@fayz-ai/plugin-conversations 0.11.2 → 0.11.3

package/dist/index.js

@@ -1,18 +1,19 @@
-import React4, { useState, useRef, useEffect, useCallback } from 'react';
-import { createConnectionStore, connectionRuns, connectionStatus, getSupabaseClientOptional, useActiveTenantId, registerTranslations, getActiveTenantId, CONNECTOR_RUNTIME_TOKEN_HEADER, connectorRuntimeToken, useTranslation } from '@fayz-ai/core';
+import * as React4 from 'react';
+import React4__default, { useState, useRef, useEffect, useCallback, useMemo } from 'react';
+import { createConnectionStore, connectionRuns, connectionStatus, getSupabaseClientOptional, useActiveTenantId, registerTranslations, useTranslation, getActiveTenantId, countByTenant, CONNECTOR_RUNTIME_TOKEN_HEADER, connectorRuntimeToken, errorMessage } from '@fayz-ai/core';
 import { useStore } from 'zustand';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 import { Loader2, ExternalLink, SquarePen, MessageSquare, Globe, Mail, Instagram, Phone, Search, Inbox, ChevronLeft, Clock, Archive, PanelRight, Send, X, User, MapPin, Tag, StickyNote, Link2 } from 'lucide-react';
-import { Input, Button, toast, PageHeaderActions, cn, Skeleton } from '@fayz-ai/ui';
-import { PermissionGate, useLimitGuard, RightRailPage, ContactPicker, invalidateLimit } from '@fayz-ai/admin';
+import { Input, Button, toast, defineKpiWidget, defineTableWidget, PageHeaderActions, cn, Badge, Skeleton, KpiCard, TableWidget } from '@fayz-ai/ui';
+import { PluginSettingsPanel, SettingsGroup, PermissionGate, useLimitGuard, RightRailPage, ContactPicker, invalidateLimit } from '@fayz-ai/admin';
 import { createStore } from 'zustand/vanilla';
 
 // src/index.ts
 var DEFAULT_CONVERSATIONS_CONFIG = {
   contactKind: "contact"
 };
-var StoreContext = React4.createContext(null);
-var ConfigContext = React4.createContext(DEFAULT_CONVERSATIONS_CONFIG);
+var StoreContext = React4__default.createContext(null);
+var ConfigContext = React4__default.createContext(DEFAULT_CONVERSATIONS_CONFIG);
 function ConversationsContextProvider({
   store: store2,
   config = DEFAULT_CONVERSATIONS_CONFIG,
@@ -21,12 +22,12 @@ function ConversationsContextProvider({
   return /* @__PURE__ */ jsx(StoreContext.Provider, { value: store2, children: /* @__PURE__ */ jsx(ConfigContext.Provider, { value: config, children }) });
 }
 function useConversationsStore(selector) {
-  const store2 = React4.useContext(StoreContext);
+  const store2 = React4__default.useContext(StoreContext);
   if (!store2) throw new Error("useConversationsStore must be used within ConversationsPage");
   return useStore(store2, selector);
 }
 function useConversationsConfig() {
-  return React4.useContext(ConfigContext);
+  return React4__default.useContext(ConfigContext);
 }
 
 // src/types.ts
@@ -37,6 +38,11 @@ var CHANNEL_LABELS = {
   email: "Email",
   webchat: "Web Chat"
 };
+function isWaitingOnUs(conversation) {
+  if (conversation.status !== "open") return false;
+  if (conversation.lastMessageDirection) return conversation.lastMessageDirection === "inbound";
+  return conversation.unreadCount > 0;
+}
 
 // src/lib/channel.ts
 var CHANNEL_ICON = {
@@ -54,10 +60,10 @@ var CHANNEL_ACCENT = {
   webchat: { color: "#f59e0b", badge: "bg-[#f59e0b]/12 text-[#b45309] dark:text-[#fcd34d]" }
 };
 function useMediaQuery(query) {
-  const [matches, setMatches] = React4.useState(
+  const [matches, setMatches] = React4__default.useState(
     () => typeof window !== "undefined" && window.matchMedia(query).matches
   );
-  React4.useEffect(() => {
+  React4__default.useEffect(() => {
     if (typeof window === "undefined") return;
     const mql = window.matchMedia(query);
     const onChange = () => setMatches(mql.matches);
@@ -241,9 +247,9 @@ function buildRows(messages) {
 function MessageThread({ selected, onTogglePanel, panelOpen, onBack, className }) {
   const t = useTranslation();
   const { messages, sending, send, setStatus } = useConversationsStore((s) => s);
-  const [draft, setDraft] = React4.useState("");
-  const threadRef = React4.useRef(null);
-  React4.useEffect(() => {
+  const [draft, setDraft] = React4__default.useState("");
+  const threadRef = React4__default.useRef(null);
+  React4__default.useEffect(() => {
     threadRef.current?.scrollTo({ top: threadRef.current.scrollHeight, behavior: "smooth" });
   }, [messages.length, selected.id]);
   async function handleSend() {
@@ -253,7 +259,7 @@ function MessageThread({ selected, onTogglePanel, panelOpen, onBack, className }
     await send(body);
   }
   const accent = CHANNEL_ACCENT[selected.channel];
-  const rows = React4.useMemo(() => buildRows(messages), [messages]);
+  const rows = React4__default.useMemo(() => buildRows(messages), [messages]);
   return /* @__PURE__ */ jsxs("section", { className: cn("flex min-w-0 flex-1 flex-col bg-muted/20", className), children: [
     /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between gap-2 border-b border-border bg-card px-3 py-2.5 md:px-5", children: [
       /* @__PURE__ */ jsxs("div", { className: "flex min-w-0 items-center gap-2 md:gap-3", children: [
@@ -422,14 +428,14 @@ function NewConversationPanel({
   const create = useConversationsStore((s) => s.create);
   const config = useConversationsConfig();
   const guardConversations = useLimitGuard("conversations_month");
-  const [channel, setChannel] = React4.useState("whatsapp");
-  const [contact, setContact] = React4.useState(null);
-  const [typedHandle, setTypedHandle] = React4.useState("");
-  const [creatingContact, setCreatingContact] = React4.useState(false);
-  const [firstMessage, setFirstMessage] = React4.useState("");
-  const [submitting, setSubmitting] = React4.useState(false);
-  const [pickerKey, setPickerKey] = React4.useState(0);
-  React4.useEffect(() => {
+  const [channel, setChannel] = React4__default.useState("whatsapp");
+  const [contact, setContact] = React4__default.useState(null);
+  const [typedHandle, setTypedHandle] = React4__default.useState("");
+  const [creatingContact, setCreatingContact] = React4__default.useState(false);
+  const [firstMessage, setFirstMessage] = React4__default.useState("");
+  const [submitting, setSubmitting] = React4__default.useState(false);
+  const [pickerKey, setPickerKey] = React4__default.useState(0);
+  React4__default.useEffect(() => {
     if (open) {
       setChannel("whatsapp");
       setContact(null);
@@ -460,7 +466,7 @@ function NewConversationPanel({
       invalidateLimit("conversations_month");
       onOpenChange(false);
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = errorMessage(err);
       toast.error(t("conversations.new.createFailed"), { description: message });
     } finally {
       setSubmitting(false);
@@ -547,10 +553,10 @@ function InboxView() {
   const t = useTranslation();
   const { conversations, selectedId, deselect } = useConversationsStore((s) => s);
   const isWidePanel = useMediaQuery("(min-width: 1280px)");
-  const [panelOpen, setPanelOpen] = React4.useState(false);
-  const [newOpen, setNewOpen] = React4.useState(false);
+  const [panelOpen, setPanelOpen] = React4__default.useState(false);
+  const [newOpen, setNewOpen] = React4__default.useState(false);
   const selected = conversations.find((c) => c.id === selectedId) ?? null;
-  React4.useEffect(() => {
+  React4__default.useEffect(() => {
     setPanelOpen(isWidePanel);
   }, [isWidePanel]);
   return /* @__PURE__ */ jsxs(Fragment, { children: [
@@ -605,7 +611,7 @@ function InboxView() {
   ] });
 }
 function ConversationsPage({ store: store2, config }) {
-  React4.useEffect(() => {
+  React4__default.useEffect(() => {
     void store2.getState().load();
   }, []);
   return /* @__PURE__ */ jsx(ConversationsContextProvider, { store: store2, config, children: /* @__PURE__ */ jsx(InboxView, {}) });
@@ -634,6 +640,7 @@ function seed() {
       channel: "whatsapp",
       lastMessagePreview: "Perfect, can we book for Friday at 3pm?",
       lastMessageAt: minutesAgo(base, 4),
+      lastMessageDirection: "inbound",
       unreadCount: 2,
       status: "open",
       assignedTo: "You",
@@ -649,6 +656,7 @@ function seed() {
       channel: "sms",
       lastMessagePreview: "Got it \u2014 sending the deposit now.",
       lastMessageAt: minutesAgo(base, 22),
+      lastMessageDirection: "inbound",
       unreadCount: 0,
       status: "open",
       assignedTo: "You",
@@ -663,6 +671,7 @@ function seed() {
       channel: "instagram",
       lastMessagePreview: "Do you offer balayage on weekends?",
       lastMessageAt: minutesAgo(base, 51),
+      lastMessageDirection: "inbound",
       unreadCount: 1,
       status: "open",
       accent: "#ec4899",
@@ -675,6 +684,9 @@ function seed() {
       channel: "email",
       lastMessagePreview: "Re: Proposal \u2014 looks great, one question on pricing\u2026",
       lastMessageAt: minutesAgo(base, 95),
+      // Read, never answered — zero unread and a customer still waiting. The
+      // exact case `unreadCount` alone gets wrong.
+      lastMessageDirection: "inbound",
       unreadCount: 0,
       status: "open",
       assignedTo: "Sofia",
@@ -690,6 +702,7 @@ function seed() {
       channel: "webchat",
       lastMessagePreview: "Is anyone available to chat?",
       lastMessageAt: minutesAgo(base, 140),
+      lastMessageDirection: "inbound",
       unreadCount: 0,
       status: "snoozed",
       accent: "#f59e0b",
@@ -702,6 +715,7 @@ function seed() {
       channel: "whatsapp",
       lastMessagePreview: "Thank you! See you next week \u{1F64C}",
       lastMessageAt: minutesAgo(base, 1440),
+      lastMessageDirection: "outbound",
       unreadCount: 0,
       status: "closed",
       assignedTo: "You",
@@ -807,6 +821,10 @@ function createMockConversationsProvider(config) {
         channel: input.channel,
         lastMessagePreview: firstMessage ?? "",
         lastMessageAt: now,
+        // A thread the house opened is not waiting on the house. Left undefined
+        // when there is no first message: nobody has spoken, so there is no
+        // last speaker to name, and `isWaitingOnUs` falls back to unread (0).
+        lastMessageDirection: firstMessage ? "outbound" : void 0,
         unreadCount: 0,
         status: "open",
         assignedTo: selfAuthor,
@@ -844,6 +862,7 @@ function createMockConversationsProvider(config) {
       if (conv) {
         conv.lastMessagePreview = input.body;
         conv.lastMessageAt = created.at;
+        conv.lastMessageDirection = "outbound";
         conv.unreadCount = 0;
         if (conv.status === "closed") conv.status = "open";
       }
@@ -884,6 +903,10 @@ function mapConversation(r) {
     channel: r.channel ?? "sms",
     lastMessagePreview: r.last_message_preview ?? "",
     lastMessageAt: r.last_message_at ?? "",
+    // Kept current by the trigger in migration 001, never written from here:
+    // the column has one writer on purpose (last_message_preview/at have five,
+    // which is the mistake this one was not going to repeat).
+    lastMessageDirection: r.last_message_direction ?? void 0,
     unreadCount: Number(r.unread_count ?? 0),
     status: r.status ?? "open",
     assignedTo: r.assigned_to ?? void 0,
@@ -1190,7 +1213,36 @@ var en = {
   "conversations.new.cancel": "Cancel",
   "conversations.new.create": "Start conversation",
   "conversations.new.creating": "Starting\u2026",
-  "conversations.new.createFailed": "Could not create the conversation"
+  "conversations.new.createFailed": "Could not create the conversation",
+  // Dashboard — the queue of people waiting on a reply
+  "conversations.dashboard.waiting": "Waiting on you",
+  "conversations.dashboard.waitingOldest": "Oldest waiting {{time}}",
+  "conversations.dashboard.waitingNone": "Nobody waiting",
+  "conversations.dashboard.openThreads": "Open conversations",
+  "conversations.dashboard.openThreadsSub": "{{count}} waiting on a reply",
+  "conversations.dashboard.needsYou": "Needs you",
+  "conversations.dashboard.needsYouEmpty": "Nobody waiting. Inbox is clear.",
+  "conversations.dashboard.who": "Who",
+  "conversations.dashboard.waited": "Waiting",
+  "conversations.waited.minutes": "{{count}} min",
+  "conversations.waited.hours": "{{count}} h",
+  "conversations.waited.days": "{{count}} d",
+  // Inbox settings
+  "conversations.settings.title": "Conversations",
+  "conversations.settings.channels": "Your numbers",
+  "conversations.settings.channelsHelp": "Where messages come in and go out. Connect and manage channels in the Integrations tab.",
+  "conversations.settings.channelsEmpty": "No channel connected yet \u2014 until then the inbox stays empty. Connect WhatsApp in the Integrations tab.",
+  "conversations.settings.channelsUnavailable": "Could not load your channels right now.",
+  "conversations.settings.channelDedicated": "Your own number",
+  "conversations.settings.channelShared": "Platform number",
+  "conversations.settings.status.active": "Active",
+  "conversations.settings.status.requested": "Requested",
+  "conversations.settings.status.provisioning": "Provisioning",
+  "conversations.settings.status.provisioned": "Provisioned",
+  "conversations.settings.status.verifying": "Verifying",
+  "conversations.settings.status.failed": "Failed",
+  "conversations.settings.status.released": "Released",
+  "conversations.settings.status.disconnected": "Disconnected"
 };
 
