@fayz-ai/plugin-blog 0.1.0 → 0.8.1

package/src/data/supabase.ts

@@ -1,28 +1,95 @@
+import { getSupabaseClientOptional, getActiveTenantId } from '@fayz-ai/core'
 import type { BlogDataProvider } from './types'
-import type { BlogPost, BlogListQuery } from '../types'
+import type { BlogPost, BlogListQuery, BlogAuthor } from '../types'
 
 // ---------------------------------------------------------------------------
-// Supabase-backed blog provider — STUB.
+// Supabase-backed blog provider (public/website read side).
 //
-// Deferred (Phase 2): read from a `blog_posts` table (tenant-scoped, RLS) with
-// columns mirroring BlogPost (slug, title, excerpt, body, tag, read_time, date,
-// image, author). Wiring this up is a pure provider swap — no hook/component
-// change — because everything downstream depends only on BlogDataProvider.
+// Reads PUBLISHED posts from the anon-safe view public.v_public_blog_posts
+// (see src/migrations/001_blog.sql §4), scoped to a tenant. The backoffice
+// writes to plg_blog_posts directly via the generic CRUD provider; here we only
+// read the published, column-whitelisted view — safe under the publishable key.
 //
-// Until then this throws, which makes createSafeDataProvider fall back to the
-// mock provider whenever no Supabase client is configured. If a client IS
-// configured but this is still a stub, surface a clear error.
+// The tenant is taken from the configured tenantId (anon site) or, failing that,
+// the active session tenant. Without a client or a tenant we return nothing, and
+// createSafeDataProvider falls back to the mock/seed provider.
 // ---------------------------------------------------------------------------
 
-export function createSupabaseBlogProvider(): BlogDataProvider {
-  const notImplemented = (): never => {
-    throw new Error(
-      '[plugin-blog] Supabase provider not implemented yet — deferred to Phase 2. ' +
-        'Run on the mock/seed provider (no Supabase client configured) for now.',
-    )
+const PUBLIC_VIEW = 'v_public_blog_posts'
+
+export interface SupabaseBlogProviderOptions {
+  /** Tenant whose published posts to read (anon website). Defaults to the active session tenant. */
+  tenantId?: string
+}
+
+function getClient() {
+  const supabase = getSupabaseClientOptional() as {
+    from: (t: string) => any
+  } | null
+  if (!supabase) throw new Error('[plugin-blog] Supabase client not initialized')
+  return supabase
+}
+
+/** Human month-year label (pt-BR) derived from an ISO date, e.g. "Janeiro 2025". */
+function humanDate(iso?: string | null): string {
+  if (!iso) return ''
+  const d = new Date(iso)
+  if (Number.isNaN(d.getTime())) return ''
+  const label = d.toLocaleDateString('pt-BR', { month: 'long', year: 'numeric' })
+  return label.charAt(0).toUpperCase() + label.slice(1)
+}
+
+function toPost(row: Record<string, any>): BlogPost {
+  const author: BlogAuthor = {
+    name: row.author_name ?? 'Equipe',
+    avatarUrl: row.author_avatar_url ?? undefined,
+    role: row.author_role ?? undefined,
+    bio: row.author_bio ?? undefined,
   }
   return {
-    listPosts: (_query?: BlogListQuery): Promise<BlogPost[]> => notImplemented(),
-    getPost: (_slug: string): Promise<BlogPost | null> => notImplemented(),
+    slug: row.slug,
+    title: row.title,
+    excerpt: row.excerpt ?? '',
+    body: row.body ?? '',
+    tag: row.tag ?? '',
+    readTime: row.read_time ?? '',
+    date: humanDate(row.published_at),
+    publishedAt: row.published_at ?? undefined,
+    image: row.cover_image ?? '',
+    author,
+  }
+}
+
+export function createSupabaseBlogProvider(options?: SupabaseBlogProviderOptions): BlogDataProvider {
+  const resolveTenantId = (): string | undefined => options?.tenantId ?? getActiveTenantId() ?? undefined
+
+  return {
+    async listPosts(query?: BlogListQuery): Promise<BlogPost[]> {
+      const tenantId = resolveTenantId()
+      if (!tenantId) return []
+      let q = getClient()
+        .from(PUBLIC_VIEW)
+        .select('*')
+        .eq('tenant_id', tenantId)
+        .order('published_at', { ascending: false, nullsFirst: false })
+      if (query?.tag) q = q.eq('tag', query.tag)
+      if (query?.limit != null) q = q.limit(query.limit)
+      const { data, error } = await q
+      if (error) throw error
+      return (data ?? []).map(toPost)
+    },
+
+    async getPost(slug: string): Promise<BlogPost | null> {
+      const tenantId = resolveTenantId()
+      if (!tenantId) return null
+      const { data, error } = await getClient()
+        .from(PUBLIC_VIEW)
+        .select('*')
+        .eq('tenant_id', tenantId)
+        .eq('slug', slug)
+        .maybeSingle()
+      if (error) throw error
+      return data ? toPost(data) : null
+    },
   }
 }

