@fayz-ai/plugin-conversations 0.22.3 → 0.22.4

package/dist/index.js

@@ -5282,6 +5282,18 @@ CREATE INDEX IF NOT EXISTS plg_conversation_messages_midia_sem_arquivo
   WHERE media_path IS NULL
     AND message_type IN ('image', 'video', 'audio', 'document', 'sticker');
 `;
+var MIGRATION_014_CLAIMING_TARGETS_IS_SERVER_ONLY = `-- 014_claiming_targets_is_server_only.sql
+--
+-- 003 revoked \`conversations_claim_targets\` from PUBLIC and anon but not from
+-- \`authenticated\`, which the pool's default privileges grant on every new
+-- function in public. Live, any signed-in user of any tenant could claim (and
+-- so burn) another tenant's campaign targets by uuid \u2014 SECURITY DEFINER, no
+-- caller check. The only caller is the conversations-provider edge function,
+-- which uses the service-role key.
+
+REVOKE ALL ON FUNCTION public.conversations_claim_targets(uuid, integer) FROM PUBLIC, anon, authenticated;
+GRANT EXECUTE ON FUNCTION public.conversations_claim_targets(uuid, integer) TO service_role;
+`;
 var MIGRATIONS = [
   { id: "000_baseline", sql: MIGRATION_000_BASELINE },
   { id: "001_a_caixa_sabe_quem_falou_por_ultimo", sql: MIGRATION_001_A_CAIXA_SABE_QUEM_FALOU_POR_ULTIMO },
@@ -5296,7 +5308,8 @@ var MIGRATIONS = [
   { id: "010_a_chegada_e_anunciada_por_conta", sql: MIGRATION_010_A_CHEGADA_E_ANUNCIADA_POR_CONTA },
   { id: "011_o_anuncio_e_uma_campainha_nao_um_recado", sql: MIGRATION_011_O_ANUNCIO_E_UMA_CAMPAINHA_NAO_UM_RECADO },
   { id: "012_a_rich_message_keeps_its_shape", sql: MIGRATION_012_A_RICH_MESSAGE_KEEPS_ITS_SHAPE },
-  { id: "013_a_midia_fica_conosco", sql: MIGRATION_013_A_MIDIA_FICA_CONOSCO }
+  { id: "013_a_midia_fica_conosco", sql: MIGRATION_013_A_MIDIA_FICA_CONOSCO },
+  { id: "014_claiming_targets_is_server_only", sql: MIGRATION_014_CLAIMING_TARGETS_IS_SERVER_ONLY }
 ];
 function client3() {
   const c = getSupabaseClientOptional();