 // src/locales/pt-BR.ts
@@ -1253,7 +1305,36 @@ var ptBR = {
   "conversations.new.cancel": "Cancelar",
   "conversations.new.create": "Iniciar conversa",
   "conversations.new.creating": "Iniciando\u2026",
-  "conversations.new.createFailed": "N\xE3o foi poss\xEDvel criar a conversa"
+  "conversations.new.createFailed": "N\xE3o foi poss\xEDvel criar a conversa",
+  // Painel — a fila de quem está esperando resposta
+  "conversations.dashboard.waiting": "Esperando resposta",
+  "conversations.dashboard.waitingOldest": "A mais antiga h\xE1 {{time}}",
+  "conversations.dashboard.waitingNone": "Ningu\xE9m na fila",
+  "conversations.dashboard.openThreads": "Conversas abertas",
+  "conversations.dashboard.openThreadsSub": "{{count}} esperando resposta",
+  "conversations.dashboard.needsYou": "Precisa de voc\xEA",
+  "conversations.dashboard.needsYouEmpty": "Ningu\xE9m esperando. Caixa de entrada em dia.",
+  "conversations.dashboard.who": "Quem",
+  "conversations.dashboard.waited": "Esperando h\xE1",
+  "conversations.waited.minutes": "{{count}} min",
+  "conversations.waited.hours": "{{count}} h",
+  "conversations.waited.days": "{{count}} d",
+  // Configurações da caixa de entrada
+  "conversations.settings.title": "Conversas",
+  "conversations.settings.channels": "Seus n\xFAmeros",
+  "conversations.settings.channelsHelp": "Por onde a mensagem entra e sai. Ligue e gerencie os canais na aba Integra\xE7\xF5es.",
+  "conversations.settings.channelsEmpty": "Nenhum canal ligado ainda \u2014 enquanto isso, a caixa de entrada fica vazia. Ligue o WhatsApp na aba Integra\xE7\xF5es.",
+  "conversations.settings.channelsUnavailable": "N\xE3o foi poss\xEDvel consultar seus canais agora.",
+  "conversations.settings.channelDedicated": "N\xFAmero s\xF3 seu",
+  "conversations.settings.channelShared": "N\xFAmero da plataforma",
+  "conversations.settings.status.active": "Ativo",
+  "conversations.settings.status.requested": "Solicitado",
+  "conversations.settings.status.provisioning": "Provisionando",
+  "conversations.settings.status.provisioned": "Provisionado",
+  "conversations.settings.status.verifying": "Verificando",
+  "conversations.settings.status.failed": "Falhou",
+  "conversations.settings.status.released": "Devolvido",
+  "conversations.settings.status.disconnected": "Desconectado"
 };
 
