@fayz-ai/plugin-conversations 0.10.0 → 0.11.0

package/dist/index.js

@@ -1,9 +1,9 @@
-import React4 from 'react';
-import { registerTranslations, getSupabaseClientOptional, getActiveTenantId, useTranslation } from '@fayz-ai/core';
+import React4, { useState, useRef, useEffect, useCallback } from 'react';
+import { createConnectionStore, connectionRuns, connectionStatus, getSupabaseClientOptional, useActiveTenantId, registerTranslations, getActiveTenantId, CONNECTOR_RUNTIME_TOKEN_HEADER, connectorRuntimeToken, useTranslation } from '@fayz-ai/core';
 import { useStore } from 'zustand';
-import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
-import { SquarePen, MessageSquare, Globe, Mail, Instagram, Phone, Search, Inbox, ChevronLeft, Clock, Archive, PanelRight, Send, X, User, MapPin, Tag, StickyNote, Link2 } from 'lucide-react';
-import { PageHeaderActions, Button, cn, Input, Skeleton, toast } from '@fayz-ai/ui';
+import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
+import { Loader2, ExternalLink, SquarePen, MessageSquare, Globe, Mail, Instagram, Phone, Search, Inbox, ChevronLeft, Clock, Archive, PanelRight, Send, X, User, MapPin, Tag, StickyNote, Link2 } from 'lucide-react';
+import { Input, Button, toast, PageHeaderActions, cn, Skeleton } from '@fayz-ai/ui';
 import { PermissionGate, useLimitGuard, RightRailPage, ContactPicker, invalidateLimit } from '@fayz-ai/admin';
 import { createStore } from 'zustand/vanilla';
 
@@ -14,16 +14,16 @@ var DEFAULT_CONVERSATIONS_CONFIG = {
 var StoreContext = React4.createContext(null);
 var ConfigContext = React4.createContext(DEFAULT_CONVERSATIONS_CONFIG);
 function ConversationsContextProvider({
-  store,
+  store: store2,
   config = DEFAULT_CONVERSATIONS_CONFIG,
   children
 }) {
-  return /* @__PURE__ */ jsx(StoreContext.Provider, { value: store, children: /* @__PURE__ */ jsx(ConfigContext.Provider, { value: config, children }) });
+  return /* @__PURE__ */ jsx(StoreContext.Provider, { value: store2, children: /* @__PURE__ */ jsx(ConfigContext.Provider, { value: config, children }) });
 }
 function useConversationsStore(selector) {
-  const store = React4.useContext(StoreContext);
-  if (!store) throw new Error("useConversationsStore must be used within ConversationsPage");
-  return useStore(store, selector);
+  const store2 = React4.useContext(StoreContext);
+  if (!store2) throw new Error("useConversationsStore must be used within ConversationsPage");
+  return useStore(store2, selector);
 }
 function useConversationsConfig() {
   return React4.useContext(ConfigContext);
@@ -604,11 +604,11 @@ function InboxView() {
     ] })
   ] });
 }
-function ConversationsPage({ store, config }) {
+function ConversationsPage({ store: store2, config }) {
   React4.useEffect(() => {
-    void store.getState().load();
+    void store2.getState().load();
   }, []);
-  return /* @__PURE__ */ jsx(ConversationsContextProvider, { store, config, children: /* @__PURE__ */ jsx(InboxView, {}) });
+  return /* @__PURE__ */ jsx(ConversationsContextProvider, { store: store2, config, children: /* @__PURE__ */ jsx(InboxView, {}) });
 }
 
 // src/data/accents.ts
@@ -870,7 +870,8 @@ function createMockConversationsProvider(config) {
 // src/data/tables.ts
 var T = {
   conversations: "plg_conversations",
-  messages: "plg_conversation_messages"
+  messages: "plg_conversation_messages",
+  channels: "plg_conversations_channels"
 };
 
 // src/data/supabase.ts
@@ -909,7 +910,7 @@ function createSupabaseConversationsProvider(config) {
     if (!config?.tenantId) return void 0;
     return typeof config.tenantId === "function" ? config.tenantId() : config.tenantId;
   }
-  function client() {
+  function client2() {
     const supabase = config?.supabaseClient ?? getSupabaseClientOptional();
     if (!supabase) {
       throw new Error(
@@ -920,7 +921,7 @@ function createSupabaseConversationsProvider(config) {
   }
   return {
     async listConversations(query) {
-      let q = client().from(T.conversations).select("*");
+      let q = client2().from(T.conversations).select("*");
       const tenantId = resolveTenantId();
       if (tenantId) q = q.eq("tenant_id", tenantId);
       if (query?.channel && query.channel !== "all") {
@@ -943,7 +944,7 @@ function createSupabaseConversationsProvider(config) {
       return (data ?? []).map(mapConversation);
     },
     async getMessages(conversationId) {
-      const selected = client().from(T.messages).select("*");
+      const selected = client2().from(T.messages).select("*");
       const filtered = selected.eq(
         "conversation_id",
         conversationId
@@ -980,7 +981,7 @@ function createSupabaseConversationsProvider(config) {
         note: input.note?.trim() || null
       };
       if (tenantId) convRow.tenant_id = tenantId;
-      const { data: created, error } = await client().from(T.conversations).insert(convRow).select().single();
+      const { data: created, error } = await client2().from(T.conversations).insert(convRow).select().single();
       if (error) throw error;
       if (!created) throw new Error("Conversation not created");
       if (firstMessage) {
@@ -993,13 +994,13 @@ function createSupabaseConversationsProvider(config) {
           at: now
         };
         if (tenantId) msgRow.tenant_id = tenantId;
-        await client().from(T.messages).insert(msgRow);
+        await client2().from(T.messages).insert(msgRow);
       }
       return mapConversation(created);
     },
     async sendMessage(input) {
       const tenantId = resolveTenantId();
-      const convSelected = client().from(T.conversations).select(
+      const convSelected = client2().from(T.conversations).select(
         "channel"
       );
       const convFiltered = convSelected.eq(
@@ -1018,9 +1019,9 @@ function createSupabaseConversationsProvider(config) {
         at
       };
       if (tenantId) row.tenant_id = tenantId;
-      const { data: created, error } = await client().from(T.messages).insert(row).select().single();
+      const { data: created, error } = await client2().from(T.messages).insert(row).select().single();
       if (error) throw error;
-      await client().from(T.conversations).update({
+      await client2().from(T.conversations).update({
         last_message_preview: input.body,
         last_message_at: at,
         unread_count: 0,
@@ -1029,13 +1030,13 @@ function createSupabaseConversationsProvider(config) {
       return mapMessage(created ?? row);
     },
     async markRead(conversationId) {
-      const { error } = await client().from(T.conversations).update({
+      const { error } = await client2().from(T.conversations).update({
         unread_count: 0
       }).eq("id", conversationId);
       if (error) throw error;
     },
     async setStatus(conversationId, status) {
-      const updated = client().from(T.conversations).update({
+      const updated = client2().from(T.conversations).update({
         status
       });
       const filtered = updated.eq("id", conversationId);
@@ -1260,6 +1261,471 @@ var conversationsLocales = {
   en,
   "pt-BR": ptBR
 };
+function mapChannel(r) {
+  return {
+    id: String(r.id),
+    tenantId: r.tenant_id ?? null,
+    channel: r.channel ?? "whatsapp",
+    provider: String(r.provider ?? ""),
+    providerNumberId: String(r.provider_number_id ?? ""),
+    phoneE164: r.phone_e164 ?? null,
+    kind: r.kind ?? "dedicated",
+    status: r.status ?? "requested",
+    displayName: r.display_name ?? null,
+    metadata: r.metadata ?? {},
+    createdAt: String(r.created_at ?? ""),
+    updatedAt: String(r.updated_at ?? "")
+  };
+}
+async function listMessagingChannels(options = {}) {
+  const supabase = options.supabaseClient ?? getSupabaseClientOptional();
+  if (!supabase) {
+    throw new Error(
+      "[plugin-conversations] Supabase client not available. Pass supabaseClient or register the global client via createFayzApp."