package/src/index.ts

@@ -7,6 +7,7 @@ import { createSupabaseBlogProvider } from './data/supabase'
 import { BlogProvider, type BlogContextValue } from './context'
 import { BlogList } from './components/BlogList'
 import { PostDetail } from './components/PostDetail'
+import { MIGRATIONS } from './migrations'
 
 // ---------------------------------------------------------------------------
 // @fayz-ai/plugin-blog — website-surface blog/articles plugin.
@@ -32,7 +33,7 @@ export function createBlogPlugin(options?: BlogPluginOptions): BlogWebsitePlugin
   const provider =
     options?.dataProvider ??
     createSafeDataProvider(
-      () => createSupabaseBlogProvider(),
+      () => createSupabaseBlogProvider({ tenantId: options?.tenantId }),
       () => createMockBlogProvider({ seed: options?.seed, defaultAuthor: options?.defaultAuthor }),
     )
 
@@ -59,6 +60,14 @@ export function createBlogPlugin(options?: BlogPluginOptions): BlogWebsitePlugin
       { path: `${config.basePath}/:slug`, component: PostDetail, guard: 'public' },
     ],
     widgets: [],
+    // Owns the blog domain tables (categories + posts + anon-read view). The
+    // marketing "Blog" backoffice writes to these; the website reads them.
+    migrations: MIGRATIONS.map((m) => ({
+      id: `blog-${m.id}`,
+      version: '1.0.0',
+      sql: m.sql,
+      description: 'Blog content model (plg_blog_categories, plg_blog_posts) + anon-read view',
+    })),
   }
 
   return { manifest, Provider, dataProvider: provider }
@@ -66,7 +75,7 @@ export function createBlogPlugin(options?: BlogPluginOptions): BlogWebsitePlugin
 
 // Public API
 export type { BlogPluginOptions, ResolvedBlogConfig } from './config'
-export type { BlogPost, BlogListQuery, BlogAuthor } from './types'
+export type { BlogPost, BlogListQuery, BlogAuthor, BlogCategory } from './types'
 export type { BlogDataProvider } from './data/types'
 export { createMockBlogProvider, createSupabaseBlogProvider } from './data'
 export type { BlogSeed, BlogSeedPost } from './data/mock'