 // src/locales/index.ts
@@ -1261,6 +1342,142 @@ var conversationsLocales = {
   en,
   "pt-BR": ptBR
 };
+function useEnsureConversations() {
+  const load = useConversationsStore((s) => s.load);
+  const loaded = useConversationsStore((s) => s.conversations.length > 0);
+  useEffect(() => {
+    if (!loaded) void load();
+  }, []);
+}
+function useWaiting() {
+  useEnsureConversations();
+  const conversations = useConversationsStore((s) => s.conversations);
+  const loading = useConversationsStore((s) => s.loading);
+  return useMemo(() => {
+    const open = conversations.filter((c) => c.status === "open");
+    const waiting = open.filter(isWaitingOnUs).sort((a, b) => Date.parse(a.lastMessageAt) - Date.parse(b.lastMessageAt));
+    return { waiting, open: open.length, loading };
+  }, [conversations, loading]);
+}
+function waitedFor(iso, t) {
+  const ms = Date.now() - Date.parse(iso);
+  if (!Number.isFinite(ms) || ms < 0) return "\u2014";
+  const minutes = Math.floor(ms / 6e4);
+  if (minutes < 60) return t("conversations.waited.minutes", { count: String(Math.max(minutes, 1)) });
+  const hours = Math.floor(minutes / 60);
+  if (hours < 24) return t("conversations.waited.hours", { count: String(hours) });
+  return t("conversations.waited.days", { count: String(Math.floor(hours / 24)) });
+}
+function WaitingKpi() {
+  const t = useTranslation();
+  const { waiting, loading } = useWaiting();
+  const oldest = waiting[0];
+  return /* @__PURE__ */ jsx(
+    KpiCard,
+    {
+      label: t("conversations.dashboard.waiting"),
+      icon: "MessageCircleWarning",
+      loading: loading && waiting.length === 0,
+      value: String(waiting.length),
+      sub: oldest ? t("conversations.dashboard.waitingOldest", { time: waitedFor(oldest.lastMessageAt, t) }) : t("conversations.dashboard.waitingNone"),
+      invertTrend: true
+    }
+  );
+}
+function OpenThreadsKpi() {
+  const t = useTranslation();
+  const { open, waiting, loading } = useWaiting();
+  return /* @__PURE__ */ jsx(
+    KpiCard,
+    {
+      label: t("conversations.dashboard.openThreads"),
+      icon: "MessagesSquare",
+      loading: loading && open === 0,
+      value: String(open),
+      sub: t("conversations.dashboard.openThreadsSub", { count: String(waiting.length) })
+    }
+  );
+}
+function WaitingTable() {
+  const t = useTranslation();
+  const { waiting, loading } = useWaiting();
+  const columns = useMemo(() => [
+    {
+      accessorKey: "contactName",
+      header: t("conversations.dashboard.who"),
+      cell: ({ row }) => /* @__PURE__ */ jsx("span", { className: "font-medium", children: row.original.contactName })
+    },
+    {
+      id: "preview",
+      header: "",
+      // The message, not just the name: half of triage is deciding which of
+      // five waiting people is the one worth answering first, and that is
+      // decided by what they said.
+      cell: ({ row }) => /* @__PURE__ */ jsx("span", { className: "line-clamp-1 text-xs text-muted-foreground", children: row.original.lastMessagePreview })
+    },
+    {
+      id: "channel",
+      header: t("conversations.contact.channel"),
+      cell: ({ row }) => /* @__PURE__ */ jsx("span", { className: "text-xs text-muted-foreground", children: t(`conversations.filter.${row.original.channel}`) })
+    },
+    {
+      id: "waited",
+      header: t("conversations.dashboard.waited"),
+      cell: ({ row }) => /* @__PURE__ */ jsx("span", { className: "whitespace-nowrap text-xs font-medium tabular-nums", children: waitedFor(row.original.lastMessageAt, t) })
+    }
+  ], [t]);
+  return /* @__PURE__ */ jsx(
+    TableWidget,
+    {
+      title: t("conversations.dashboard.needsYou"),
+      icon: "MessageCircleWarning",
+      columns,
+      data: waiting,
+      loading: loading && waiting.length === 0,
+      emptyMessage: t("conversations.dashboard.needsYouEmpty"),
+      onRowClick: (row) => {
+        window.location.hash = `/conversations?thread=${row.id}`;
+      }
+    }
+  );
+}
+function createConversationsDashboardWidgets(ctx) {
+  const withCtx = (Inner) => {
+    const Wrapped = () => /* @__PURE__ */ jsx(ConversationsContextProvider, { store: ctx.store, config: ctx.config, children: /* @__PURE__ */ jsx(Inner, {}) });
+    Wrapped.displayName = `ConversationsWidget(${Inner.displayName ?? Inner.name})`;
+    return Wrapped;
+  };
+  return [
+    // Visible on the home by DEFAULT, unlike most plugin widgets. The rest of
+    // the registry is opt-in because a dashboard of everything is a dashboard
+    // of nothing — but an unanswered customer is the one item on any home
+    // screen that is time-critical, and hiding it behind Customize means it
+    // only reaches the people who already knew to look.
+    defineKpiWidget({
+      id: "conversations.kpi.waiting",
+      title: "conversations.dashboard.waiting",
+      domain: "conversations",
+      defaultOrder: -1,
+      component: withCtx(WaitingKpi)
+    }),
+    defineKpiWidget({
+      id: "conversations.kpi.open",
+      title: "conversations.dashboard.openThreads",
+      domain: "conversations",
+      defaultOrder: 4,
+      defaultVisible: false,
+      component: withCtx(OpenThreadsKpi)
+    }),
+    defineTableWidget({
+      id: "conversations.table.waiting",
+      title: "conversations.dashboard.needsYou",
+      domain: "conversations",
+      span: 2,
+      defaultOrder: 10,
+      component: withCtx(WaitingTable)
+    })
+  ];
+}
 function mapChannel(r) {
   return {
     id: String(r.id),
@@ -1323,6 +1540,127 @@ function findFallbackChannel(channels) {
 function canClaimDedicated(channels, tenantId) {
   return findDedicatedChannel(channels, tenantId) === null;
 }
+function channelLabel(account, t) {
+  const key = `conversations.filter.${account.channel}`;
+  const translated = t(key);
+  return translated === key ? account.channel : translated;
+}
+function ChannelRow({ account }) {
+  const t = useTranslation();
+  const pending = isPendingChannelStatus(account.status);
+  return /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between gap-3 border-b py-2.5 last:border-b-0", children: [
+    /* @__PURE__ */ jsxs("div", { className: "min-w-0", children: [
+      /* @__PURE__ */ jsx("p", { className: "truncate text-sm font-medium", children: account.phoneE164 ?? account.displayName ?? channelLabel(account, t) }),
+      /* @__PURE__ */ jsxs("p", { className: "text-xs text-muted-foreground", children: [
+        channelLabel(account, t),
+        " \xB7 ",
+        t(
+          account.kind === "dedicated" ? "conversations.settings.channelDedicated" : "conversations.settings.channelShared"
+        )
+      ] })
+    ] }),
+    /* @__PURE__ */ jsx(Badge, { variant: account.status === "active" ? "default" : pending ? "secondary" : "outline", children: t(`conversations.settings.status.${account.status}`) === `conversations.settings.status.${account.status}` ? account.status : t(`conversations.settings.status.${account.status}`) })
+  ] });
+}
+function ConversationsGeneralSettings() {
+  const t = useTranslation();
+  const [channels, setChannels] = React4.useState(null);
+  const [failed, setFailed] = React4.useState(false);
+  React4.useEffect(() => {
+    let cancelled = false;
+    listMessagingChannels().then((rows) => {
+      if (!cancelled) setChannels(rows);
+    }).catch(() => {
+      if (!cancelled) {
+        setFailed(true);
+        setChannels([]);
+      }
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  return /* @__PURE__ */ jsx("div", { className: "space-y-6", children: /* @__PURE__ */ jsxs(
+    SettingsGroup,
+    {
+      title: t("conversations.settings.channels"),
+      description: t("conversations.settings.channelsHelp"),
+      children: [
+        channels === null && /* @__PURE__ */ jsx("p", { className: "py-2 text-sm text-muted-foreground", children: t("conversations.list.loading") }),
+        channels !== null && failed && /* @__PURE__ */ jsx("p", { className: "py-2 text-sm text-muted-foreground", children: t("conversations.settings.channelsUnavailable") }),
+        channels !== null && !failed && channels.length === 0 && /* @__PURE__ */ jsx("p", { className: "py-2 text-sm text-muted-foreground", children: t("conversations.settings.channelsEmpty") }),
+        channels?.map((account) => /* @__PURE__ */ jsx(ChannelRow, { account }, account.id))
+      ]
+    }
+  ) });
+}
+ConversationsGeneralSettings.displayName = "ConversationsGeneralSettings";
+function ConversationsSettingsTab() {
+  const t = useTranslation();
+  return /* @__PURE__ */ jsx(
+    PluginSettingsPanel,
+    {
+      title: t("conversations.settings.title"),
+      generalSettings: /* @__PURE__ */ jsx(ConversationsGeneralSettings, {}),
+      hostPluginId: "conversations",
+      routeBase: "/settings/conversations"
+    }
+  );
+}
+ConversationsSettingsTab.displayName = "ConversationsSettingsTab";
+function buildConversationsOnboarding() {
+  return {
+    id: "conversations",
+    title: "Quem fala com voc\xEA",
+    order: 30,
+    role: "frontdesk",
+    instructions: `Voc\xEA est\xE1 ligando a caixa de entrada. O risco aqui n\xE3o \xE9 a pessoa n\xE3o achar a tela \u2014 \xE9 ela achar a tela, ver que est\xE1 vazia e concluir que o produto n\xE3o funciona.
+
+- Comece pelo CANAL. Sem n\xFAmero ligado n\xE3o entra mensagem nenhuma, e todo o resto do m\xF3dulo \xE9 decora\xE7\xE3o. O caminho \xE9 Configura\xE7\xF5es \u203A Conversas \u203A Integra\xE7\xF5es.
+- Explique a diferen\xE7a entre o n\xFAmero da plataforma e um n\xFAmero dedicado ANTES de ela escolher: no compartilhado ela j\xE1 come\xE7a a receber hoje; no dedicado sai o nome dela, mas ainda passa por um cadastro na Meta.
+- O segundo passo \xE9 a prova: pe\xE7a para ela mandar uma mensagem do pr\xF3prio celular para o n\xFAmero e responder daqui. \xC9 o que mostra que ida e volta funcionam.
+- Se ela j\xE1 tem WhatsApp Business no celular, diga com todas as letras o que muda: as conversas passam a ficar aqui, onde a equipe inteira v\xEA, em vez de num aparelho s\xF3.`,
+    steps: [
+      {
+        key: "channel",
+        title: "Ligue o canal onde seu cliente j\xE1 fala",
+        description: "Sem n\xFAmero conectado, a caixa de entrada abre vazia para sempre.",
+        icon: "MessageCircle",
+        route: "/settings/conversations/_integrations",
+        priority: "urgent",
+        // O passo É a tela: um app que monte o inbox sem a rota de configurações
+        // não tem onde ligar canal nenhum, e a linha ficaria aberta para sempre.
+        requiresRoute: true,
+        agentHint: "Abra Integra\xE7\xF5es e apresente as duas op\xE7\xF5es pelo que elas custam \xE0 pessoa HOJE: o n\xFAmero da plataforma come\xE7a a receber agora, o dedicado sai com o nome dela mas espera o cadastro na Meta.",
+        howTo: "Configura\xE7\xF5es \u203A Conversas \u203A Integra\xE7\xF5es \u203A Tyxter. O n\xFAmero da plataforma j\xE1 est\xE1 ligado e \xE9 compartilhado com outros neg\xF3cios \u2014 d\xE1 para come\xE7ar a receber por ele hoje. Um n\xFAmero dedicado sai s\xF3 com o seu nome, libera os seus pr\xF3prios modelos de mensagem e tem limite de envio pr\xF3prio; ele \xE9 alugado no m\xEAs e ainda passa por um cadastro r\xE1pido na Meta antes do primeiro envio.",
+        celebrate: "Canal ligado \u2014 agora d\xE1 para te acharem \u{1F4F2}",
+        script: [
+          { kind: "goto", route: "/settings/conversations/_integrations" },
+          {
+            kind: "ask",
+            text: "Estamos nas Integra\xE7\xF5es da caixa de entrada. Mostre o n\xFAmero da plataforma e o dedicado, explique o que muda em cada um e ajude a pessoa a escolher."
+          }
+        ],
+        check: async () => await countByTenant(T.channels) > 0
+      },
+      {
+        key: "first-reply",
+        title: "Receba e responda a primeira mensagem",
+        description: "A prova de que a ida e a volta funcionam.",
+        icon: "Send",
+        route: "/conversations",
+        priority: "high",
+        agentHint: "N\xE3o \xE9 passo de cadastro. Pe\xE7a para a pessoa mandar uma mensagem do pr\xF3prio celular para o n\xFAmero ligado e responder aqui de dentro \u2014 e fique com ela at\xE9 a resposta chegar do outro lado.",
+        howTo: "Pegue o seu celular, mande uma mensagem qualquer para o n\xFAmero que voc\xEA acabou de ligar e volte aqui: a conversa aparece em Conversas. Responda por aqui e confira que chegou no celular. \xC9 o teste que prova que a caixa de entrada est\xE1 no ar \u2014 e \xE9 tamb\xE9m como a equipe vai trabalhar todo dia, com a conversa num lugar que todo mundo v\xEA em vez de num aparelho s\xF3.",
+        celebrate: "Ida e volta funcionando \u{1F4AC}",
+        // A conversa existe assim que a primeira mensagem entra, então a
+        // contagem de threads é a checagem — e não a de mensagens, que seria
+        // fechada por um envio que ninguém respondeu.
+        check: async () => await countByTenant(T.conversations) > 0
+      }
+    ]
+  };
+}
 var TYXTER_NUMBER_CLAIM_FUNCTION = "tyxter-number-claim";
 function client() {
   const supabase = getSupabaseClientOptional();
@@ -1728,433 +2066,186 @@ var tyxterConnectorDef = {
 };
 
 // src/migrations/index.ts
-var MIGRATION_001_CONVERSATIONS = `-- ============================================================================
--- plugin-conversations 001: omni-channel inbox model (SMS / WhatsApp /
--- Instagram / Email / Web chat). Prefix: plg_conversations / plg_conversation_messages.
---   \xA71  plg_conversations          \u2014 one thread per contact+channel
---   \xA72  plg_conversation_messages  \u2014 inbound/outbound messages within a thread
---   \xA73  RLS: authenticated tenant-scoped CRUD on both tables + GRANTs
+var MIGRATION_000_BASELINE = `-- ============================================================================
+-- plugins/plugin-conversations/src/migrations/000_baseline.sql \u2014 what installing this provisions, as one file.
 --
--- Column names mirror exactly what supabase.ts's mapConversation / mapMessage
--- read. Real channel connectors (Twilio, WhatsApp Cloud, Meta, IMAP) deliver
--- inbound rows here out-of-band; the provider is the read/compose surface.
--- Idempotent + safe to re-run.
--- ============================================================================
-
--- \xA71 \u2014 conversations (threads)
-CREATE TABLE IF NOT EXISTS public.plg_conversations (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  contact_name text NOT NULL,
-  contact_handle text,
-  channel text NOT NULL
-    CHECK (channel IN ('sms', 'whatsapp', 'instagram', 'email', 'webchat')),
-  last_message_preview text,
-  last_message_at timestamptz DEFAULT now(),
-  unread_count int DEFAULT 0,
-  status text DEFAULT 'open'
-    CHECK (status IN ('open', 'snoozed', 'closed')),
-  assigned_to text,
-  accent text,
-  tags text[],
-  location text,
-  note text,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-ALTER TABLE public.plg_conversations ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_tenant ON public.plg_conversations(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_tenant_recent ON public.plg_conversations(tenant_id, last_message_at DESC);
-
--- \xA72 \u2014 messages
-CREATE TABLE IF NOT EXISTS public.plg_conversation_messages (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  conversation_id uuid NOT NULL REFERENCES public.plg_conversations(id) ON DELETE CASCADE,
-  channel text
-    CHECK (channel IS NULL OR channel IN ('sms', 'whatsapp', 'instagram', 'email', 'webchat')),
-  direction text
-    CHECK (direction IN ('inbound', 'outbound')),
-  body text NOT NULL,
-  author text,
-  at timestamptz DEFAULT now()
-);
-ALTER TABLE public.plg_conversation_messages ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_plg_conversation_messages_thread ON public.plg_conversation_messages(conversation_id, at);
-
--- \xA73 \u2014 RLS: authenticated tenant CRUD (the inbox reads/writes here)
-DROP POLICY IF EXISTS plg_conversations_select ON public.plg_conversations;
-DROP POLICY IF EXISTS plg_conversations_insert ON public.plg_conversations;
-DROP POLICY IF EXISTS plg_conversations_update ON public.plg_conversations;
-DROP POLICY IF EXISTS plg_conversations_delete ON public.plg_conversations;
-CREATE POLICY plg_conversations_select ON public.plg_conversations FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_conversations_insert ON public.plg_conversations FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_conversations_update ON public.plg_conversations FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_conversations_delete ON public.plg_conversations FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_conversations TO authenticated;
-
-DROP POLICY IF EXISTS plg_conversation_messages_select ON public.plg_conversation_messages;
-DROP POLICY IF EXISTS plg_conversation_messages_insert ON public.plg_conversation_messages;
-DROP POLICY IF EXISTS plg_conversation_messages_update ON public.plg_conversation_messages;
-DROP POLICY IF EXISTS plg_conversation_messages_delete ON public.plg_conversation_messages;
-CREATE POLICY plg_conversation_messages_select ON public.plg_conversation_messages FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_conversation_messages_insert ON public.plg_conversation_messages FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_conversation_messages_update ON public.plg_conversation_messages FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_conversation_messages_delete ON public.plg_conversation_messages FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_conversation_messages TO authenticated;
-`;
-var MIGRATION_002_CONTACT_PERSON = `-- ============================================================================
--- plugin-conversations 002: link a thread to a REAL person record.
+-- GENERATED by scripts/emit-unit-baselines.mjs (#338). Do not edit by hand:
+-- change the schema, regenerate, and let scripts/check-chain-equivalence.mjs
+-- prove the result still matches.
 --
--- The compose modal used to take a free-text name + handle, so a conversation
--- with "Maria" had nothing to do with the Maria in the agenda, the CRM or the
--- financial module. The shared ContactPicker (find-or-create over
--- public.people) now resolves a person, and this column stores that link.
+-- This replaced 9 migration files. They are kept, unapplied, in
+-- migrations.archive/ \u2014 a year of decisions is worth reading even when it is no
+-- longer worth replaying.
 --
--- Nullable on purpose, in both directions of time:
---   \u2022 rows created before this migration keep working (name/handle only);
---   \u2022 an inbound message from an unknown number still opens a thread with no
---     person attached \u2014 the contact panel can offer "create contact" later.
--- ON DELETE SET NULL: deleting a person must never take their history with it.
--- Idempotent + safe to re-run.
+-- Object order is fixed rather than dependency-sorted: schemas, types,
+-- sequences, tables, defaults, functions, constraints, views, indexes, foreign
+-- keys, triggers, row security, policies, grants. Dependencies BETWEEN units
+-- are carried by the order packages/db/chain.json declares.
 -- ============================================================================
 