+    );
+  }
+  let q = supabase.from(T.channels).select("*");
+  if (options.provider) q = q.eq("provider", options.provider);
+  if (options.channel) q = q.eq("channel", options.channel);
+  q = q.order("kind", { ascending: true });
+  const { data, error } = await q;
+  if (error) throw error;
+  return (data ?? []).map(mapChannel);
+}
+var CHANNEL_CLAIM_TIMELINE = [
+  "requested",
+  "provisioning",
+  "provisioned",
+  "verifying",
+  "active"
+];
+var LIVE_CHANNEL_STATUSES = [
+  "requested",
+  "provisioning",
+  "provisioned",
+  "verifying",
+  "active"
+];
+function isDeadChannelStatus(status) {
+  return !LIVE_CHANNEL_STATUSES.includes(status);
+}
+function isPendingChannelStatus(status) {
+  return LIVE_CHANNEL_STATUSES.includes(status) && status !== "active";
+}
+function findDedicatedChannel(channels, tenantId) {
+  return channels.find(
+    (channel) => channel.kind === "dedicated" && (!tenantId || channel.tenantId === tenantId) && !isDeadChannelStatus(channel.status)
+  ) ?? null;
+}
+function findFallbackChannel(channels) {
+  return channels.find((channel) => channel.kind === "fallback") ?? null;
+}
+function canClaimDedicated(channels, tenantId) {
+  return findDedicatedChannel(channels, tenantId) === null;
+}
+var TYXTER_NUMBER_CLAIM_FUNCTION = "tyxter-number-claim";
+function client() {
+  const supabase = getSupabaseClientOptional();
+  if (!supabase) throw new Error("Sem conex\xE3o com o banco para falar com a Tyxter.");
+  return supabase;
+}
+async function invoke(body) {
+  let headers;
+  try {
+    headers = { [CONNECTOR_RUNTIME_TOKEN_HEADER]: await connectorRuntimeToken({ tenantId: String(body.tenantId ?? "") }) };
+  } catch {
+    headers = void 0;
+  }
+  const { data, error } = await client().functions.invoke(TYXTER_NUMBER_CLAIM_FUNCTION, {
+    body,
+    ...headers ? { headers } : {}
+  });
+  if (error) throw new Error(error.message);
+  return data;
+}
+function returnUrlFrom(href) {
+  if (!href) return null;
+  try {
+    const url = new URL(href);
+    url.hash = "";
+    url.username = "";
+    url.password = "";
+    return url.toString();
+  } catch {
+    return null;
+  }
+}
+function currentReturnUrl() {
+  return typeof window === "undefined" ? null : returnUrlFrom(window.location.href);
+}
+function claimDedicatedNumber(input) {
+  return invoke({
+    action: "claim",
+    tenantId: input.tenantId,
+    ddd: input.ddd,
+    returnUrl: currentReturnUrl()
+  });
+}
+function refreshDedicatedNumbers(tenantId) {
+  return invoke({ action: "status", tenantId });
+}
+function metaRegistrationHandoff(tenantId) {
+  return invoke({ action: "handoff", tenantId, returnUrl: currentReturnUrl() });
+}
+var PAYMENT_PREFLIGHT_FUNCTION = "tyxter-payment-preflight";
+async function invoke2(body, tenantId) {
+  const supabase = getSupabaseClientOptional();
+  if (!supabase) throw new Error("Sem conex\xE3o com o banco para verificar os pagamentos.");
+  const tenant = tenantId ?? getActiveTenantId();
+  if (!tenant) throw new Error("Sem neg\xF3cio selecionado.");
+  const { data, error } = await supabase.functions.invoke(PAYMENT_PREFLIGHT_FUNCTION, {
+    body: { ...body, tenantId: tenant }
+  });
+  if (!error) return data;
+  let message = "";
+  try {
+    const payload = await error?.context?.json?.();
+    message = String(payload?.message ?? payload?.error ?? "").trim();
+  } catch {
+  }
+  throw new Error(message || error.message);
+}
+async function readPaymentReadiness(tenantId) {
+  const answer = await invoke2({ action: "status" }, tenantId);
+  return answer.payments;
+}
+async function openPaymentSetupSession(tenantId) {
+  return await invoke2({ action: "connect" }, tenantId);
+}
+function canOfferPayment(readiness) {
+  if (!readiness?.ready) return false;
+  return readiness.mode !== null;
+}
+var TYXTER_CONNECTOR_ID = "tyxter";
+var TYXTER_LATENCY_BUDGET_MS = 4e3;
+var store = createConnectionStore(TYXTER_CONNECTOR_ID);
+var KIND_LABEL = {
+  fallback: "N\xFAmero da plataforma",
+  dedicated: "N\xFAmero dedicado"
+};
+var STATUS_LABEL = {
+  requested: "Solicitado",
+  provisioning: "Em prepara\xE7\xE3o",
+  provisioned: "Preparado",
+  verifying: "Em verifica\xE7\xE3o",
+  active: "Ativo",
+  failed: "Falhou",
+  released: "Liberado",
+  disconnected: "Desconectado"
+};
+var POLL_INTERVAL_MS = 5e3;
+function ClaimTimeline({ status }) {
+  if (status === "failed" || status === "released" || status === "disconnected") {
+    return /* @__PURE__ */ jsx("p", { className: "text-xs text-destructive", children: status === "failed" ? "O pedido n\xE3o foi conclu\xEDdo. Voc\xEA pode tentar de novo." : `Este n\xFAmero saiu do ar (${STATUS_LABEL[status]}).` });
+  }
+  const current = CHANNEL_CLAIM_TIMELINE.indexOf(status);
+  return /* @__PURE__ */ jsx("ol", { className: "space-y-1", children: CHANNEL_CLAIM_TIMELINE.map((step, index) => {
+    const done = current > index;
+    const now = current === index;
+    return /* @__PURE__ */ jsxs(
+      "li",
+      {
+        className: `flex items-center gap-2 text-xs ${now ? "font-medium text-foreground" : done ? "text-muted-foreground" : "text-muted-foreground/60"}`,
+        children: [
+          /* @__PURE__ */ jsx("span", { "aria-hidden": true, className: `h-1.5 w-1.5 rounded-full ${done || now ? "bg-primary" : "bg-border"}` }),
+          STATUS_LABEL[step],
+          now && status !== "active" && /* @__PURE__ */ jsx(Loader2, { className: "h-3 w-3 animate-spin" })
+        ]
+      },
+      step
+    );
+  }) });
+}
+function MetaRegistrationCard({ handoff }) {
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-2 rounded-md border border-primary/40 bg-primary/5 p-3", children: [
+    /* @__PURE__ */ jsx("p", { className: "text-xs font-medium text-foreground", children: "Falta liberar o n\xFAmero na Meta" }),
+    /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "O n\xFAmero j\xE1 \xE9 seu, mas ainda n\xE3o pode enviar: a Meta exige que algu\xE9m conclua o cadastro do WhatsApp numa janela do navegador. \xC9 r\xE1pido, e s\xF3 precisa ser feito uma vez." }),
+    /* @__PURE__ */ jsx(Button, { asChild: true, size: "sm", children: /* @__PURE__ */ jsxs("a", { href: handoff.url, target: "_blank", rel: "noopener noreferrer", children: [
+      "Concluir cadastro na Meta",
+      /* @__PURE__ */ jsx(ExternalLink, { className: "ml-1.5 h-3.5 w-3.5" })
+    ] }) }),
+    handoff.source === "default" && /* @__PURE__ */ jsx("p", { className: "text-[11px] text-muted-foreground", children: "Confira se a conta aberta no navegador \xE9 a certa antes de concluir." })
+  ] });
+}
+function TyxterPaymentsPanel() {
+  const [readiness, setReadiness] = useState(null);
+  const [error, setError] = useState(null);
+  const [loading, setLoading] = useState(true);
+  const [handoff, setHandoff] = useState(null);
+  const [opening, setOpening] = useState(false);
+  useEffect(() => {
+    let cancelled = false;
+    void readPaymentReadiness().then((value) => {
+      if (!cancelled) setReadiness(value);
+    }).catch((caught) => {
+      if (!cancelled) setError(caught instanceof Error ? caught.message : "N\xE3o deu para verificar agora.");
+    }).finally(() => {
+      if (!cancelled) setLoading(false);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  const connect = async () => {
+    setOpening(true);
+    setError(null);
+    try {
+      const session = await openPaymentSetupSession();
+      setHandoff(session.setupUrl);
+    } catch (caught) {
+      setError(caught instanceof Error ? caught.message : "N\xE3o deu para abrir a configura\xE7\xE3o.");
+    } finally {
+      setOpening(false);
+    }
+  };
+  const ready = canOfferPayment(readiness);
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-3 border-t pt-4", children: [
+    /* @__PURE__ */ jsxs("div", { children: [
+      /* @__PURE__ */ jsx("p", { className: "text-sm font-medium text-foreground", children: "Pagamento no WhatsApp" }),
+      /* @__PURE__ */ jsx("p", { className: "mt-0.5 text-xs text-muted-foreground", children: "Com isso ligado, o cliente recebe o Pix na pr\xF3pria conversa e o agendamento fica marcado como pago sozinho." })
+    ] }),
+    loading && /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "Verificando\u2026" }),
+    !loading && ready && /* @__PURE__ */ jsxs("p", { className: "text-xs text-foreground", children: [
