal_lost', 5);
+SELECT public.register_event_subscription('automations', 'crm.deal_idle', 'plg_automations_on_entry_event',
+  'Enrol into flows whose entry event is crm.deal_idle', 5);
+SELECT public.register_event_subscription('automations', 'crm.deal_idle', 'plg_automations_on_exit_event',
+  'Leave flows that exit on crm.deal_idle', 5);
+
+-- \u2500\u2500 view \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+-- Per-step numbers, which is the question a cadence is judged by: where do
+-- people stop. Aggregating per FLOW would hide that the third message is the
+-- one nobody answers.
+CREATE OR REPLACE VIEW public.v_automations_flow_steps WITH (security_invoker='true') AS
+  SELECT
+    s.tenant_id, s.flow_id, s.id AS step_id, s.position, s.kind,
+    s.template_key, s.channel, s.delay_minutes, s.task_title,
+    count(q.id) FILTER (WHERE q.id IS NOT NULL)                AS queued,
+    count(q.id) FILTER (WHERE q.status = 'sent')               AS sent,
+    count(q.id) FILTER (WHERE q.status = 'blocked')            AS blocked,
+    count(q.id) FILTER (WHERE q.status = 'failed')             AS failed,
+    count(q.id) FILTER (WHERE q.status = 'cancelled')          AS cancelled
+  FROM public.plg_automations_flow_steps s
+  LEFT JOIN public.plg_automations_enrollments e ON e.flow_id = s.flow_id
+  LEFT JOIN public.plg_notifications_queue q
+         ON q.dedupe_key = 'flow:' || e.id::text || ':' || s.position::text
+  GROUP BY s.tenant_id, s.flow_id, s.id, s.position, s.kind,
+           s.template_key, s.channel, s.delay_minutes, s.task_title;
+
+GRANT SELECT ON public.v_automations_flow_steps TO authenticated;
+GRANT SELECT ON public.v_automations_flow_steps TO service_role;
+`;
+var MIGRATIONS = [
+  { id: "000_baseline", sql: MIGRATION_000_BASELINE },
+  { id: "001_the_flow_has_steps", sql: MIGRATION_001_THE_FLOW_HAS_STEPS }
+];
 
 // src/index.ts
 function createAutomationsPlugin(options) {
   const connection = resolveFayzAgentConnection();
-  const store = options?.store ?? (connection ? createFayzTemplateStore(connection) : createSupabaseTemplateStore());
+  const store2 = options?.store ?? (connection ? createFayzTemplateStore(connection) : createSupabaseTemplateStore());
   startEventLog();
   const inSettings = options?.placement === "settings";
-  const ListPage = () => React4__default.createElement(AutomationsList, { store });
+  const ListPage = () => React4__default.createElement(AutomationsList, { store: store2 });
   ListPage.displayName = "AutomationsList";
-  const SettingsListPage = () => React4__default.createElement(AutomationsList, { store, variant: "panel", basePath: "/settings/automations" });
+  const SettingsListPage = () => React4__default.createElement(AutomationsList, { store: store2, variant: "panel", basePath: "/settings/automations" });
   SettingsListPage.displayName = "AutomationsSettings";
   const RailDetail = ({ params, onClose }) => React4__default.createElement(AutomationDetailPage, {
     eventKey: params.eventKey,
     channel: params.channel,
-    store,
+    store: store2,
     backTo: inSettings ? "/settings/automations" : "/automations",
     embedded: true,
     onDone: onClose
@@ -1569,7 +3040,19 @@ function createAutomationsPlugin(options) {
         icon: "Zap",
         permission: READ,
         indexChild: false
-      }
+      },
+      // The flows screen had a route and nothing pointing at it — no nav entry,
+      // no link, no tab. `git grep automations/flows` found the registration
+      // and the changeset, and nothing else.
+      ...inSettings ? [] : [{
+        section: options?.navSection ?? "main",
+        position: (options?.navPosition ?? 6) + 0.1,
+        label: "Cad\xEAncias",
+        route: "/automations/flows",
+        icon: "Repeat",
+        permission: READ,
+        indexChild: false
+      }]
     ],
     // The SAME list, served inside settings — not a second screen.
     settings: inSettings ? [
@@ -1582,8 +3065,57 @@ function createAutomationsPlugin(options) {
       // mesmo componente: a shell colapsa '/x' e '/x/*' na mesma chave, então a
       // página não remonta ao abrir o painel (ver AdminShell.routeKey). Um
       // segundo componente aqui traria de volta a troca de tela.