-ALTER TABLE public.plg_conversations
-  ADD COLUMN IF NOT EXISTS contact_person_id uuid REFERENCES public.people(id) ON DELETE SET NULL;
+-- A LANGUAGE sql function binds its body at CREATE time, and 570 functions
+-- sorted by name are not sorted by who calls whom. This is what lets them load
+-- in any order; every body is still compiled on first call, so a genuinely
+-- broken reference surfaces then rather than never. Session-scoped.
+SET check_function_bodies = false;
 
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_person
-  ON public.plg_conversations(tenant_id, contact_person_id)
-  WHERE contact_person_id IS NOT NULL;
-`;
-var MIGRATION_003_CHANNELS = `-- ============================================================================
--- plugin-conversations 003: channel accounts \u2014 WHICH number a message leaves by.
---
--- The inbox has always been the read/compose surface for rows a connector
--- delivered out-of-band. This is the first table that says where those rows
--- come FROM, and it exists because WhatsApp has two number models at once:
---
---   \u2022 kind 'fallback'  \u2014 the product's own number, shared by every tenant.
---     tenant_id IS NULL: it belongs to the software, not to a salon, and a
---     tenant column with a made-up value there would make every read lie.
---   \u2022 kind 'dedicated' \u2014 a number rented for one tenant. Once it is \`active\`
---     it wins over the fallback; until then the fallback keeps carrying.
---
--- Provider-neutral on purpose (\`provider\`, \`provider_number_id\`): the sender
--- model is a WhatsApp fact, not a Tyxter fact, and the second messaging
--- provider must not need a second table.
---
--- Writes are SERVICE-ROLE ONLY. Every row is created by a webhook or by an
--- edge function acting on the provider's answer \u2014 a member who could edit
--- \`provider_number_id\` could point another tenant's replies at their own inbox.
--- Members read, and the fallback row is readable by all of them because it is
--- the number their own messages go out on.
--- Idempotent + safe to re-run.
--- ============================================================================
 
-CREATE TABLE IF NOT EXISTS public.plg_conversations_channels (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  -- NULL = the product fallback row. Not a missing value: an owner.
-  tenant_id uuid REFERENCES public.tenants(id) ON DELETE CASCADE,
-  channel text NOT NULL DEFAULT 'whatsapp'
-    CHECK (channel IN ('sms', 'whatsapp', 'instagram', 'email', 'webchat')),
-  provider text NOT NULL,
-  -- The provider's handle for the number ('pn_\u2026'); what a webhook routes on.
-  provider_number_id text NOT NULL,
-  phone_e164 text,
-  kind text NOT NULL DEFAULT 'dedicated'
-    CHECK (kind IN ('fallback', 'dedicated')),
-  -- The provider's own lifecycle, kept verbatim so a status webhook never has
-  -- to be translated into a vocabulary of ours that means slightly less.
-  status text NOT NULL DEFAULT 'requested'
-    CHECK (status IN ('requested', 'provisioning', 'provisioned', 'verifying',
-                      'active', 'failed', 'released', 'disconnected')),
-  display_name text,
-  metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-ALTER TABLE public.plg_conversations_channels ENABLE ROW LEVEL SECURITY;
 
--- One row per number at a provider: the webhook resolves the tenant by this
--- pair, and a duplicate would make that resolution a coin toss.
-CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_channels_number
-  ON public.plg_conversations_channels(provider, provider_number_id);
-
--- At most one fallback per (channel, provider). Sender resolution falls back to
--- "the product's number", singular \u2014 two of them is an ambiguity no caller can
--- resolve, and it would surface as messages leaving by the wrong one.
-CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_channels_fallback
-  ON public.plg_conversations_channels(channel, provider)
-  WHERE tenant_id IS NULL AND kind = 'fallback';
-
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_channels_tenant
-  ON public.plg_conversations_channels(tenant_id, channel, status)
-  WHERE tenant_id IS NOT NULL;
-
--- RLS: members read their own rows AND the product fallback (it is the number
--- they send from, so hiding it would leave the panel with nothing to say).
--- No INSERT/UPDATE/DELETE policy and no write GRANT: service role only.
-DROP POLICY IF EXISTS plg_conversations_channels_select ON public.plg_conversations_channels;
-CREATE POLICY plg_conversations_channels_select ON public.plg_conversations_channels
-  FOR SELECT TO authenticated
-  USING (tenant_id IS NULL OR tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT ON public.plg_conversations_channels TO authenticated;
-`;
-var MIGRATION_004_MESSAGE_DELIVERY = `-- ============================================================================
--- plugin-conversations 004: what the provider did with a message, and who wrote
--- it. Four columns, ported from the legacy beautyplace inbox.
---
--- \`direction\` + \`author\` was enough while every row was typed by a person in
--- this app. It stops being enough the moment a message is sent by a connector:
---
---   provider_message_id  the provider's handle for the row. A delivery webhook
---     names only this, so without it a status can never be applied to anything.
---     UNIQUE (where present) so an at-least-once webhook that redelivers the
---     same inbound message cannot open a second copy of it in the thread.
---   delivery_status      the last thing the provider said, applied MONOTONICALLY
---     by the webhook handler \u2014 'read' must not be overwritten by a 'delivered'
---     that arrived late (they are unordered).
---   sender_kind          person / app / assistant / automation. The backbone of
---     a shared inbox: legacy proved that a human and an AI writing into the same
---     thread with no attribution is a thread nobody trusts.
---   sender_label         who exactly, in words \u2014 "Ana", "Lembrete de hor\xE1rio".
---
--- Nullable throughout: rows written before this migration are not wrong, they
--- are simply from a time when only people wrote here.
--- Idempotent + safe to re-run.
--- ============================================================================
+-- \u2500\u2500 default privileges: reset \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- Cleared BEFORE anything is created, so every object below gets the ACL the
+-- dump describes rather than the image's defaults on top of it. Restored at
+-- the end of this file.
 
-ALTER TABLE public.plg_conversation_messages
-  ADD COLUMN IF NOT EXISTS provider_message_id text,
-  ADD COLUMN IF NOT EXISTS delivery_status text,
-  ADD COLUMN IF NOT EXISTS sender_kind text,
-  ADD COLUMN IF NOT EXISTS sender_label text;
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
 
--- Added apart from the column so a re-run on a pool that already has the column
--- still installs the constraint (ADD COLUMN IF NOT EXISTS skips its inline ones).
-DO $$
-BEGIN
-  IF NOT EXISTS (
-    SELECT 1 FROM pg_constraint WHERE conname = 'plg_conversation_messages_delivery_status_check'
-  ) THEN
-    ALTER TABLE public.plg_conversation_messages
-      ADD CONSTRAINT plg_conversation_messages_delivery_status_check
-      CHECK (delivery_status IS NULL OR delivery_status IN
-        ('queued', 'sent', 'delivered', 'read', 'failed', 'expired'));
-  END IF;
-  IF NOT EXISTS (
-    SELECT 1 FROM pg_constraint WHERE conname = 'plg_conversation_messages_sender_kind_check'
-  ) THEN
-    ALTER TABLE public.plg_conversation_messages
-      ADD CONSTRAINT plg_conversation_messages_sender_kind_check
-      CHECK (sender_kind IS NULL OR sender_kind IN ('user', 'system', 'ai', 'automation'));
-  END IF;
-END
-$$;
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
 
-CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversation_messages_provider_message
-  ON public.plg_conversation_messages(provider_message_id)
-  WHERE provider_message_id IS NOT NULL;
-`;
-var MIGRATION_005_WEBHOOK_EVENTS = `-- ============================================================================
--- plugin-conversations 005: the dedupe ledger \u2014 one row per event the provider
--- ever delivered, and the reason a retry is free.
---
--- Tyxter delivers AT LEAST ONCE: 8 attempts over ~32.7 hours, and an attempt
--- counts as failed on anything that is not a 2xx inside 10 seconds. So the same
--- \`message.received\` arrives again whenever our answer was slow, and without
--- this table the second delivery opens a second message in the thread and
--- re-applies the button the customer pressed once.
---
--- Deliberately NOT keyed on the message: the same message produces several
--- events (sent, delivered, read) and the same event may name no message at all
--- (a template approval). The identity that is unique per DELIVERED FACT is the
--- provider's event id, so that is the key.
---
--- The insert is the lock. \`ON CONFLICT DO NOTHING \u2026 RETURNING id\` returns a row
--- for the first delivery and nothing for every later one, which is a claim
--- taken in a single statement \u2014 a SELECT-then-INSERT would let two concurrent
--- retries both find nothing and both apply.
---
--- Service-role only, and not because the rows are secret: a member who could
--- delete one could make a webhook re-apply, and one who could insert could make
--- a real delivery be skipped as a duplicate.
--- Idempotent + safe to re-run.
--- ============================================================================
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+
+-- \u2500\u2500 table \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 
-CREATE TABLE IF NOT EXISTS public.plg_conversations_webhook_events (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  provider text NOT NULL,
-  -- The provider's id for the fact ('evt_\u2026'), NOT for the message.
-  event_id text NOT NULL,
-  event_type text NOT NULL,
-  received_at timestamptz NOT NULL DEFAULT now()
+CREATE TABLE public.plg_conversation_messages (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    conversation_id uuid NOT NULL,
+    channel text,
+    direction text,
+    body text NOT NULL,
+    author text,
+    at timestamp with time zone DEFAULT now(),
+    provider_message_id text,
+    delivery_status text,
+    sender_kind text,
+    sender_label text,
+    subject_type text,
+    subject_id text,
+    CONSTRAINT plg_conversation_messages_channel_check CHECK (((channel IS NULL) OR (channel = ANY (ARRAY['sms'::text, 'whatsapp'::text, 'instagram'::text, 'email'::text, 'webchat'::text])))),
+    CONSTRAINT plg_conversation_messages_delivery_status_check CHECK (((delivery_status IS NULL) OR (delivery_status = ANY (ARRAY['queued'::text, 'sent'::text, 'delivered'::text, 'read'::text, 'failed'::text, 'expired'::text, 'delivery_timeout'::text, 'cancelled'::text, 'opted_out'::text])))),
+    CONSTRAINT plg_conversation_messages_direction_check CHECK ((direction = ANY (ARRAY['inbound'::text, 'outbound'::text]))),
+    CONSTRAINT plg_conversation_messages_sender_kind_check CHECK (((sender_kind IS NULL) OR (sender_kind = ANY (ARRAY['user'::text, 'system'::text, 'ai'::text, 'automation'::text]))))
 );
-ALTER TABLE public.plg_conversations_webhook_events ENABLE ROW LEVEL SECURITY;
 
--- No tenant column on purpose: at claim time the tenant is not known yet \u2014 the
--- whole point of the row is to stop the SECOND delivery before any of the work
--- that would resolve one. Scoped by provider so two providers cannot collide on
--- an id shape neither of them controls.
-CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_webhook_events_event
-  ON public.plg_conversations_webhook_events(provider, event_id);
+CREATE TABLE public.plg_conversations (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    contact_name text NOT NULL,
+    contact_handle text,
+    channel text NOT NULL,
+    last_message_preview text,
+    last_message_at timestamp with time zone DEFAULT now(),
+    unread_count integer DEFAULT 0,
+    status text DEFAULT 'open'::text,
+    assigned_to text,
+    accent text,
+    tags text[],
+    location text,
+    note text,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    contact_person_id uuid,
+    CONSTRAINT plg_conversations_channel_check CHECK ((channel = ANY (ARRAY['sms'::text, 'whatsapp'::text, 'instagram'::text, 'email'::text, 'webchat'::text]))),
+    CONSTRAINT plg_conversations_status_check CHECK ((status = ANY (ARRAY['open'::text, 'snoozed'::text, 'closed'::text])))
+);
 
--- For the sweep that keeps this table from growing forever. Nothing prunes it
--- yet; retention past the provider's 32.7h retry horizon buys nothing, and an
--- index the pruner will need is cheaper to add now than to add under load.
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_webhook_events_received
-  ON public.plg_conversations_webhook_events(received_at);
+CREATE TABLE public.plg_conversations_channels (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid,
+    channel text DEFAULT 'whatsapp'::text NOT NULL,
+    provider text NOT NULL,
+    provider_number_id text NOT NULL,
+    phone_e164 text,
+    kind text DEFAULT 'dedicated'::text NOT NULL,
+    status text DEFAULT 'requested'::text NOT NULL,
+    display_name text,
+    metadata jsonb DEFAULT '{}'::jsonb NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT plg_conversations_channels_channel_check CHECK ((channel = ANY (ARRAY['sms'::text, 'whatsapp'::text, 'instagram'::text, 'email'::text, 'webchat'::text]))),
+    CONSTRAINT plg_conversations_channels_kind_check CHECK ((kind = ANY (ARRAY['fallback'::text, 'dedicated'::text]))),
+    CONSTRAINT plg_conversations_channels_status_check CHECK ((status = ANY (ARRAY['requested'::text, 'provisioning'::text, 'provisioned'::text, 'verifying'::text, 'active'::text, 'failed'::text, 'released'::text, 'disconnected'::text])))
+);
 
--- RLS on with NO policy and no GRANT: service role only, in both directions.
-`;
-var MIGRATION_006_OPTOUTS = `-- ============================================================================
--- plugin-conversations 006: who told us to stop.
---
--- Tyxter keeps its own consent ledger and refuses a send to an opted-out
--- contact at its edge. This table is not a copy of that for redundancy's sake \u2014
--- it exists so the REFUSAL IS OURS. A send that fails at the provider is a
--- failed send: a queued row, a failed delivery status, a retry, and a line in
--- an operator's screen saying WhatsApp is broken. A send that never leaves
--- because this row exists is a suppression, which is a different fact and the
--- only one a person can act on.
---
--- \`tenant_id\` is NULLABLE and the null carries meaning, the same way it does on
--- plg_conversations_channels:
---   \u2022 NULL  \u2014 the customer opted out of the PRODUCT's shared fallback number.
---     They cannot have consented to one salon and not another on a number all
---     the salons share, so the suppression is product-wide.
---   \u2022 set   \u2014 the customer opted out of that tenant's dedicated number. Their
---     other conversations are untouched.
---
--- Written by the webhook (contact.opted_out / contact.erased) and read by
--- messaging-send before every send. Nothing else writes it: a member who could
--- delete a row could resume messaging somebody who asked us to stop, which is
--- the one mistake in this file with a legal name.
--- Idempotent + safe to re-run.
--- ============================================================================
+CREATE TABLE public.plg_conversations_optouts (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    channel text DEFAULT 'whatsapp'::text NOT NULL,
+    phone_e164 text NOT NULL,
+    tenant_id uuid,
+    provider text NOT NULL,
+    reason text,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT plg_conversations_optouts_channel_check CHECK ((channel = ANY (ARRAY['sms'::text, 'whatsapp'::text, 'instagram'::text, 'email'::text, 'webchat'::text])))
+);
 
-CREATE TABLE IF NOT EXISTS public.plg_conversations_optouts (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  channel text NOT NULL DEFAULT 'whatsapp'
-    CHECK (channel IN ('sms', 'whatsapp', 'instagram', 'email', 'webchat')),
-  phone_e164 text NOT NULL,
-  -- NULL = the product's shared number. Not a missing value: a scope.
-  tenant_id uuid REFERENCES public.tenants(id) ON DELETE CASCADE,
-  -- No DEFAULT: the table is provider-neutral, and a column that quietly
-  -- defaults to one provider is how the second messaging provider's rows end up
-  -- filed under the first one's name. Every writer names it.
-  provider text NOT NULL,
-  reason text,
-  created_at timestamptz NOT NULL DEFAULT now()
+CREATE TABLE public.plg_conversations_payment_requests (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    conversation_id uuid,
+    message_id uuid,
+    subject_type text,
+    subject_id text,
+    amount_cents integer NOT NULL,
+    currency text DEFAULT 'BRL'::text NOT NULL,
+    description text,
+    provider text NOT NULL,
+    status text DEFAULT 'created'::text NOT NULL,
+    provider_payment_id text,
+    payment_link_url text,
+    pix_copy_paste text,
+    link_delivered_at timestamp with time zone,
+    settled_notified_at timestamp with time zone,
+    settled_at timestamp with time zone,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT plg_conversations_payment_requests_amount_cents_check CHECK ((amount_cents > 0)),
+    CONSTRAINT plg_conversations_payment_requests_status_check CHECK ((status = ANY (ARRAY['created'::text, 'link_generated'::text, 'approval_requested'::text, 'approved'::text, 'paid'::text, 'failed'::text, 'expired'::text, 'cancelled'::text])))
 );
-ALTER TABLE public.plg_conversations_optouts ENABLE ROW LEVEL SECURITY;
 
--- NULL-safe uniqueness. A plain UNIQUE(channel, phone_e164, tenant_id) does not
--- constrain the product-wide rows at all \u2014 in SQL two NULLs are not equal, so
--- every redelivered contact.opted_out would insert another row and the
--- suppression read would have to be a DISTINCT. The sentinel uuid is never a
--- real tenant id, so COALESCE gives the three columns one identity.
-CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_optouts_contact
-  ON public.plg_conversations_optouts(
-    channel, phone_e164,
-    COALESCE(tenant_id, '00000000-0000-0000-0000-000000000000'::uuid));
-
--- The read messaging-send makes on every send: "is this number suppressed for
--- this tenant, or product-wide?"
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_optouts_lookup
-  ON public.plg_conversations_optouts(channel, phone_e164);
-
--- RLS: members READ the suppressions that apply to them (their own tenant's and
--- the product-wide ones), because "why did this customer stop getting messages"
--- is a question the inbox has to be able to answer. Writes are service-role
--- only \u2014 no INSERT/UPDATE/DELETE policy, no write GRANT.
-DROP POLICY IF EXISTS plg_conversations_optouts_select ON public.plg_conversations_optouts;
-CREATE POLICY plg_conversations_optouts_select ON public.plg_conversations_optouts
-  FOR SELECT TO authenticated
-  USING (tenant_id IS NULL OR tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT ON public.plg_conversations_optouts TO authenticated;
-`;
-var MIGRATION_007_INBOUND_ROUTING = `-- ============================================================================
--- plugin-conversations 007: the two things the webhook needs that 004 could not
--- know it would.
---
--- \xA71  delivery_status gains the statuses the provider actually emits.
--- \xA72  plg_conversations_match_by_phone \u2014 find the thread a WhatsApp number
---     belongs to, when the number was typed by a person and delivered by Meta.
--- Idempotent + safe to re-run.
--- ============================================================================
+CREATE TABLE public.plg_conversations_webhook_events (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    provider text NOT NULL,
+    event_id text NOT NULL,
+    event_type text NOT NULL,
+    received_at timestamp with time zone DEFAULT now() NOT NULL
+);
 
--- \xA71 \u2014 the closed set was one delivery short --------------------------------
---
--- 004 wrote the vocabulary from the design. Registering a webhook endpoint at
--- Tyxter answers with the ENUMERATED list of deliverable events, and it holds
--- three the CHECK would have refused: \`message.delivery_timeout\` (the provider
--- gave up before the recipient's device ever acknowledged), \`message.cancelled\`
--- (an accepted message pulled back before it left), and \`message.opted_out\`
--- (refused at the provider because the contact withdrew consent \u2014 see 006).
---
--- Refusing them is worse than it sounds: the handler's UPDATE fails, the
--- webhook answers non-2xx, and Tyxter retries the same event eight times over a
--- day and a half before giving up. The row keeps whatever it said before, which
--- is 'sent'. An operator reads "sent" for a message that was never delivered.
-DO $$
-BEGIN
-  IF EXISTS (
-    SELECT 1 FROM pg_constraint WHERE conname = 'plg_conversation_messages_delivery_status_check'
-  ) THEN
-    ALTER TABLE public.plg_conversation_messages
-      DROP CONSTRAINT plg_conversation_messages_delivery_status_check;
-  END IF;
-  ALTER TABLE public.plg_conversation_messages
-    ADD CONSTRAINT plg_conversation_messages_delivery_status_check
-    CHECK (delivery_status IS NULL OR delivery_status IN
-      ('queued', 'sent', 'delivered', 'read',
-       'failed', 'expired', 'delivery_timeout', 'cancelled', 'opted_out'));
-END
-$$;
 