+      /* @__PURE__ */ jsx("span", { className: "font-medium text-emerald-600", children: "Pronto para cobrar" }),
+      readiness?.sandbox && /* @__PURE__ */ jsx("span", { className: "ml-2 rounded bg-amber-100 px-1.5 py-0.5 text-[11px] font-medium text-amber-800", children: "sandbox \u2014 o dinheiro n\xE3o \xE9 real" })
+    ] }),
+    !loading && !ready && /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+      /* @__PURE__ */ jsxs("p", { className: "text-xs text-muted-foreground", children: [
+        "Ainda n\xE3o d\xE1 para cobrar por aqui. A conta de pagamento \xE9 configurada na Tyxter, em uma p\xE1gina deles \u2014 a sua chave n\xE3o passa por este app.",
+        readiness?.reason ? ` (${readiness.reason})` : ""
+      ] }),
+      handoff ? /* @__PURE__ */ jsx(
+        "a",
+        {
+          href: handoff,
+          target: "_blank",
+          rel: "noreferrer",
+          className: "inline-block rounded-md border px-3 py-1.5 text-xs font-medium hover:bg-muted",
+          children: "Abrir a configura\xE7\xE3o de pagamento \u2192"
+        }
+      ) : /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          onClick: () => {
+            void connect();
+          },
+          disabled: opening,
+          className: "rounded-md border px-3 py-1.5 text-xs font-medium hover:bg-muted disabled:opacity-50",
+          children: opening ? "Abrindo\u2026" : "Configurar pagamento"
+        }
+      )
+    ] }),
+    error && /* @__PURE__ */ jsx("p", { className: "text-xs text-destructive", children: error })
+  ] });
+}
+function TyxterExtraPanel() {
+  const tenantId = useActiveTenantId();
+  const [channels, setChannels] = useState(null);
+  const [error, setError] = useState(null);
+  const [ddd, setDdd] = useState("");
+  const [claiming, setClaiming] = useState(false);
+  const [handoff, setHandoff] = useState(null);
+  const mounted = useRef(true);
+  useEffect(() => {
+    mounted.current = true;
+    return () => {
+      mounted.current = false;
+    };
+  }, []);
+  const load = useCallback(async () => {
+    try {
+      const rows = await listMessagingChannels({ provider: TYXTER_CONNECTOR_ID, channel: "whatsapp" });
+      if (mounted.current) {
+        setChannels(rows);
+        setError(null);
+      }
+    } catch {
+      if (mounted.current) setError("N\xE3o conseguimos ler os n\xFAmeros agora.");
+    }
+  }, []);
+  useEffect(() => {
+    void load();
+  }, [load]);
+  const dedicated = channels ? findDedicatedChannel(channels, tenantId) : null;
+  const fallback = channels ? findFallbackChannel(channels) : null;
+  const pending = dedicated ? isPendingChannelStatus(dedicated.status) : false;
+  useEffect(() => {
+    if (!pending || !tenantId) return void 0;
+    const timer = setInterval(() => {
+      void refreshDedicatedNumbers(tenantId).then(() => load()).catch(() => {
+      });
+    }, POLL_INTERVAL_MS);
+    return () => clearInterval(timer);
+  }, [pending, tenantId, load]);
+  const registered = !!dedicated?.metadata?.meta_phone_number_id;
+  useEffect(() => {
+    if (!tenantId || !dedicated || dedicated.status !== "active" || registered || handoff) return;
+    void metaRegistrationHandoff(tenantId).then((answer) => {
+      if (mounted.current) setHandoff(answer.metaRegistration);
+    }).catch(() => {
+    });
+  }, [tenantId, dedicated, registered, handoff]);
+  const canClaim = !!channels && !!tenantId && canClaimDedicated(channels, tenantId);
+  async function onClaim() {
+    if (!tenantId || !/^\d{2}$/.test(ddd)) return;
+    setClaiming(true);
+    try {
+      const result = await claimDedicatedNumber({ tenantId, ddd });
+      setHandoff(result.metaRegistration);
+      setDdd("");
+      await load();
+      toast.success("N\xFAmero solicitado. Acompanhe aqui o andamento.");
+    } catch (caught) {
+      toast.error(caught instanceof Error ? caught.message : "N\xE3o foi poss\xEDvel pedir o n\xFAmero.");
+    } finally {
+      if (mounted.current) setClaiming(false);
+    }
+  }
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-3", children: [
+    /* @__PURE__ */ jsxs("div", { children: [
+      /* @__PURE__ */ jsx("p", { className: "text-sm font-medium text-foreground", children: "N\xFAmeros" }),
+      /* @__PURE__ */ jsx("p", { className: "mt-0.5 text-xs text-muted-foreground", children: "Por onde as suas mensagens de WhatsApp saem hoje." })
+    ] }),
+    error && /* @__PURE__ */ jsx("p", { className: "text-xs text-destructive", children: error }),
+    channels && channels.length === 0 && /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "Nenhum n\xFAmero configurado ainda. Assim que a plataforma liberar o n\xFAmero compartilhado, ele aparece aqui." }),
+    channels && channels.length > 0 && /* @__PURE__ */ jsx("ul", { className: "space-y-2", children: channels.map((channel) => /* @__PURE__ */ jsxs(
+      "li",
+      {
+        className: "flex flex-wrap items-baseline justify-between gap-2 rounded-md border bg-muted/30 p-3 text-xs",
+        children: [
+          /* @__PURE__ */ jsx("span", { className: "font-medium text-foreground", children: channel.phoneE164 ?? channel.providerNumberId }),
+          /* @__PURE__ */ jsxs("span", { className: "text-muted-foreground", children: [
+            KIND_LABEL[channel.kind],
+            " \xB7 ",
+            STATUS_LABEL[channel.status]
+          ] })
+        ]
+      },
+      channel.id
+    )) }),
+    dedicated && /* @__PURE__ */ jsxs("div", { className: "space-y-2 rounded-md border p-3", children: [
+      /* @__PURE__ */ jsx("p", { className: "text-xs font-medium text-foreground", children: "Seu n\xFAmero dedicado" }),
+      /* @__PURE__ */ jsx(ClaimTimeline, { status: dedicated.status }),
+      dedicated.status === "active" && !handoff && /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "Ativo. As suas mensagens saem por ele, com o seu nome e sem dividir com ningu\xE9m." })
+    ] }),
+    handoff && /* @__PURE__ */ jsx(MetaRegistrationCard, { handoff }),
+    canClaim && /* @__PURE__ */ jsxs("div", { className: "space-y-2 border-t pt-3", children: [
+      /* @__PURE__ */ jsx("p", { className: "text-xs font-medium text-foreground", children: "Quer um n\xFAmero s\xF3 seu?" }),
+      /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: fallback ? "Hoje as suas mensagens saem pelo n\xFAmero da plataforma, dividido com outros neg\xF3cios. Um n\xFAmero dedicado sai s\xF3 com o seu nome, libera os seus pr\xF3prios modelos de mensagem e tem limite de envio pr\xF3prio." : "Um n\xFAmero dedicado sai s\xF3 com o seu nome e tem limite de envio pr\xF3prio." }),
+      /* @__PURE__ */ jsxs("div", { className: "flex items-end gap-2", children: [
+        /* @__PURE__ */ jsxs("label", { className: "text-xs text-muted-foreground", children: [
+          "DDD",
+          /* @__PURE__ */ jsx(
+            Input,
+            {
+              value: ddd,
+              onChange: (e) => setDdd(e.target.value.replace(/\D/g, "").slice(0, 2)),
+              inputMode: "numeric",
+              placeholder: "21",
+              className: "mt-1 w-20",
+              "aria-label": "DDD do n\xFAmero dedicado"
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsxs(Button, { size: "sm", disabled: claiming || !/^\d{2}$/.test(ddd), onClick: () => void onClaim(), children: [
+          claiming && /* @__PURE__ */ jsx(Loader2, { className: "mr-1.5 h-3.5 w-3.5 animate-spin" }),
+          "Solicitar n\xFAmero dedicado"
+        ] })
+      ] }),
+      /* @__PURE__ */ jsx("p", { className: "text-[11px] text-muted-foreground", children: "O n\xFAmero \xE9 alugado no m\xEAs e, depois que chegar, ainda precisa de um cadastro r\xE1pido na Meta para come\xE7ar a enviar." })
+    ] }),
+    /* @__PURE__ */ jsx(TyxterPaymentsPanel, {})
+  ] });
+}
+var tyxterConnectorDef = {
+  id: TYXTER_CONNECTOR_ID,
+  hostPluginId: "conversations",
+  name: "Tyxter",
+  description: "WhatsApp j\xE1 pronto: confirma\xE7\xF5es e lembretes saem por um n\xFAmero da plataforma, e a resposta do cliente cai na sua caixa de entrada.",
+  icon: "MessageCircle",
+  logoUrl: "https://assets.fayz.ai/connectors/tyxter.png",
+  category: "messaging",
+  authKind: "api-key",
+  // Sending is in line with the automation that asked for it; the reply, the
+  // delivery status and the template approvals arrive later and file runs.