package/src/migrations/001_blog.sql

@@ -0,0 +1,103 @@
+-- ============================================================================
+-- plugin-blog 001: blog content model + public (anon) read surface
+--
+-- Backs the blog backoffice (managed from the marketing plugin's "Blog" tab) and
+-- the public website surface (/blog, /blog/:slug). Prefix: plg_blog_.
+--   §1  plg_blog_categories — first-class category (name/slug/description)
+--   §2  plg_blog_posts       — articles; category_id FK, author byline, status
+--   §3  RLS: authenticated tenant CRUD on both tables (the backoffice)
+--   §4  v_public_blog_posts  — anon-readable view of PUBLISHED posts (the site)
+--
+-- Anon-access design mirrors plugin-agenda's public booking surface: the public
+-- website runs with the publishable key and no session, so canonical tenant RLS
+-- yields nothing. Anon read is granted ONLY through the column-whitelisted,
+-- published-only view (§4); the front provider filters it by tenant_id.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+-- §1 — categories
+CREATE TABLE IF NOT EXISTS public.plg_blog_categories (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  name text NOT NULL,
+  slug text NOT NULL,
+  description text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_blog_categories ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_blog_categories_tenant ON public.plg_blog_categories(tenant_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_blog_categories_tenant_slug ON public.plg_blog_categories(tenant_id, slug);
+
+-- §2 — posts
+CREATE TABLE IF NOT EXISTS public.plg_blog_posts (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  category_id uuid REFERENCES public.plg_blog_categories(id) ON DELETE SET NULL,
+  slug text NOT NULL,
+  title text NOT NULL,
+  excerpt text NOT NULL DEFAULT '',
+  body text NOT NULL DEFAULT '',
+  cover_image text,
+  author_name text,
+  author_role text,
+  author_avatar_url text,
+  author_bio text,
+  status text NOT NULL DEFAULT 'draft'
+    CHECK (status IN ('draft', 'published')),
+  read_time text,
+  published_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_blog_posts ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_blog_posts_tenant ON public.plg_blog_posts(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_blog_posts_category ON public.plg_blog_posts(category_id);
+CREATE INDEX IF NOT EXISTS idx_plg_blog_posts_status ON public.plg_blog_posts(tenant_id, status, published_at DESC);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_blog_posts_tenant_slug ON public.plg_blog_posts(tenant_id, slug);
+
+-- §3 — RLS: authenticated tenant CRUD (the backoffice writes here)
+DROP POLICY IF EXISTS plg_blog_categories_select ON public.plg_blog_categories;
+DROP POLICY IF EXISTS plg_blog_categories_insert ON public.plg_blog_categories;
+DROP POLICY IF EXISTS plg_blog_categories_update ON public.plg_blog_categories;
+DROP POLICY IF EXISTS plg_blog_categories_delete ON public.plg_blog_categories;
+CREATE POLICY plg_blog_categories_select ON public.plg_blog_categories FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_categories_insert ON public.plg_blog_categories FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_categories_update ON public.plg_blog_categories FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_categories_delete ON public.plg_blog_categories FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_blog_categories TO authenticated;
+
+DROP POLICY IF EXISTS plg_blog_posts_select ON public.plg_blog_posts;
+DROP POLICY IF EXISTS plg_blog_posts_insert ON public.plg_blog_posts;
+DROP POLICY IF EXISTS plg_blog_posts_update ON public.plg_blog_posts;
+DROP POLICY IF EXISTS plg_blog_posts_delete ON public.plg_blog_posts;
+CREATE POLICY plg_blog_posts_select ON public.plg_blog_posts FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_posts_insert ON public.plg_blog_posts FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_posts_update ON public.plg_blog_posts FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_posts_delete ON public.plg_blog_posts FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_blog_posts TO authenticated;
+
+-- §4 — anon-readable public catalog (owner-rights view = deliberate, whitelisted,
+-- PUBLISHED only). The front provider filters by tenant_id. Category name is
+-- surfaced as `tag` so the website's BlogPost shape stays unchanged.
+CREATE OR REPLACE VIEW public.v_public_blog_posts AS
+SELECT
+  p.id,
+  p.tenant_id,
+  p.slug,
+  p.title,
+  p.excerpt,
+  p.body,
+  COALESCE(c.name, '')  AS tag,
+  p.cover_image,
+  p.author_name,
+  p.author_role,
+  p.author_avatar_url,
+  p.author_bio,
+  p.read_time,
+  p.published_at
+FROM public.plg_blog_posts p
+LEFT JOIN public.plg_blog_categories c ON c.id = p.category_id
+WHERE p.status = 'published';
+
+GRANT SELECT ON public.v_public_blog_posts TO anon, authenticated, service_role;