--- \xA72 \u2014 matching a phone number to a thread ----------------------------------
---
--- The problem, ported from beautyplace where it cost a duplicate thread per
--- returning customer: the receptionist typed \`(21) 99889-9889\`, WhatsApp
--- delivers \`+5521998899889\`, and the mobile ninth digit is optional on records
--- older than 2016. Three spellings of one person, and \`=\` matches none of them.
---
--- The rule is digit-suffix, longest first:
---   last 10 = DDD + the 8 significant digits. Specific: a collision needs two
---             customers in the same area code sharing 8 digits.
---   last 8  = the subscriber digits alone. The FALLBACK, tried only when the
---             first finds nothing, because it crosses area codes.
---
--- SECURITY DEFINER and CROSS-TENANT by construction, which is the part to read
--- carefully. The product's fallback number is shared by every tenant in the
--- pool, so an inbound message on it arrives with no tenant attached and finding
--- one means looking at all of them. That is exactly the read that must never be
--- reachable by a member, so EXECUTE is granted to service_role ONLY and
--- explicitly revoked from authenticated and anon. The webhook holds the
--- service-role key; nothing in the browser can call this.
--- \`p_tenant_id\` narrows the search to one tenant, which is what a DEDICATED
--- number wants: the tenant is already known from the channel row, and the
--- cross-tenant search could hand back another salon's thread for the same
--- customer. NULL searches the whole pool, which is the fallback number's case
--- and the only one that has no other answer.
-CREATE OR REPLACE FUNCTION public.plg_conversations_match_by_phone(
-  p_channel   text,
-  p_last10    text,
-  p_last8     text,
-  p_tenant_id uuid DEFAULT NULL
-) RETURNS TABLE (
-  id uuid,
-  tenant_id uuid,
-  contact_name text,
-  contact_handle text,
-  contact_person_id uuid
-)
-LANGUAGE sql
-STABLE
-SECURITY DEFINER
-SET search_path = public
-AS $fn$
+-- \u2500\u2500 function \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE FUNCTION public.plg_conversations_match_by_phone(p_channel text, p_last10 text, p_last8 text, p_tenant_id uuid DEFAULT NULL::uuid) RETURNS TABLE(id uuid, tenant_id uuid, contact_name text, contact_handle text, contact_person_id uuid)
+    LANGUAGE sql STABLE SECURITY DEFINER
+    SET search_path TO 'public'
+    AS $$
   WITH candidate AS (
     SELECT c.id, c.tenant_id, c.contact_name, c.contact_handle, c.contact_person_id,
            c.last_message_at,
@@ -2174,189 +2265,430 @@ AS $fn$
    ORDER BY (p_last10 IS NOT NULL AND right(digits, 10) = p_last10) DESC,
             last_message_at DESC NULLS LAST
    LIMIT 1;
-$fn$;
-
-REVOKE ALL ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) FROM public;
-REVOKE ALL ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) FROM anon;
-REVOKE ALL ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) FROM authenticated;
-GRANT EXECUTE ON FUNCTION public.plg_conversations_match_by_phone(text, text, text, uuid) TO service_role;
-
--- The suffix is computed per row, so without this the match is a full scan of
--- every WhatsApp thread in the pool on every inbound message. All three
--- functions are IMMUTABLE, which is what makes the expression indexable.
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_handle_suffix
-  ON public.plg_conversations(
-    channel,
-    right(regexp_replace(COALESCE(contact_handle, ''), '[^0-9]', '', 'g'), 8),
-    last_message_at DESC);
-`;
-var MIGRATION_008_MESSAGE_SUBJECT = `-- ============================================================================
--- plugin-conversations 008: what a message was ABOUT.
---
--- Two columns, and they exist because of one unproved assumption in the
--- WhatsApp design. The template send attaches a per-button payload carrying the
--- booking id (\`act:confirm:booking:<uuid>\`), and the whole confirm/cancel flow
--- rests on Meta echoing that payload back when the customer taps. Tyxter's
--- sandbox accepts the components with a 202 and stores them verbatim \u2014 but it
--- validates that array not at all (an index of 7 on a two-button template was
--- accepted the same way), so the 202 proves nothing about Meta. Only a live
--- WABA can.
---
--- If Meta turns out to echo the button's static TEXT instead, the reply arrives
--- saying "Confirmar" and naming nothing. These columns are what it is then
--- correlated against: the last outbound message on that conversation, and the
--- subject recorded on it. Which is exactly the seam legacy beautyplace had to
--- build after the fact \u2014 their keyword matcher confirmed EVERY future
--- appointment the customer had, and the 48-hour re-enrichment subsystem existed
--- only to guess which one was meant. Recording the subject at send time costs
--- two nullable columns and removes the guess.
---
--- messaging-send (WP3) already writes them, tolerating 42703 and retrying
--- without \u2014 so a pool that has not run this migration keeps sending, and one
--- that has gains the anchor. This is the migration that closes that gap.
---
--- Nullable, and deliberately not a foreign key: the subject is polymorphic
--- ('booking', later 'order', 'invoice'), lives in tables this plugin does not
--- own, and a message about a deleted booking is still a message somebody sent.
--- Idempotent + safe to re-run.
--- ============================================================================
+$$;
+
+
+-- \u2500\u2500 constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE ONLY public.plg_conversation_messages
+    ADD CONSTRAINT plg_conversation_messages_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_conversations_channels
+    ADD CONSTRAINT plg_conversations_channels_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_conversations_optouts
+    ADD CONSTRAINT plg_conversations_optouts_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_conversations_payment_requests
+    ADD CONSTRAINT plg_conversations_payment_requests_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_conversations
+    ADD CONSTRAINT plg_conversations_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_conversations_webhook_events
+    ADD CONSTRAINT plg_conversations_webhook_events_pkey PRIMARY KEY (id);
+
+
+-- \u2500\u2500 index \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE INDEX idx_plg_conversation_messages_by_subject ON public.plg_conversation_messages USING btree (tenant_id, subject_type, subject_id) WHERE (subject_id IS NOT NULL);
+
+CREATE INDEX idx_plg_conversation_messages_subject ON public.plg_conversation_messages USING btree (conversation_id, at DESC) WHERE (subject_id IS NOT NULL);
+
+CREATE INDEX idx_plg_conversation_messages_thread ON public.plg_conversation_messages USING btree (conversation_id, at);
+
+CREATE INDEX idx_plg_conversations_channels_tenant ON public.plg_conversations_channels USING btree (tenant_id, channel, status) WHERE (tenant_id IS NOT NULL);
+
+CREATE INDEX idx_plg_conversations_handle_suffix ON public.plg_conversations USING btree (channel, "right"(regexp_replace(COALESCE(contact_handle, ''::text), '[^0-9]'::text, ''::text, 'g'::text), 8), last_message_at DESC);
+
+CREATE INDEX idx_plg_conversations_optouts_lookup ON public.plg_conversations_optouts USING btree (channel, phone_e164);
+
+CREATE INDEX idx_plg_conversations_payment_requests_subject ON public.plg_conversations_payment_requests USING btree (tenant_id, subject_type, subject_id) WHERE (subject_id IS NOT NULL);
+
+CREATE INDEX idx_plg_conversations_payment_requests_tenant ON public.plg_conversations_payment_requests USING btree (tenant_id, created_at DESC);
+
+CREATE INDEX idx_plg_conversations_person ON public.plg_conversations USING btree (tenant_id, contact_person_id) WHERE (contact_person_id IS NOT NULL);
+
+CREATE INDEX idx_plg_conversations_tenant ON public.plg_conversations USING btree (tenant_id);
+
+CREATE INDEX idx_plg_conversations_tenant_recent ON public.plg_conversations USING btree (tenant_id, last_message_at DESC);
+
+CREATE INDEX idx_plg_conversations_webhook_events_received ON public.plg_conversations_webhook_events USING btree (received_at);
+
+CREATE UNIQUE INDEX uq_plg_conversation_messages_provider_message ON public.plg_conversation_messages USING btree (provider_message_id) WHERE (provider_message_id IS NOT NULL);
+
+CREATE UNIQUE INDEX uq_plg_conversations_channels_fallback ON public.plg_conversations_channels USING btree (channel, provider) WHERE ((tenant_id IS NULL) AND (kind = 'fallback'::text));
+
+CREATE UNIQUE INDEX uq_plg_conversations_channels_number ON public.plg_conversations_channels USING btree (provider, provider_number_id);
+
+CREATE UNIQUE INDEX uq_plg_conversations_optouts_contact ON public.plg_conversations_optouts USING btree (channel, phone_e164, COALESCE(tenant_id, '00000000-0000-0000-0000-000000000000'::uuid));
+
+CREATE UNIQUE INDEX uq_plg_conversations_payment_requests_open_subject ON public.plg_conversations_payment_requests USING btree (tenant_id, subject_type, subject_id) WHERE ((subject_id IS NOT NULL) AND (status = ANY (ARRAY['created'::text, 'link_generated'::text, 'approval_requested'::text, 'approved'::text])));
+
+CREATE UNIQUE INDEX uq_plg_conversations_payment_requests_provider ON public.plg_conversations_payment_requests USING btree (provider, provider_payment_id) WHERE (provider_payment_id IS NOT NULL);
+
+CREATE UNIQUE INDEX uq_plg_conversations_webhook_events_event ON public.plg_conversations_webhook_events USING btree (provider, event_id);
+
+
+-- \u2500\u2500 fk constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE ONLY public.plg_conversation_messages
+    ADD CONSTRAINT plg_conversation_messages_conversation_id_fkey FOREIGN KEY (conversation_id) REFERENCES public.plg_conversations(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_conversation_messages
+    ADD CONSTRAINT plg_conversation_messages_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_conversations_channels
+    ADD CONSTRAINT plg_conversations_channels_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_conversations
+    ADD CONSTRAINT plg_conversations_contact_person_id_fkey FOREIGN KEY (contact_person_id) REFERENCES public.people(id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_conversations_optouts
+    ADD CONSTRAINT plg_conversations_optouts_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_conversations_payment_requests
+    ADD CONSTRAINT plg_conversations_payment_requests_conversation_id_fkey FOREIGN KEY (conversation_id) REFERENCES public.plg_conversations(id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_conversations_payment_requests
+    ADD CONSTRAINT plg_conversations_payment_requests_message_id_fkey FOREIGN KEY (message_id) REFERENCES public.plg_conversation_messages(id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_conversations_payment_requests
+    ADD CONSTRAINT plg_conversations_payment_requests_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_conversations
+    ADD CONSTRAINT plg_conversations_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+
+-- \u2500\u2500 row security \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE public.plg_conversation_messages ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_conversations ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_conversations_channels ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_conversations_optouts ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_conversations_payment_requests ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_conversations_webhook_events ENABLE ROW LEVEL SECURITY;
+
+
+-- \u2500\u2500 policy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE POLICY plg_conversation_messages_delete ON public.plg_conversation_messages FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversation_messages_insert ON public.plg_conversation_messages FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversation_messages_select ON public.plg_conversation_messages FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversation_messages_update ON public.plg_conversation_messages FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversations_channels_select ON public.plg_conversations_channels FOR SELECT TO authenticated USING (((tenant_id IS NULL) OR (tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids))));
+
+CREATE POLICY plg_conversations_delete ON public.plg_conversations FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversations_insert ON public.plg_conversations FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversations_optouts_select ON public.plg_conversations_optouts FOR SELECT TO authenticated USING (((tenant_id IS NULL) OR (tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids))));
+
+CREATE POLICY plg_conversations_payment_requests_select ON public.plg_conversations_payment_requests FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversations_select ON public.plg_conversations FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_conversations_update ON public.plg_conversations FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+
+-- \u2500\u2500 acl \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+REVOKE ALL ON FUNCTION public.plg_conversations_match_by_phone(p_channel text, p_last10 text, p_last8 text, p_tenant_id uuid) FROM PUBLIC;
+GRANT ALL ON FUNCTION public.plg_conversations_match_by_phone(p_channel text, p_last10 text, p_last8 text, p_tenant_id uuid) TO service_role;
 