+  planes: ["request", "sync"],
+  direction: "outbound",
+  docsUrl: "https://tyxter.com/docs",
+  // A message that does not go out must never take the booking with it. The
+  // opposite verdict from a payment gateway, and for the opposite reason.
+  latencyBudgetMs: TYXTER_LATENCY_BUDGET_MS,
+  onFailure: "degrade",
+  permissions: [
+    {
+      kind: "data",
+      resource: "conversation",
+      actions: ["read", "write"],
+      reason: "Abrir a conversa do cliente no WhatsApp e mant\xEA-la em dia \u2014 \xE9 onde a mensagem enviada e a resposta dele ficam juntas."
+    },
+    {
+      kind: "data",
+      resource: "message",
+      actions: ["read", "write"],
+      reason: "Guardar cada mensagem enviada e recebida, com o status que o WhatsApp devolve (enviada, entregue, lida)."
+    },
+    {
+      kind: "data",
+      resource: "message_template",
+      actions: ["read", "write"],
+      reason: "Ler os modelos de mensagem deste app e guardar o que a Meta respondeu sobre cada um: aprovado, recusado ou pausado."
+    }
+  ],
+  // No form: the key is the platform's. The connect step says so on its own
+  // (`connectors.authorize.nothingToFill`) rather than drawing an empty grid.
+  fields: [],
+  invokedAt: [
+    {
+      key: "messaging.send",
+      label: "Uma automa\xE7\xE3o dispara e a mensagem sai no WhatsApp do cliente",
+      touches: ["conversation", "message"]
+    },
+    {
+      key: "conversations.inbound",
+      label: "O cliente responde, e a resposta entra na caixa de entrada",
+      plane: "sync",
+      trigger: "webhook",
+      touches: ["conversation", "message"]
+    },
+    {
+      key: "messaging.template_sync",
+      label: "Os modelos de mensagem v\xE3o para aprova\xE7\xE3o da Meta e o resultado volta para c\xE1",
+      plane: "sync",
+      trigger: "scheduled",
+      touches: ["message_template"]
+    }
+  ],
+  howItSyncs: [
+    "As mensagens saem por um n\xFAmero de WhatsApp da plataforma, que j\xE1 vem pronto \u2014 voc\xEA n\xE3o cadastra chave nenhuma nem precisa de um chip s\xF3 seu.",
+    "Como esse n\xFAmero \xE9 dividido com outros neg\xF3cios, o nome do seu vai escrito no come\xE7o da mensagem, e s\xF3 modelos j\xE1 aprovados pela Meta podem sair por ele.",
+    "Se voc\xEA pedir um n\xFAmero dedicado, ele passa a ser o remetente assim que ficar ativo \u2014 a\xED a mensagem sai s\xF3 com o seu nome e nada mais \xE9 dividido.",
+    "A resposta do cliente volta para Conversas em segundos, e bot\xF5es como Confirmar e Cancelar j\xE1 atualizam o agendamento sozinhos."
+  ],
+  ...connectionStatus(
+    TYXTER_CONNECTOR_ID,
+    (connection) => ({ connected: !!connection?.active, plane: "request" }),
+    { store: () => store }
+  ),
+  ...connectionRuns(store),
+  // Nothing to receive: the hub split out a credential half that does not exist
+  // for this connector, so `values` is empty and consent is the whole act.
+  saveConnection: async () => {
+    await store.save({ active: true });
+  },
+  disconnect: () => store.disconnect(),
+  disconnectNote: "Desconectar para de enviar e de receber mensagens no WhatsApp. As conversas que j\xE1 existem continuam aqui.",
+  ExtraPanel: TyxterExtraPanel
+};
 
 // src/migrations/index.ts
 var MIGRATION_001_CONVERSATIONS = `-- ============================================================================
@@ -1360,6 +1826,537 @@ CREATE INDEX IF NOT EXISTS idx_plg_conversations_person
   ON public.plg_conversations(tenant_id, contact_person_id)
   WHERE contact_person_id IS NOT NULL;
 `;
+var MIGRATION_003_CHANNELS = `-- ============================================================================
+-- plugin-conversations 003: channel accounts \u2014 WHICH number a message leaves by.
+--
+-- The inbox has always been the read/compose surface for rows a connector
+-- delivered out-of-band. This is the first table that says where those rows
+-- come FROM, and it exists because WhatsApp has two number models at once:
+--
+--   \u2022 kind 'fallback'  \u2014 the product's own number, shared by every tenant.
+--     tenant_id IS NULL: it belongs to the software, not to a salon, and a
+--     tenant column with a made-up value there would make every read lie.
+--   \u2022 kind 'dedicated' \u2014 a number rented for one tenant. Once it is \`active\`
+--     it wins over the fallback; until then the fallback keeps carrying.
+--
+-- Provider-neutral on purpose (\`provider\`, \`provider_number_id\`): the sender
+-- model is a WhatsApp fact, not a Tyxter fact, and the second messaging
+-- provider must not need a second table.
+--
+-- Writes are SERVICE-ROLE ONLY. Every row is created by a webhook or by an
+-- edge function acting on the provider's answer \u2014 a member who could edit
+-- \`provider_number_id\` could point another tenant's replies at their own inbox.
+-- Members read, and the fallback row is readable by all of them because it is
+-- the number their own messages go out on.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS public.plg_conversations_channels (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  -- NULL = the product fallback row. Not a missing value: an owner.
+  tenant_id uuid REFERENCES public.tenants(id) ON DELETE CASCADE,
+  channel text NOT NULL DEFAULT 'whatsapp'
+    CHECK (channel IN ('sms', 'whatsapp', 'instagram', 'email', 'webchat')),
+  provider text NOT NULL,
+  -- The provider's handle for the number ('pn_\u2026'); what a webhook routes on.
+  provider_number_id text NOT NULL,
+  phone_e164 text,
+  kind text NOT NULL DEFAULT 'dedicated'
+    CHECK (kind IN ('fallback', 'dedicated')),
+  -- The provider's own lifecycle, kept verbatim so a status webhook never has
+  -- to be translated into a vocabulary of ours that means slightly less.
