@fayz-ai/plugin-conversations 0.23.1 → 0.23.3

package/dist/index.js

@@ -5594,6 +5594,92 @@ var MIGRATION_014_CLAIMING_TARGETS_IS_SERVER_ONLY = `-- 014_claiming_targets_is_
 REVOKE ALL ON FUNCTION public.conversations_claim_targets(uuid, integer) FROM PUBLIC, anon, authenticated;
 GRANT EXECUTE ON FUNCTION public.conversations_claim_targets(uuid, integer) TO service_role;
 `;
+var MIGRATION_015_THE_SERVICE_DOOR_FOR_MESSAGING = `-- ============================================================================
+-- 015_the_service_door_for_messaging \u2014 the WhatsApp edge functions move to the
+-- integration service (ADR 0003 phase 2, wave 2).
+--
+-- Two kinds of table, two kinds of access:
+--
+--   * tenant tables a member already writes (conversations, messages,
+--     campaigns, templates): the service writes them AS the store's owner or
+--     as the verified caller (core migrations 210/212), under RLS. Nothing
+--     here.
+--   * service tables only a machine writes, which service_role wrote until
+--     now: provider credentials, channels, opt-outs, webhook events, provider
+--     templates, payment requests. fayz_integration gets exactly that, table
+--     by table, with an explicit policy. Panels keep their SELECT policies.
+--
+-- And the three server-only functions the webhooks call get EXECUTE for the
+-- service role (they were service_role only, 014).
+--
+-- Guarded: the role is an operator step. Replay-safe.
+-- ============================================================================
+
+DO $$
+DECLARE
+  t text;
+  f text;
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'fayz_integration') THEN
+    RETURN;
+  END IF;
+
+  FOREACH t IN ARRAY ARRAY[
+    'plg_conversations_providers',
+    'plg_conversations_channels',
+    'plg_conversations_optouts',
+    'plg_conversations_webhook_events',
+    'plg_automations_provider_templates',
+    'plg_conversations_payment_requests'
+  ] LOOP
+    IF to_regclass('public.' || t) IS NULL THEN CONTINUE; END IF;
+    EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO fayz_integration', t);
+    EXECUTE format('DROP POLICY IF EXISTS %I ON public.%I', t || '_service', t);
+    EXECUTE format('CREATE POLICY %I ON public.%I FOR ALL TO fayz_integration USING (true) WITH CHECK (true)', t || '_service', t);
+  END LOOP;
+
+  FOREACH f IN ARRAY ARRAY[
+    'public.conversations_claim_targets(uuid, integer)',
+    'public.plg_booking_apply_channel_reply(uuid, text, uuid)',
+    'public.plg_conversations_match_by_phone(text, text, text, uuid)'
+  ] LOOP
+    IF to_regprocedure(f) IS NOT NULL THEN
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %s TO fayz_integration', f);
+    END IF;
+  END LOOP;
+END $$;
+`;
+var MIGRATION_016_A_DELIVERY_RECEIPT_FINDS_ITS_TENANT = `-- ============================================================================
+-- 016_a_delivery_receipt_finds_its_tenant \u2014 the Tyxter webhook moves to the
+-- integration service (ADR 0003 phase 2).
+--
+-- A delivery receipt names only the provider's message id. The service writes
+-- the inbox AS the store's owner (core 212), so it must learn the store first:
+-- this answers the tenant of the message that id was sent as, and nothing
+-- else. SECURITY DEFINER, service role only.
+--
+-- Replay-safe: CREATE OR REPLACE; guarded grants.
+-- ============================================================================
+
+CREATE OR REPLACE FUNCTION public.conversations_message_tenant(p_provider_message_id text) RETURNS uuid
+LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO ''
+AS $function$
+  SELECT m.tenant_id
+    FROM public.plg_conversation_messages m
+   WHERE m.provider_message_id = p_provider_message_id
+   ORDER BY m.at DESC NULLS LAST
+   LIMIT 1;
+$function$;
+
+DO $$
+BEGIN
+  REVOKE ALL ON FUNCTION public.conversations_message_tenant(text) FROM PUBLIC;
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'anon') THEN REVOKE ALL ON FUNCTION public.conversations_message_tenant(text) FROM anon; END IF;
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'authenticated') THEN REVOKE ALL ON FUNCTION public.conversations_message_tenant(text) FROM authenticated; END IF;
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'service_role') THEN GRANT EXECUTE ON FUNCTION public.conversations_message_tenant(text) TO service_role; END IF;
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'fayz_integration') THEN GRANT EXECUTE ON FUNCTION public.conversations_message_tenant(text) TO fayz_integration; END IF;
+END $$;
+`;
 var MIGRATIONS = [
   { id: "000_baseline", sql: MIGRATION_000_BASELINE },
   { id: "001_a_caixa_sabe_quem_falou_por_ultimo", sql: MIGRATION_001_A_CAIXA_SABE_QUEM_FALOU_POR_ULTIMO },
@@ -5609,7 +5695,9 @@ var MIGRATIONS = [
   { id: "011_o_anuncio_e_uma_campainha_nao_um_recado", sql: MIGRATION_011_O_ANUNCIO_E_UMA_CAMPAINHA_NAO_UM_RECADO },
   { id: "012_a_rich_message_keeps_its_shape", sql: MIGRATION_012_A_RICH_MESSAGE_KEEPS_ITS_SHAPE },
   { id: "013_a_midia_fica_conosco", sql: MIGRATION_013_A_MIDIA_FICA_CONOSCO },
-  { id: "014_claiming_targets_is_server_only", sql: MIGRATION_014_CLAIMING_TARGETS_IS_SERVER_ONLY }
+  { id: "014_claiming_targets_is_server_only", sql: MIGRATION_014_CLAIMING_TARGETS_IS_SERVER_ONLY },
+  { id: "015_the_service_door_for_messaging", sql: MIGRATION_015_THE_SERVICE_DOOR_FOR_MESSAGING },
+  { id: "016_a_delivery_receipt_finds_its_tenant", sql: MIGRATION_016_A_DELIVERY_RECEIPT_FINDS_ITS_TENANT }
 ];
 var conversationsV1SettingsTabs = [
   defineSettingsTab({