package/src/migrations/index.ts

@@ -0,0 +1,112 @@
+// AUTO-GENERATED from 001_blog.sql — regenerate with scripts/embed-migrations.mjs
+// SQL files are the source of truth; this inline copy lets the manifest declare
+// migrations as data. Do not edit by hand — run the embed script instead.
+
+export const MIGRATION_001_BLOG = `-- ============================================================================
+-- plugin-blog 001: blog content model + public (anon) read surface
+--
+-- Backs the blog backoffice (managed from the marketing plugin's "Blog" tab) and
+-- the public website surface (/blog, /blog/:slug). Prefix: plg_blog_.
+--   §1  plg_blog_categories — first-class category (name/slug/description)
+--   §2  plg_blog_posts       — articles; category_id FK, author byline, status
+--   §3  RLS: authenticated tenant CRUD on both tables (the backoffice)
+--   §4  v_public_blog_posts  — anon-readable view of PUBLISHED posts (the site)
+--
+-- Anon-access design mirrors plugin-agenda's public booking surface: the public
+-- website runs with the publishable key and no session, so canonical tenant RLS
+-- yields nothing. Anon read is granted ONLY through the column-whitelisted,
+-- published-only view (§4); the front provider filters it by tenant_id.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+-- §1 — categories
+CREATE TABLE IF NOT EXISTS public.plg_blog_categories (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  name text NOT NULL,
+  slug text NOT NULL,
+  description text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_blog_categories ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_blog_categories_tenant ON public.plg_blog_categories(tenant_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_blog_categories_tenant_slug ON public.plg_blog_categories(tenant_id, slug);
+
+-- §2 — posts
+CREATE TABLE IF NOT EXISTS public.plg_blog_posts (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  category_id uuid REFERENCES public.plg_blog_categories(id) ON DELETE SET NULL,
+  slug text NOT NULL,
+  title text NOT NULL,
+  excerpt text NOT NULL DEFAULT '',
+  body text NOT NULL DEFAULT '',
+  cover_image text,
+  author_name text,
+  author_role text,
+  author_avatar_url text,
+  author_bio text,
+  status text NOT NULL DEFAULT 'draft'
+    CHECK (status IN ('draft', 'published')),
+  read_time text,
+  published_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_blog_posts ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_blog_posts_tenant ON public.plg_blog_posts(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_blog_posts_category ON public.plg_blog_posts(category_id);
+CREATE INDEX IF NOT EXISTS idx_plg_blog_posts_status ON public.plg_blog_posts(tenant_id, status, published_at DESC);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_blog_posts_tenant_slug ON public.plg_blog_posts(tenant_id, slug);
+
+-- §3 — RLS: authenticated tenant CRUD (the backoffice writes here)
+DROP POLICY IF EXISTS plg_blog_categories_select ON public.plg_blog_categories;
+DROP POLICY IF EXISTS plg_blog_categories_insert ON public.plg_blog_categories;
+DROP POLICY IF EXISTS plg_blog_categories_update ON public.plg_blog_categories;
+DROP POLICY IF EXISTS plg_blog_categories_delete ON public.plg_blog_categories;
+CREATE POLICY plg_blog_categories_select ON public.plg_blog_categories FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_categories_insert ON public.plg_blog_categories FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_categories_update ON public.plg_blog_categories FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_categories_delete ON public.plg_blog_categories FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_blog_categories TO authenticated;
+
+DROP POLICY IF EXISTS plg_blog_posts_select ON public.plg_blog_posts;
+DROP POLICY IF EXISTS plg_blog_posts_insert ON public.plg_blog_posts;
+DROP POLICY IF EXISTS plg_blog_posts_update ON public.plg_blog_posts;
+DROP POLICY IF EXISTS plg_blog_posts_delete ON public.plg_blog_posts;
+CREATE POLICY plg_blog_posts_select ON public.plg_blog_posts FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_posts_insert ON public.plg_blog_posts FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_posts_update ON public.plg_blog_posts FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+CREATE POLICY plg_blog_posts_delete ON public.plg_blog_posts FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_blog_posts TO authenticated;
+
+-- §4 — anon-readable public catalog (owner-rights view = deliberate, whitelisted,
+-- PUBLISHED only). The front provider filters by tenant_id. Category name is
+-- surfaced as \`tag\` so the website's BlogPost shape stays unchanged.
+CREATE OR REPLACE VIEW public.v_public_blog_posts AS
+SELECT
+  p.id,
+  p.tenant_id,
+  p.slug,
+  p.title,
+  p.excerpt,
+  p.body,
+  COALESCE(c.name, '')  AS tag,
+  p.cover_image,
+  p.author_name,
+  p.author_role,
+  p.author_avatar_url,
+  p.author_bio,
+  p.read_time,
+  p.published_at
+FROM public.plg_blog_posts p
+LEFT JOIN public.plg_blog_categories c ON c.id = p.category_id
+WHERE p.status = 'published';
+
+GRANT SELECT ON public.v_public_blog_posts TO anon, authenticated, service_role;
+`
+
+export const MIGRATIONS: Array<{ id: string; sql: string }> = [
+  { id: "001_blog", sql: MIGRATION_001_BLOG },
+]

package/src/types.ts

@@ -15,6 +15,19 @@ export interface BlogAuthor {
   bio?: string
 }
 
+/**
+ * First-class blog category. Managed in the backoffice (marketing "Blog" tab);
+ * a post references one via categoryId. The website's BlogPost surfaces the
+ * category's `name` as its `tag` string so presentation stays unchanged.
+ */
+export interface BlogCategory {
+  id: string
+  name: string
+  /** URL-safe identifier (unique per tenant). */
+  slug: string
+  description?: string
+}
+
 export interface BlogPost {
   /** URL-safe identifier used for the /blog/:slug detail route. */
   slug: string
@@ -23,7 +36,7 @@ export interface BlogPost {
   excerpt: string
   /** Full article body. Plain text or lightweight markdown (paragraphs split on blank lines). */
   body: string
-  /** Category / topic label (e.g. "Periodontia"). */
+  /** Category / topic label (e.g. "Periodontia"). Derived from the post's category name. */
   tag: string
   /** Human-readable reading time (e.g. "5 min"). */
   readTime: string