+  status text NOT NULL DEFAULT 'requested'
+    CHECK (status IN ('requested', 'provisioning', 'provisioned', 'verifying',
+                      'active', 'failed', 'released', 'disconnected')),
+  display_name text,
+  metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_conversations_channels ENABLE ROW LEVEL SECURITY;
+
+-- One row per number at a provider: the webhook resolves the tenant by this
+-- pair, and a duplicate would make that resolution a coin toss.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_channels_number
+  ON public.plg_conversations_channels(provider, provider_number_id);
+
+-- At most one fallback per (channel, provider). Sender resolution falls back to
+-- "the product's number", singular \u2014 two of them is an ambiguity no caller can
+-- resolve, and it would surface as messages leaving by the wrong one.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_channels_fallback
+  ON public.plg_conversations_channels(channel, provider)
+  WHERE tenant_id IS NULL AND kind = 'fallback';
+
+CREATE INDEX IF NOT EXISTS idx_plg_conversations_channels_tenant
+  ON public.plg_conversations_channels(tenant_id, channel, status)
+  WHERE tenant_id IS NOT NULL;
+
+-- RLS: members read their own rows AND the product fallback (it is the number
+-- they send from, so hiding it would leave the panel with nothing to say).
+-- No INSERT/UPDATE/DELETE policy and no write GRANT: service role only.
+DROP POLICY IF EXISTS plg_conversations_channels_select ON public.plg_conversations_channels;
+CREATE POLICY plg_conversations_channels_select ON public.plg_conversations_channels
+  FOR SELECT TO authenticated
+  USING (tenant_id IS NULL OR tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT ON public.plg_conversations_channels TO authenticated;
+`;
+var MIGRATION_004_MESSAGE_DELIVERY = `-- ============================================================================
+-- plugin-conversations 004: what the provider did with a message, and who wrote
+-- it. Four columns, ported from the legacy beautyplace inbox.
+--
+-- \`direction\` + \`author\` was enough while every row was typed by a person in
+-- this app. It stops being enough the moment a message is sent by a connector:
+--
+--   provider_message_id  the provider's handle for the row. A delivery webhook
+--     names only this, so without it a status can never be applied to anything.
+--     UNIQUE (where present) so an at-least-once webhook that redelivers the
+--     same inbound message cannot open a second copy of it in the thread.
+--   delivery_status      the last thing the provider said, applied MONOTONICALLY
+--     by the webhook handler \u2014 'read' must not be overwritten by a 'delivered'
+--     that arrived late (they are unordered).
+--   sender_kind          person / app / assistant / automation. The backbone of
+--     a shared inbox: legacy proved that a human and an AI writing into the same
+--     thread with no attribution is a thread nobody trusts.
+--   sender_label         who exactly, in words \u2014 "Ana", "Lembrete de hor\xE1rio".
+--
+-- Nullable throughout: rows written before this migration are not wrong, they
+-- are simply from a time when only people wrote here.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+ALTER TABLE public.plg_conversation_messages
+  ADD COLUMN IF NOT EXISTS provider_message_id text,
+  ADD COLUMN IF NOT EXISTS delivery_status text,
+  ADD COLUMN IF NOT EXISTS sender_kind text,
+  ADD COLUMN IF NOT EXISTS sender_label text;
+
+-- Added apart from the column so a re-run on a pool that already has the column
+-- still installs the constraint (ADD COLUMN IF NOT EXISTS skips its inline ones).
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'plg_conversation_messages_delivery_status_check'
+  ) THEN
+    ALTER TABLE public.plg_conversation_messages
+      ADD CONSTRAINT plg_conversation_messages_delivery_status_check
+      CHECK (delivery_status IS NULL OR delivery_status IN
+        ('queued', 'sent', 'delivered', 'read', 'failed', 'expired'));
+  END IF;
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'plg_conversation_messages_sender_kind_check'
+  ) THEN
+    ALTER TABLE public.plg_conversation_messages
+      ADD CONSTRAINT plg_conversation_messages_sender_kind_check
+      CHECK (sender_kind IS NULL OR sender_kind IN ('user', 'system', 'ai', 'automation'));
+  END IF;
+END
+$$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversation_messages_provider_message
+  ON public.plg_conversation_messages(provider_message_id)
+  WHERE provider_message_id IS NOT NULL;
+`;
+var MIGRATION_005_WEBHOOK_EVENTS = `-- ============================================================================
+-- plugin-conversations 005: the dedupe ledger \u2014 one row per event the provider
+-- ever delivered, and the reason a retry is free.
+--
+-- Tyxter delivers AT LEAST ONCE: 8 attempts over ~32.7 hours, and an attempt
+-- counts as failed on anything that is not a 2xx inside 10 seconds. So the same
+-- \`message.received\` arrives again whenever our answer was slow, and without
+-- this table the second delivery opens a second message in the thread and
+-- re-applies the button the customer pressed once.
+--
+-- Deliberately NOT keyed on the message: the same message produces several
+-- events (sent, delivered, read) and the same event may name no message at all
+-- (a template approval). The identity that is unique per DELIVERED FACT is the
+-- provider's event id, so that is the key.
+--
+-- The insert is the lock. \`ON CONFLICT DO NOTHING \u2026 RETURNING id\` returns a row
+-- for the first delivery and nothing for every later one, which is a claim
+-- taken in a single statement \u2014 a SELECT-then-INSERT would let two concurrent
+-- retries both find nothing and both apply.
+--
+-- Service-role only, and not because the rows are secret: a member who could
+-- delete one could make a webhook re-apply, and one who could insert could make
+-- a real delivery be skipped as a duplicate.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS public.plg_conversations_webhook_events (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  provider text NOT NULL,
+  -- The provider's id for the fact ('evt_\u2026'), NOT for the message.
+  event_id text NOT NULL,
+  event_type text NOT NULL,
+  received_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_conversations_webhook_events ENABLE ROW LEVEL SECURITY;
+
+-- No tenant column on purpose: at claim time the tenant is not known yet \u2014 the
+-- whole point of the row is to stop the SECOND delivery before any of the work
+-- that would resolve one. Scoped by provider so two providers cannot collide on
+-- an id shape neither of them controls.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_webhook_events_event
+  ON public.plg_conversations_webhook_events(provider, event_id);
+
+-- For the sweep that keeps this table from growing forever. Nothing prunes it
+-- yet; retention past the provider's 32.7h retry horizon buys nothing, and an
+-- index the pruner will need is cheaper to add now than to add under load.
+CREATE INDEX IF NOT EXISTS idx_plg_conversations_webhook_events_received
+  ON public.plg_conversations_webhook_events(received_at);
+
+-- RLS on with NO policy and no GRANT: service role only, in both directions.
+`;
+var MIGRATION_006_OPTOUTS = `-- ============================================================================
+-- plugin-conversations 006: who told us to stop.
+--
+-- Tyxter keeps its own consent ledger and refuses a send to an opted-out
+-- contact at its edge. This table is not a copy of that for redundancy's sake \u2014
+-- it exists so the REFUSAL IS OURS. A send that fails at the provider is a
+-- failed send: a queued row, a failed delivery status, a retry, and a line in
+-- an operator's screen saying WhatsApp is broken. A send that never leaves
+-- because this row exists is a suppression, which is a different fact and the
+-- only one a person can act on.
+--
+-- \`tenant_id\` is NULLABLE and the null carries meaning, the same way it does on
+-- plg_conversations_channels:
+--   \u2022 NULL  \u2014 the customer opted out of the PRODUCT's shared fallback number.
+--     They cannot have consented to one salon and not another on a number all
+--     the salons share, so the suppression is product-wide.
+--   \u2022 set   \u2014 the customer opted out of that tenant's dedicated number. Their
+--     other conversations are untouched.
+--
+-- Written by the webhook (contact.opted_out / contact.erased) and read by
+-- messaging-send before every send. Nothing else writes it: a member who could
+-- delete a row could resume messaging somebody who asked us to stop, which is
+-- the one mistake in this file with a legal name.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS public.plg_conversations_optouts (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  channel text NOT NULL DEFAULT 'whatsapp'
+    CHECK (channel IN ('sms', 'whatsapp', 'instagram', 'email', 'webchat')),
+  phone_e164 text NOT NULL,
+  -- NULL = the product's shared number. Not a missing value: a scope.