-ALTER TABLE public.plg_conversation_messages
-  ADD COLUMN IF NOT EXISTS subject_type text,
-  ADD COLUMN IF NOT EXISTS subject_id text;
-
--- The correlation read: the most recent outbound message on this thread that
--- was about something. Partial, because the rows that carry a subject are the
--- minority and an index over the rest would be paid for on every insert.
-CREATE INDEX IF NOT EXISTS idx_plg_conversation_messages_subject
-  ON public.plg_conversation_messages(conversation_id, at DESC)
-  WHERE subject_id IS NOT NULL;
-
--- The other direction, for "show me everything ever said about this booking" \u2014
--- the thread view a booking detail page wants, and the audit answer to "was the
--- customer actually told?".
-CREATE INDEX IF NOT EXISTS idx_plg_conversation_messages_by_subject
-  ON public.plg_conversation_messages(tenant_id, subject_type, subject_id)
-  WHERE subject_id IS NOT NULL;
+GRANT MAINTAIN ON TABLE public.plg_conversation_messages TO anon;
+GRANT ALL ON TABLE public.plg_conversation_messages TO authenticated;
+GRANT ALL ON TABLE public.plg_conversation_messages TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_conversations TO anon;
+GRANT ALL ON TABLE public.plg_conversations TO authenticated;
+GRANT ALL ON TABLE public.plg_conversations TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_conversations_channels TO anon;
+GRANT ALL ON TABLE public.plg_conversations_channels TO authenticated;
+GRANT ALL ON TABLE public.plg_conversations_channels TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_conversations_optouts TO anon;
+GRANT ALL ON TABLE public.plg_conversations_optouts TO authenticated;
+GRANT ALL ON TABLE public.plg_conversations_optouts TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_conversations_payment_requests TO anon;
+GRANT ALL ON TABLE public.plg_conversations_payment_requests TO authenticated;
+GRANT ALL ON TABLE public.plg_conversations_payment_requests TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_conversations_webhook_events TO anon;
+GRANT ALL ON TABLE public.plg_conversations_webhook_events TO authenticated;
+GRANT ALL ON TABLE public.plg_conversations_webhook_events TO service_role;
+
+
+-- \u2500\u2500 default privileges: restore \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- Put back, so the NEXT thing installed inherits what the chain had.
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$--
+-- PostgreSQL database dump complete
+--$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$--
+-- PostgreSQL database dump complete
+--$stmt$;
+END $dp$;
 `;
-var MIGRATION_009_PAYMENT_REQUESTS = `-- ============================================================================
--- plugin-conversations 009: the charge a customer was asked for inside a
--- conversation, and the row that stops it being asked for twice.
+var MIGRATION_001_A_CAIXA_SABE_QUEM_FALOU_POR_ULTIMO = `-- ---------------------------------------------------------------------------
+-- 001_a_caixa_sabe_quem_falou_por_ultimo.sql
 --
--- The flow this table exists for: the customer taps "Pagar" on a WhatsApp
--- confirmation, a Pix is opened at the provider, the copy-and-paste code is
--- sent back into the same thread, and the money \u2014 or the expiry \u2014 comes back as
--- a webhook. Four hops, at least one of them delivered more than once.
+-- A conversa guarda o TEXTO e a HORA da \xFAltima mensagem, e n\xE3o guarda de quem
+-- ela foi. Sem isso, "quem est\xE1 esperando resposta" \u2014 que \xE9 a pergunta com que
+-- este produto abre o dia \u2014 n\xE3o \xE9 respond\xEDvel a partir da lista: seria preciso
+-- carregar as mensagens de cada thread para descobrir quem falou por \xFAltimo.
 --
--- \`id\` IS the \`external_reference\` sent to the provider, and that is the whole
--- reconciliation story: the provider echoes it on every payment event, so a
--- delivery names the row without a lookup table, and a payment created by this
--- pool can never be confused with one created by the merchant's own AbacatePay
--- account (the redundancy the design accepted on purpose). It is also the
--- Idempotency-Key of the create call, so a retried create replays the provider's
--- own first answer instead of opening a second charge.
+-- O painel respondia com \`unread_count > 0\`, que \xE9 a aproxima\xE7\xE3o honesta que o
+-- shape permitia e n\xE3o \xE9 a resposta certa. Ela erra exatamente no caso que mais
+-- d\xF3i: a thread que algu\xE9m ABRIU, leu, decidiu responder depois e esqueceu. O
+-- n\xE3o-lida zera na leitura; o cliente continua esperando.
 --
--- \u2500\u2500 The two columns that are not data, but claims \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
--- \`link_delivered_at\` and \`settled_notified_at\` are LOCKS, taken with a
--- conditional UPDATE \u2026 WHERE \u2026 IS NULL RETURNING. They exist because of a fact
--- verified against the sandbox on 2026-08-24: ONE Pix becoming available emits
--- TWO webhook events with two different event ids \u2014
+-- \u2500\u2500 Por que TRIGGER e n\xE3o mais uma coluna que cada escritor preenche \u2500\u2500\u2500\u2500\u2500\u2500\u2500
 --
---     payment.link_generated     evt_2448\u2026  occurred_at 16:52:49.640Z
---     payment.approval_available evt_750b\u2026  occurred_at 16:52:49.639Z
+-- \`last_message_preview\` e \`last_message_at\` s\xE3o escritos hoje em CINCO lugares:
+-- o provider do navegador (criar conversa, enviar), a fun\xE7\xE3o \`messaging-send\` e
+-- o \`tyxter-webhook\` (duas vezes, contando o handler de pagamento). Uma sexta
+-- coluna com a mesma disciplina \xE9 uma sexta chance de algu\xE9m esquecer \u2014 e o
+-- modo de falhar \xE9 silencioso: a fila simplesmente para de listar algu\xE9m.
 --
--- \u2014 carrying identical \`data\`. The dedupe ledger (005) cannot help: they are
--- genuinely two events. Without a claim on the ROW the customer receives the
--- same Pix code twice, one second apart, which reads as a double charge.
+-- O gatilho tem UM escritor e n\xE3o pode ser esquecido pelo pr\xF3ximo chamador. Ele
+-- \xE9 deliberadamente estreito: cuida s\xF3 de \`last_message_direction\`. Trazer o
+-- preview e a hora para c\xE1 seria a corre\xE7\xE3o certa e \xE9 uma mudan\xE7a maior, com
+-- cinco chamadores para reconciliar \u2014 fica anotado, n\xE3o feito aqui.
+-- ---------------------------------------------------------------------------
+
+ALTER TABLE public.plg_conversations
+  ADD COLUMN IF NOT EXISTS last_message_direction text;
+
+DO $$
+BEGIN
+  ALTER TABLE public.plg_conversations
+    ADD CONSTRAINT plg_conversations_last_message_direction_check
+    CHECK (last_message_direction IS NULL
+           OR last_message_direction = ANY (ARRAY['inbound'::text, 'outbound'::text]));
+EXCEPTION WHEN duplicate_object THEN
+  NULL;
+END $$;
+
+COMMENT ON COLUMN public.plg_conversations.last_message_direction IS
+  'Quem falou por \xFAltimo: inbound = o cliente, outbound = a casa (001). Mantida por gatilho em plg_conversation_messages, nunca escrita \xE0 m\xE3o. NULL = thread anterior a esta migration cujo backfill n\xE3o achou mensagem nenhuma.';
+
+-- \u2500\u2500 o \xFAnico escritor \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 --
--- \u2500\u2500 Money moves forward only \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
--- \`status\` is applied monotonically by the same rule the delivery statuses use,
--- because webhooks are unordered: a \`link_generated\` arriving after a \`paid\`
--- must not walk a settled charge back to "waiting". The CHECK carries the
--- provider's own vocabulary verbatim, including \`approval_requested\` and
--- \`approved\`, which the design's list did not have and the OpenAPI does.
+-- AFTER INSERT: a mensagem j\xE1 existe quando a conversa \xE9 atualizada, ent\xE3o uma
+-- falha aqui n\xE3o pode desfazer o recebimento \u2014 e recebimento perdido \xE9 pior que
+-- fila desatualizada.
 --
--- Writes are SERVICE-ROLE ONLY. A member who could update \`status\` could mark a
--- charge paid; one who could update \`amount_cents\` could change what a customer
--- is asked for after the fact. Members read \u2014 "was this booking paid, and how
--- much for" is a question the inbox and the booking page both have to answer.
--- Idempotent + safe to re-run.
--- ============================================================================
+-- Sem cl\xE1usula de ordem: a mensagem que acabou de entrar \xC9 a \xFAltima. Comparar
+-- com \`last_message_at\` para decidir seria correto e traria uma corrida com os
+-- cinco escritores daquela coluna, que \xE9 justamente o problema que o gatilho
+-- existe para n\xE3o ter.
+CREATE OR REPLACE FUNCTION public.plg_conversations_stamp_direction()
+RETURNS trigger
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path TO ''
+AS $function$
+BEGIN
+  IF NEW.direction IS NULL THEN
+    RETURN NULL;
+  END IF;
 