+      // Flows are their OWN route, not a tab of the list. A one-step automation
+      // and a cadence answer different questions — "does the order confirmation
+      // go out" versus "where do people stop" — and the wildcard above already
+      // owns the right rail, so a tab here would fight it for the same URL.
+      { path: "/automations/flows", component: FlowsPage, permission: READ },
       { path: "/automations/*", component: ListPage, permission: READ }
     ],
+    // A flow names its own entry and exit events, but a SUBSCRIPTION is a row:
+    // static, written at install time. So both handlers listen to the whole CRM
+    // fact catalogue and each one decides whether any flow cares — the handler
+    // is a lookup against `plg_automations_flows`, and a tenant with no flow on
+    // that event does one indexed read and returns.
+    //
+    // Both handlers on every event on purpose: which facts open a cadence and
+    // which close it is the operator's choice, not ours. A house may well start
+    // a win-back flow on `crm.deal_lost`.
+    //
+    // Written out one by one rather than generated from CADENCE_FACTS. The
+    // generated form read better and was invisible to `check-event-contract`,
+    // whose regex needs a literal `subscribesTo: [ … ]` with literal event and
+    // handler strings — so fourteen subscriptions that nothing registered
+    // passed the gate in silence. A contract a checker cannot read is not a
+    // contract.
+    subscribesTo: [
+      { event: "crm.lead_created", handler: "plg_automations_on_entry_event", description: "Enrol into flows entered by a new lead", maxAttempts: 5 },
+      { event: "crm.lead_created", handler: "plg_automations_on_exit_event", description: "Leave flows that exit on a new lead", maxAttempts: 5 },
+      { event: "crm.stage_changed", handler: "plg_automations_on_entry_event", description: "Enrol into flows entered by a stage change", maxAttempts: 5 },
+      { event: "crm.stage_changed", handler: "plg_automations_on_exit_event", description: "Leave flows that exit on a stage change", maxAttempts: 5 },
+      { event: "crm.quote_sent", handler: "plg_automations_on_entry_event", description: "Enrol into flows entered by a sent quote", maxAttempts: 5 },
+      { event: "crm.quote_sent", handler: "plg_automations_on_exit_event", description: "Leave flows that exit on a sent quote", maxAttempts: 5 },
+      { event: "crm.quote_approved", handler: "plg_automations_on_entry_event", description: "Enrol into flows entered by an approved quote", maxAttempts: 5 },
+      { event: "crm.quote_approved", handler: "plg_automations_on_exit_event", description: "Leave flows that exit on an approved quote", maxAttempts: 5 },
+      { event: "crm.deal_won", handler: "plg_automations_on_entry_event", description: "Enrol into flows entered by a won deal", maxAttempts: 5 },
+      { event: "crm.deal_won", handler: "plg_automations_on_exit_event", description: "Leave flows that exit on a won deal", maxAttempts: 5 },
+      { event: "crm.deal_lost", handler: "plg_automations_on_entry_event", description: "Enrol into flows entered by a lost deal", maxAttempts: 5 },
+      { event: "crm.deal_lost", handler: "plg_automations_on_exit_event", description: "Leave flows that exit on a lost deal", maxAttempts: 5 },
+      { event: "crm.deal_idle", handler: "plg_automations_on_entry_event", description: "Enrol into flows entered by an idle deal", maxAttempts: 5 },
+      { event: "crm.deal_idle", handler: "plg_automations_on_exit_event", description: "Leave flows that exit on an idle deal", maxAttempts: 5 }
+    ],
+    // The barrel an app installing this plugin applies. Without it the tables
+    // and functions below simply do not exist there: `chain.json` provisions a
+    // CLUSTER, and the manifest is what provisions an app — this plugin had
+    // neither a `migrations` key nor a barrel to point it at, so fourteen
+    // subscriptions and a whole screen shipped over nothing.
+    migrations: MIGRATIONS.map((m) => ({
+      id: `automations-${m.id}`,
+      version: "1.0.0",
+      sql: m.sql,
+      description: m.id
+    })),
+    locales: automationsLocales,
     widgets: []
   };
 }