+  tenant_id uuid REFERENCES public.tenants(id) ON DELETE CASCADE,
+  -- No DEFAULT: the table is provider-neutral, and a column that quietly
+  -- defaults to one provider is how the second messaging provider's rows end up
+  -- filed under the first one's name. Every writer names it.
+  provider text NOT NULL,
+  reason text,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_conversations_optouts ENABLE ROW LEVEL SECURITY;
+
+-- NULL-safe uniqueness. A plain UNIQUE(channel, phone_e164, tenant_id) does not
+-- constrain the product-wide rows at all \u2014 in SQL two NULLs are not equal, so
+-- every redelivered contact.opted_out would insert another row and the
+-- suppression read would have to be a DISTINCT. The sentinel uuid is never a
+-- real tenant id, so COALESCE gives the three columns one identity.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_optouts_contact
+  ON public.plg_conversations_optouts(
+    channel, phone_e164,
+    COALESCE(tenant_id, '00000000-0000-0000-0000-000000000000'::uuid));
+
+-- The read messaging-send makes on every send: "is this number suppressed for
+-- this tenant, or product-wide?"
+CREATE INDEX IF NOT EXISTS idx_plg_conversations_optouts_lookup
+  ON public.plg_conversations_optouts(channel, phone_e164);
+
+-- RLS: members READ the suppressions that apply to them (their own tenant's and
+-- the product-wide ones), because "why did this customer stop getting messages"
+-- is a question the inbox has to be able to answer. Writes are service-role
+-- only \u2014 no INSERT/UPDATE/DELETE policy, no write GRANT.
+DROP POLICY IF EXISTS plg_conversations_optouts_select ON public.plg_conversations_optouts;
+CREATE POLICY plg_conversations_optouts_select ON public.plg_conversations_optouts
+  FOR SELECT TO authenticated
+  USING (tenant_id IS NULL OR tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT ON public.plg_conversations_optouts TO authenticated;
+`;
+var MIGRATION_007_INBOUND_ROUTING = `-- ============================================================================
+-- plugin-conversations 007: the two things the webhook needs that 004 could not
+-- know it would.
+--
+-- \xA71  delivery_status gains the statuses the provider actually emits.
+-- \xA72  plg_conversations_match_by_phone \u2014 find the thread a WhatsApp number
+--     belongs to, when the number was typed by a person and delivered by Meta.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+-- \xA71 \u2014 the closed set was one delivery short --------------------------------
+--
+-- 004 wrote the vocabulary from the design. Registering a webhook endpoint at
+-- Tyxter answers with the ENUMERATED list of deliverable events, and it holds
+-- three the CHECK would have refused: \`message.delivery_timeout\` (the provider
+-- gave up before the recipient's device ever acknowledged), \`message.cancelled\`
+-- (an accepted message pulled back before it left), and \`message.opted_out\`
+-- (refused at the provider because the contact withdrew consent \u2014 see 006).
+--
+-- Refusing them is worse than it sounds: the handler's UPDATE fails, the
+-- webhook answers non-2xx, and Tyxter retries the same event eight times over a
+-- day and a half before giving up. The row keeps whatever it said before, which
+-- is 'sent'. An operator reads "sent" for a message that was never delivered.
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'plg_conversation_messages_delivery_status_check'
+  ) THEN
+    ALTER TABLE public.plg_conversation_messages
+      DROP CONSTRAINT plg_conversation_messages_delivery_status_check;
+  END IF;
+  ALTER TABLE public.plg_conversation_messages
+    ADD CONSTRAINT plg_conversation_messages_delivery_status_check
+    CHECK (delivery_status IS NULL OR delivery_status IN
+      ('queued', 'sent', 'delivered', 'read',
+       'failed', 'expired', 'delivery_timeout', 'cancelled', 'opted_out'));
+END
+$$;
+
+-- \xA72 \u2014 matching a phone number to a thread ----------------------------------
+--
+-- The problem, ported from beautyplace where it cost a duplicate thread per
+-- returning customer: the receptionist typed \`(21) 99889-9889\`, WhatsApp
+-- delivers \`+5521998899889\`, and the mobile ninth digit is optional on records
+-- older than 2016. Three spellings of one person, and \`=\` matches none of them.
+--
+-- The rule is digit-suffix, longest first:
+--   last 10 = DDD + the 8 significant digits. Specific: a collision needs two
+--             customers in the same area code sharing 8 digits.
+--   last 8  = the subscriber digits alone. The FALLBACK, tried only when the
+--             first finds nothing, because it crosses area codes.
+--
+-- SECURITY DEFINER and CROSS-TENANT by construction, which is the part to read
+-- carefully. The product's fallback number is shared by every tenant in the
+-- pool, so an inbound message on it arrives with no tenant attached and finding
+-- one means looking at all of them. That is exactly the read that must never be
+-- reachable by a member, so EXECUTE is granted to service_role ONLY and
+-- explicitly revoked from authenticated and anon. The webhook holds the
+-- service-role key; nothing in the browser can call this.
+-- \`p_tenant_id\` narrows the search to one tenant, which is what a DEDICATED
+-- number wants: the tenant is already known from the channel row, and the
+-- cross-tenant search could hand back another salon's thread for the same
+-- customer. NULL searches the whole pool, which is the fallback number's case
+-- and the only one that has no other answer.
+CREATE OR REPLACE FUNCTION public.plg_conversations_match_by_phone(
+  p_channel   text,
+  p_last10    text,
+  p_last8     text,
+  p_tenant_id uuid DEFAULT NULL
+) RETURNS TABLE (
+  id uuid,
+  tenant_id uuid,
+  contact_name text,
+  contact_handle text,
+  contact_person_id uuid
+)
+LANGUAGE sql
+STABLE
+SECURITY DEFINER
+SET search_path = public
+AS $fn$
+  WITH candidate AS (
+    SELECT c.id, c.tenant_id, c.contact_name, c.contact_handle, c.contact_person_id,
+           c.last_message_at,
+           regexp_replace(COALESCE(c.contact_handle, ''), '[^0-9]', '', 'g') AS digits
+      FROM public.plg_conversations c
+     WHERE c.channel = p_channel
+       AND (p_tenant_id IS NULL OR c.tenant_id = p_tenant_id)
+  )
+  SELECT id, tenant_id, contact_name, contact_handle, contact_person_id
+    FROM candidate
+   WHERE length(digits) >= 8
+     AND ((p_last10 IS NOT NULL AND right(digits, 10) = p_last10)
+       OR (p_last8  IS NOT NULL AND right(digits, 8)  = p_last8))
+   -- The 10-digit match wins over an 8-digit one even when the 8-digit thread
+   -- is newer: a wrong area code is a different person, and a newer wrong
+   -- answer is still wrong.
+   ORDER BY (p_last10 IS NOT NULL AND right(digits, 10) = p_last10) DESC,
+            last_message_at DESC NULLS LAST
+   LIMIT 1;
+$fn$;
+
+REVOKE ALL ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) FROM public;
+REVOKE ALL ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) FROM anon;
+REVOKE ALL ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) FROM authenticated;
+GRANT EXECUTE ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) TO service_role;
+
+-- The suffix is computed per row, so without this the match is a full scan of
+-- every WhatsApp thread in the pool on every inbound message. All three
+-- functions are IMMUTABLE, which is what makes the expression indexable.
+CREATE INDEX IF NOT EXISTS idx_plg_conversations_handle_suffix
+  ON public.plg_conversations(
+    channel,
+    right(regexp_replace(COALESCE(contact_handle, ''), '[^0-9]', '', 'g'), 8),
+    last_message_at DESC);
+`;
+var MIGRATION_008_MESSAGE_SUBJECT = `-- ============================================================================
+-- plugin-conversations 008: what a message was ABOUT.
+--
+-- Two columns, and they exist because of one unproved assumption in the
+-- WhatsApp design. The template send attaches a per-button payload carrying the
+-- booking id (\`act:confirm:booking:<uuid>\`), and the whole confirm/cancel flow
+-- rests on Meta echoing that payload back when the customer taps. Tyxter's
+-- sandbox accepts the components with a 202 and stores them verbatim \u2014 but it
+-- validates that array not at all (an index of 7 on a two-button template was
+-- accepted the same way), so the 202 proves nothing about Meta. Only a live
+-- WABA can.