-CREATE TABLE IF NOT EXISTS public.plg_conversations_payment_requests (
-  -- Ours, and the provider's \`external_reference\`, and the create's
-  -- Idempotency-Key. One identity, so there is nothing to keep in step.
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  conversation_id uuid REFERENCES public.plg_conversations(id) ON DELETE SET NULL,
-  -- The outbound message carrying the Pix code, once it has been sent. NULL
-  -- until then, and that is exactly how "the code has not gone out yet" is read.
-  message_id uuid REFERENCES public.plg_conversation_messages(id) ON DELETE SET NULL,
-  -- Polymorphic and deliberately not a foreign key, for the same reason 008's
-  -- subject columns are not: 'booking' today, 'order' and 'invoice' later, in
-  -- tables this plugin does not own.
-  subject_type text,
-  subject_id text,
-  -- Integers, because the provider takes \`amount_brl_centavos\` and a float that
-  -- rounds to 4499 is a customer charged one centavo less than the salon reads.
-  amount_cents integer NOT NULL CHECK (amount_cents > 0),
-  currency text NOT NULL DEFAULT 'BRL',
-  description text,
-  -- Provider-neutral, like every other column in this plugin: the second
-  -- payment rail must not need a second table.
-  provider text NOT NULL,
-  status text NOT NULL DEFAULT 'created'
-    CHECK (status IN ('created', 'link_generated', 'approval_requested', 'approved',
-                      'paid', 'failed', 'expired', 'cancelled')),
-  provider_payment_id text,
-  payment_link_url text,
-  -- Kept because the customer may lose the message and ask for it again, and
-  -- re-reading a code we already have beats opening a second charge.
-  pix_copy_paste text,
-  -- The claims. See the header.
-  link_delivered_at timestamptz,
-  settled_notified_at timestamptz,
-  settled_at timestamptz,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-ALTER TABLE public.plg_conversations_payment_requests ENABLE ROW LEVEL SECURITY;
+  UPDATE public.plg_conversations
+     SET last_message_direction = NEW.direction
+   WHERE id = NEW.conversation_id;
+
+  RETURN NULL;
+END $function$;
+
+COMMENT ON FUNCTION public.plg_conversations_stamp_direction() IS
+  'Carimba plg_conversations.last_message_direction a cada mensagem inserida (001). O \xFAnico escritor da coluna.';
+
+DROP TRIGGER IF EXISTS plg_conversation_messages_stamp_direction ON public.plg_conversation_messages;
+CREATE TRIGGER plg_conversation_messages_stamp_direction
+  AFTER INSERT ON public.plg_conversation_messages
+  FOR EACH ROW
+  EXECUTE FUNCTION public.plg_conversations_stamp_direction();
 
--- The webhook's lookup: an event names the payment, and this finds the row.
--- UNIQUE where present \u2014 two rows claiming one provider payment would make the
--- settlement a coin toss.
-CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_payment_requests_provider
-  ON public.plg_conversations_payment_requests(provider, provider_payment_id)
-  WHERE provider_payment_id IS NOT NULL;
-
--- At most ONE live charge per subject. A customer tapping "Pagar" twice sends
--- two \`message.received\` events with two different event ids, so the dedupe
--- ledger lets both through \u2014 this is what stops the second one opening a second
--- Pix for the same appointment. Settled rows are excluded: a booking legitimately
--- gets a new charge after one expired.
-CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_conversations_payment_requests_open_subject
-  ON public.plg_conversations_payment_requests(tenant_id, subject_type, subject_id)
-  WHERE subject_id IS NOT NULL
-    AND status IN ('created', 'link_generated', 'approval_requested', 'approved');
-
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_payment_requests_tenant
-  ON public.plg_conversations_payment_requests(tenant_id, created_at DESC);
-
-CREATE INDEX IF NOT EXISTS idx_plg_conversations_payment_requests_subject
-  ON public.plg_conversations_payment_requests(tenant_id, subject_type, subject_id)
-  WHERE subject_id IS NOT NULL;
-
--- RLS: members read their own tenant's charges. No INSERT/UPDATE/DELETE policy
--- and no write GRANT \u2014 every write here is made by the webhook with the
--- service-role key, acting on a signed delivery.
-DROP POLICY IF EXISTS plg_conversations_payment_requests_select
-  ON public.plg_conversations_payment_requests;
-CREATE POLICY plg_conversations_payment_requests_select
-  ON public.plg_conversations_payment_requests
-  FOR SELECT TO authenticated
-  USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT ON public.plg_conversations_payment_requests TO authenticated;
+-- \u2500\u2500 backfill \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- DISTINCT ON pega uma linha por conversa, a mais recente. \`at DESC NULLS LAST\`
+-- e depois \`id DESC\` porque \`at\` tem default e n\xE3o NOT NULL: duas mensagens no
+-- mesmo instante (ou ambas sem hora) precisam de um desempate est\xE1vel, ou o
+-- backfill devolve resultado diferente a cada execu\xE7\xE3o.
+UPDATE public.plg_conversations c
+   SET last_message_direction = m.direction
+  FROM (
+    SELECT DISTINCT ON (conversation_id) conversation_id, direction
+      FROM public.plg_conversation_messages
+     WHERE direction IS NOT NULL
+     ORDER BY conversation_id, at DESC NULLS LAST, id DESC
+  ) m
+ WHERE m.conversation_id = c.id
+   AND c.last_message_direction IS DISTINCT FROM m.direction;
+
+-- S\xF3 as threads que interessam \xE0 fila, e s\xF3 quando o cliente falou por \xFAltimo:
+-- \xE9 o \xEDndice que a pergunta "quem est\xE1 esperando" faz, e ele fica pequeno
+-- porque a maioria das conversas de um tenant est\xE1 encerrada.
+CREATE INDEX IF NOT EXISTS idx_plg_conversations_waiting
+  ON public.plg_conversations (tenant_id, last_message_at DESC)
+  WHERE status = 'open' AND last_message_direction = 'inbound';
 `;
+var MIGRATIONS = [
+  { id: "000_baseline", sql: MIGRATION_000_BASELINE },
+  { id: "001_a_caixa_sabe_quem_falou_por_ultimo", sql: MIGRATION_001_A_CAIXA_SABE_QUEM_FALOU_POR_ULTIMO }
+];
 
 // src/index.ts
 function createSafeProvider() {
@@ -2388,7 +2720,8 @@ function createConversationsPlugin(options) {
     contactLookup: options?.contactLookup,
     contactEntityDef: options?.contactEntityDef
   };
-  const PageComponent = () => React4.createElement(ConversationsPage, { store: store2, config });
+  const dashboardWidgets = createConversationsDashboardWidgets({ store: store2, config });
+  const PageComponent = () => React4__default.createElement(ConversationsPage, { store: store2, config });
   PageComponent.displayName = "ConversationsPage";
   return {
     id: "conversations",
@@ -2424,6 +2757,7 @@ function createConversationsPlugin(options) {
       }
     ],
     widgets: [],
+    dashboardWidgets,
     events: [
       { name: "conversations.message.received", description: "An inbound message arrived on any channel" },
       { name: "conversations.message.sent", description: "An outbound message was sent" },
@@ -2493,62 +2827,15 @@ function createConversationsPlugin(options) {
         permission: { feature: "conversations", action: "create" }
       }
     ],
-    migrations: [
-      {
-        id: "conversations-001-base-tables",
-        version: "1.0.0",
-        sql: MIGRATION_001_CONVERSATIONS,
-        description: "Create plg_conversations and plg_conversation_messages (tenant-scoped RLS)"
-      },
-      {
-        id: "conversations-002-contact-person",
-        version: "1.1.0",
-        sql: MIGRATION_002_CONTACT_PERSON,
-        description: "Link threads to public.people via contact_person_id (nullable, ON DELETE SET NULL)"
-      },
-      {
-        id: "conversations-003-channels",
-        version: "1.2.0",
-        sql: MIGRATION_003_CHANNELS,
-        description: "Create plg_conversations_channels \u2014 which number a message leaves by (product fallback vs tenant dedicated); member read, service-role writes"
-      },
-      {
-        id: "conversations-004-message-delivery",
-        version: "1.2.0",
-        sql: MIGRATION_004_MESSAGE_DELIVERY,
-        description: "Message provider_message_id + delivery_status + sender attribution (sender_kind / sender_label)"
-      },
-      {
-        id: "conversations-005-webhook-events",
-        version: "1.3.0",
-        sql: MIGRATION_005_WEBHOOK_EVENTS,
-        description: "Create plg_conversations_webhook_events \u2014 the dedupe ledger that makes an at-least-once webhook safe to apply"
-      },
-      {
-        id: "conversations-006-optouts",
-        version: "1.3.0",
-        sql: MIGRATION_006_OPTOUTS,
-        description: "Create plg_conversations_optouts \u2014 consent suppression read by messaging-send before every send"
-      },
-      {
-        id: "conversations-007-inbound-routing",
-        version: "1.3.0",
-        sql: MIGRATION_007_INBOUND_ROUTING,
-        description: "Widen delivery_status to the statuses Tyxter emits + plg_conversations_match_by_phone (BR digit-suffix thread matching, service-role only)"
-      },
-      {
-        id: "conversations-008-message-subject",
-        version: "1.3.0",
-        sql: MIGRATION_008_MESSAGE_SUBJECT,
-        description: "Message subject_type / subject_id \u2014 the correlation anchor a button reply falls back to when the provider echoes the button text instead of our payload"
-      },
-      {
-        id: "conversations-009-payment-requests",
-        version: "1.4.0",
-        sql: MIGRATION_009_PAYMENT_REQUESTS,
-        description: "Create plg_conversations_payment_requests \u2014 the charge opened inside a conversation, with the row-level claims that make one Pix arrive once and a settlement notify once"
-      }
-    ],
+    // One baseline per unit since #338 — read from the generated barrel
+    // rather than listed here, so regenerating the SQL never needs a
+    // manifest edit to match.
+    migrations: MIGRATIONS.map((entry) => ({
+      id: `conversations-${entry.id}`,
+      version: "1.0.0",
+      sql: entry.sql,
+      description: "The whole schema this plugin provisions, as one file: every table, view, function, policy and grant, plus the reference rows it seeds. Replaced the per-change chain in the 1.0.0 squash (#338); the files it collapsed are kept, unapplied, in src/migrations.archive/."
+    })),
     functions: [
       {
         slug: "tyxter-webhook",
@@ -2607,6 +2894,20 @@ function createConversationsPlugin(options) {
         ]
       }
     ],
+    // The settings screen exists so the connector below can be REACHED: the
+    // Integrations tab is drawn by PluginSettingsPanel, so a plugin with a
+    // connector and no settings route ships a connector nobody can open.
+    settings: [
+      {
+        id: "conversations",
+        label: "Conversas",
+        icon: "MessageCircle",
+        component: ConversationsSettingsTab,
+        order: 30,
+        permission: { feature: "conversations", action: "read" }
+      }
+    ],
+    onboarding: { program: buildConversationsOnboarding() },
     // WhatsApp through Tyxter. Declared here because this plugin IS the inbox
     // the messages land in — the connector configures inside Conversas.
     connectors: [tyxterConnectorDef],
@@ -2614,6 +2915,6 @@ function createConversationsPlugin(options) {
   };
 }
 
-export { PAYMENT_PREFLIGHT_FUNCTION, TYXTER_CONNECTOR_ID, TYXTER_LATENCY_BUDGET_MS, canOfferPayment, createConversationsPlugin, createMockConversationsProvider, createSupabaseConversationsProvider, listMessagingChannels, openPaymentSetupSession, readPaymentReadiness, tyxterConnectorDef };
+export { PAYMENT_PREFLIGHT_FUNCTION, TYXTER_CONNECTOR_ID, TYXTER_LATENCY_BUDGET_MS, canOfferPayment, createConversationsPlugin, createMockConversationsProvider, createSupabaseConversationsProvider, isWaitingOnUs, listMessagingChannels, openPaymentSetupSession, readPaymentReadiness, tyxterConnectorDef };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map