+--
+-- If Meta turns out to echo the button's static TEXT instead, the reply arrives
+-- saying "Confirmar" and naming nothing. These columns are what it is then
+-- correlated against: the last outbound message on that conversation, and the
+-- subject recorded on it. Which is exactly the seam legacy beautyplace had to
+-- build after the fact \u2014 their keyword matcher confirmed EVERY future
+-- appointment the customer had, and the 48-hour re-enrichment subsystem existed
+-- only to guess which one was meant. Recording the subject at send time costs
+-- two nullable columns and removes the guess.
+--
+-- messaging-send (WP3) already writes them, tolerating 42703 and retrying
+-- without \u2014 so a pool that has not run this migration keeps sending, and one
+-- that has gains the anchor. This is the migration that closes that gap.
+--
+-- Nullable, and deliberately not a foreign key: the subject is polymorphic
+-- ('booking', later 'order', 'invoice'), lives in tables this plugin does not
+-- own, and a message about a deleted booking is still a message somebody sent.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+ALTER TABLE public.plg_conversation_messages
+  ADD COLUMN IF NOT EXISTS subject_type text,
+  ADD COLUMN IF NOT EXISTS subject_id text;
+
+-- The correlation read: the most recent outbound message on this thread that
+-- was about something. Partial, because the rows that carry a subject are the
+-- minority and an index over the rest would be paid for on every insert.
+CREATE INDEX IF NOT EXISTS idx_plg_conversation_messages_subject
+  ON public.plg_conversation_messages(conversation_id, at DESC)
+  WHERE subject_id IS NOT NULL;
+
+-- The other direction, for "show me everything ever said about this booking" \u2014
+-- the thread view a booking detail page wants, and the audit answer to "was the
+-- customer actually told?".
+CREATE INDEX IF NOT EXISTS idx_plg_conversation_messages_by_subject
+  ON public.plg_conversation_messages(tenant_id, subject_type, subject_id)
+  WHERE subject_id IS NOT NULL;
+`;
+var MIGRATION_009_PAYMENT_REQUESTS = `-- ============================================================================
+-- plugin-conversations 009: the charge a customer was asked for inside a
+-- conversation, and the row that stops it being asked for twice.
+--
+-- The flow this table exists for: the customer taps "Pagar" on a WhatsApp
+-- confirmation, a Pix is opened at the provider, the copy-and-paste code is
+-- sent back into the same thread, and the money \u2014 or the expiry \u2014 comes back as
+-- a webhook. Four hops, at least one of them delivered more than once.
+--
+-- \`id\` IS the \`external_reference\` sent to the provider, and that is the whole
+-- reconciliation story: the provider echoes it on every payment event, so a
+-- delivery names the row without a lookup table, and a payment created by this
+-- pool can never be confused with one created by the merchant's own AbacatePay
+-- account (the redundancy the design accepted on purpose). It is also the
+-- Idempotency-Key of the create call, so a retried create replays the provider's
+-- own first answer instead of opening a second charge.
+--
+-- \u2500\u2500 The two columns that are not data, but claims \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- \`link_delivered_at\` and \`settled_notified_at\` are LOCKS, taken with a
+-- conditional UPDATE \u2026 WHERE \u2026 IS NULL RETURNING. They exist because of a fact
+-- verified against the sandbox on 2026-08-24: ONE Pix becoming available emits
+-- TWO webhook events with two different event ids \u2014
+--
+--     payment.link_generated     evt_2448\u2026  occurred_at 16:52:49.640Z
+--     payment.approval_available evt_750b\u2026  occurred_at 16:52:49.639Z
+--
+-- \u2014 carrying identical \`data\`. The dedupe ledger (005) cannot help: they are
+-- genuinely two events. Without a claim on the ROW the customer receives the
+-- same Pix code twice, one second apart, which reads as a double charge.
+--
+-- \u2500\u2500 Money moves forward only \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- \`status\` is applied monotonically by the same rule the delivery statuses use,
+-- because webhooks are unordered: a \`link_generated\` arriving after a \`paid\`
+-- must not walk a settled charge back to "waiting". The CHECK carries the
+-- provider's own vocabulary verbatim, including \`approval_requested\` and
+-- \`approved\`, which the design's list did not have and the OpenAPI does.
+--
+-- Writes are SERVICE-ROLE ONLY. A member who could update \`status\` could mark a
+-- charge paid; one who could update \`amount_cents\` could change what a customer
+-- is asked for after the fact. Members read \u2014 "was this booking paid, and how
+-- much for" is a question the inbox and the booking page both have to answer.
+-- Idempotent + safe to re-run.
+-- ============================================================================
+
+CREATE TABLE IF NOT EXISTS public.plg_conversations_payment_requests (
+  -- Ours, and the provider's \`external_reference\`, and the create's
+  -- Idempotency-Key. One identity, so there is nothing to keep in step.
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  conversation_id uuid REFERENCES public.plg_conversations(id) ON DELETE SET NULL,
+  -- The outbound message carrying the Pix code, once it has been sent. NULL
+  -- until then, and that is exactly how "the code has not gone out yet" is read.
+  message_id uuid REFERENCES public.plg_conversation_messages(id) ON DELETE SET NULL,
+  -- Polymorphic and deliberately not a foreign key, for the same reason 008's
+  -- subject columns are not: 'booking' today, 'order' and 'invoice' later, in
+  -- tables this plugin does not own.
+  subject_type text,
+  subject_id text,
+  -- Integers, because the provider takes \`amount_brl_centavos\` and a float that
+  -- rounds to 4499 is a customer charged one centavo less than the salon reads.
+  amount_cents integer NOT NULL CHECK (amount_cents > 0),
+  currency text NOT NULL DEFAULT 'BRL',
+  description text,
+  -- Provider-neutral, like every other column in this plugin: the second
+  -- payment rail must not need a second table.
+  provider text NOT NULL,
+  status text NOT NULL DEFAULT 'created'
+    CHECK (status IN ('created', 'link_generated', 'approval_requested', 'approved',
+                      'paid', 'failed', 'expired', 'cancelled')),
+  provider_payment_id text,
+  payment_link_url text,
+  -- Kept because the customer may lose the message and ask for it again, and
+  -- re-reading a code we already have beats opening a second charge.
+  pix_copy_paste text,
+  -- The claims. See the header.
+  link_delivered_at timestamptz,
+  settled_notified_at timestamptz,
+  settled_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_conversations_payment_requests ENABLE ROW LEVEL SECURITY;
+
+-- The webhook's lookup: an event names the payment, and this finds the row.
+-- UNIQUE where present \u2014 two rows claiming one provider payment would make the
+-- settlement a coin toss.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_payment_requests_provider
+  ON public.plg_conversations_payment_requests(provider, provider_payment_id)
+  WHERE provider_payment_id IS NOT NULL;
+
+-- At most ONE live charge per subject. A customer tapping "Pagar" twice sends
+-- two \`message.received\` events with two different event ids, so the dedupe
+-- ledger lets both through \u2014 this is what stops the second one opening a second
+-- Pix for the same appointment. Settled rows are excluded: a booking legitimately
+-- gets a new charge after one expired.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_payment_requests_open_subject
+  ON public.plg_conversations_payment_requests(tenant_id, subject_type, subject_id)
+  WHERE subject_id IS NOT NULL
+    AND status IN ('created', 'link_generated', 'approval_requested', 'approved');
+
+CREATE INDEX IF NOT EXISTS idx_plg_conversations_payment_requests_tenant
+  ON public.plg_conversations_payment_requests(tenant_id, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_plg_conversations_payment_requests_subject
+  ON public.plg_conversations_payment_requests(tenant_id, subject_type, subject_id)
+  WHERE subject_id IS NOT NULL;
+
+-- RLS: members read their own tenant's charges. No INSERT/UPDATE/DELETE policy
+-- and no write GRANT \u2014 every write here is made by the webhook with the
+-- service-role key, acting on a signed delivery.
+DROP POLICY IF EXISTS plg_conversations_payment_requests_select
+  ON public.plg_conversations_payment_requests;
+CREATE POLICY plg_conversations_payment_requests_select
+  ON public.plg_conversations_payment_requests
+  FOR SELECT TO authenticated
+  USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT ON public.plg_conversations_payment_requests TO authenticated;
+`;
 
 // src/index.ts
 function createSafeProvider() {
@@ -1385,13 +2382,13 @@ function createSafeProvider() {
 function createConversationsPlugin(options) {
   registerTranslations(conversationsLocales);
   const provider = options?.dataProvider ?? createSafeProvider();
-  const store = createConversationsStore(provider);
+  const store2 = createConversationsStore(provider);
   const config = {
     contactKind: options?.contactKind ?? "contact",
     contactLookup: options?.contactLookup,
     contactEntityDef: options?.contactEntityDef
   };
-  const PageComponent = () => React4.createElement(ConversationsPage, { store, config });
+  const PageComponent = () => React4.createElement(ConversationsPage, { store: store2, config });
   PageComponent.displayName = "ConversationsPage";
   return {
     id: "conversations",
@@ -1429,7 +2426,31 @@ function createConversationsPlugin(options) {
     widgets: [],
     events: [
       { name: "conversations.message.received", description: "An inbound message arrived on any channel" },
-      { name: "conversations.message.sent", description: "An outbound message was sent" }
+      { name: "conversations.message.sent", description: "An outbound message was sent" },
+      {
+        // Emitted server-side by plg_emit_event, from the tyxter-webhook's
+        // payment handler — the browser never sees this write, which is the
+        // whole reason packages/db/migrations/027 exists.
+        name: "conversations.payment_received",
+        title: "Pagamento recebido na conversa",
+        description: "O cliente pagou uma cobran\xE7a enviada dentro da conversa",
+        trigger: "Quando o provedor confirma o pagamento de uma cobran\xE7a aberta no chat",
+        icon: "BadgeDollarSign",
+        fields: [
+          { name: "amount", label: "Valor", type: "money", example: "R$ 120,00" },
+          { name: "amount_cents", label: "Valor em centavos", type: "number", example: "12000" },
+          { name: "currency", label: "Moeda", type: "string", example: "BRL" },
+          { name: "description", label: "Descri\xE7\xE3o da cobran\xE7a", type: "string", example: "Corte + Escova" },
+          { name: "channel", label: "Canal", type: "string", example: "whatsapp" },
+          { name: "provider", label: "Provedor", type: "string", example: "tyxter" },
+          // The subject is the BOOKING, not the charge: an automation reacting
+          // to this needs the thing that was paid for, and the charge id is the
+          // audit trail beside it.
+          { name: "subject_type", label: "Tipo do registro", type: "string", example: "booking" },
+          { name: "subject_id", label: "Registro", type: "id", example: "9f1c\u2026" },
+          { name: "payment_request_id", label: "Cobran\xE7a", type: "id", example: "3ab2\u2026" }
+        ]
+      }
     ],
     aiTools: [
       {
@@ -1484,12 +2505,115 @@ function createConversationsPlugin(options) {
         version: "1.1.0",
         sql: MIGRATION_002_CONTACT_PERSON,
         description: "Link threads to public.people via contact_person_id (nullable, ON DELETE SET NULL)"
+      },
+      {
+        id: "conversations-003-channels",
+        version: "1.2.0",
+        sql: MIGRATION_003_CHANNELS,
+        description: "Create plg_conversations_channels \u2014 which number a message leaves by (product fallback vs tenant dedicated); member read, service-role writes"
+      },
+      {
+        id: "conversations-004-message-delivery",
+        version: "1.2.0",
+        sql: MIGRATION_004_MESSAGE_DELIVERY,
+        description: "Message provider_message_id + delivery_status + sender attribution (sender_kind / sender_label)"
+      },
+      {
+        id: "conversations-005-webhook-events",
+        version: "1.3.0",
+        sql: MIGRATION_005_WEBHOOK_EVENTS,
+        description: "Create plg_conversations_webhook_events \u2014 the dedupe ledger that makes an at-least-once webhook safe to apply"
+      },
+      {
+        id: "conversations-006-optouts",
+        version: "1.3.0",
+        sql: MIGRATION_006_OPTOUTS,
+        description: "Create plg_conversations_optouts \u2014 consent suppression read by messaging-send before every send"
+      },
+      {
+        id: "conversations-007-inbound-routing",
+        version: "1.3.0",
+        sql: MIGRATION_007_INBOUND_ROUTING,
+        description: "Widen delivery_status to the statuses Tyxter emits + plg_conversations_match_by_phone (BR digit-suffix thread matching, service-role only)"
+      },
+      {
+        id: "conversations-008-message-subject",
+        version: "1.3.0",
+        sql: MIGRATION_008_MESSAGE_SUBJECT,
+        description: "Message subject_type / subject_id \u2014 the correlation anchor a button reply falls back to when the provider echoes the button text instead of our payload"
+      },
+      {
+        id: "conversations-009-payment-requests",
+        version: "1.4.0",
+        sql: MIGRATION_009_PAYMENT_REQUESTS,
+        description: "Create plg_conversations_payment_requests \u2014 the charge opened inside a conversation, with the row-level claims that make one Pix arrive once and a settlement notify once"
+      }
+    ],
+    functions: [
+      {
+        slug: "tyxter-webhook",
+        // PUBLIC, and the only function in this plugin that is. The caller is
+        // Tyxter's infrastructure, which has no Supabase session and never
+        // will — so the gateway check is off and the HMAC signature over
+        // `${timestamp}.${rawBody}` IS the authentication.
+        ingress: "none",
+        verifyJwt: false,
+        // NAMES only. TYXTER_WEBHOOK_SECRET is the endpoint signing secret,
+        // returned exactly ONCE by POST /v1/webhook-endpoints and stored as a
+        // pool secret by the provisioning script — it is per-endpoint, which is
+        // why it can live in the pool while the API key cannot.
+        secrets: [
+          "TYXTER_WEBHOOK_SECRET",
+          "TYXTER_API_BASE_URL",
+          "FAYZ_API_URL",
+          "FAYZ_PROJECT_ID",
+          "CONNECTOR_REDEMPTION_SECRET"
+        ]
+      },
+      {
+        slug: "tyxter-template-sync",
+        // Two callers, neither of them the outside world: an operator with a
+        // Supabase JWT, and an ops script with TYXTER_SYNC_SECRET. The second
+        // cannot present a JWT, so the gateway check has to be off and the
+        // function authenticates itself.
+        ingress: "none",
+        verifyJwt: false,
+        // NAMES only. The Tyxter key is NOT here and could not be: a Supabase
+        // secret is per-POOL and the key belongs to the platform's project — it
+        // is redeemed per run from the vault, which is what the last three are for.
+        secrets: [
+          "TYXTER_API_BASE_URL",
+          "TYXTER_SYNC_SECRET",
+          "FAYZ_API_URL",
+          "FAYZ_PROJECT_ID",
+          "CONNECTOR_REDEMPTION_SECRET"
+        ]
+      },
+      {
+        slug: "tyxter-payment-preflight",
+        // verify_jwt TRUE — the only function in this wave with a human caller
+        // and nothing else. An operator looking at the connector panel has a
+        // Supabase session; there is no clock and no ops script here, so the
+        // gateway's own check is left on and membership is checked on top of it.
+        ingress: "none",
+        verifyJwt: true,
+        // NAMES only. The browser cannot ask Tyxter anything — the key is the
+        // platform's — which is the whole reason this function exists.
+        secrets: [
+          "TYXTER_API_BASE_URL",
+          "FAYZ_API_URL",
+          "FAYZ_PROJECT_ID",
+          "CONNECTOR_REDEMPTION_SECRET"
+        ]
       }
     ],
+    // WhatsApp through Tyxter. Declared here because this plugin IS the inbox
+    // the messages land in — the connector configures inside Conversas.
+    connectors: [tyxterConnectorDef],
     locales: conversationsLocales
   };
 }
 
-export { createConversationsPlugin, createMockConversationsProvider, createSupabaseConversationsProvider };
+export { PAYMENT_PREFLIGHT_FUNCTION, TYXTER_CONNECTOR_ID, TYXTER_LATENCY_BUDGET_MS, canOfferPayment, createConversationsPlugin, createMockConversationsProvider, createSupabaseConversationsProvider, listMessagingChannels, openPaymentSetupSession, readPaymentReadiness, tyxterConnectorDef };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map