@fayz-ai/plugin-financial 0.2.0 → 0.8.1

package/src/migrations/001_financial_base.sql

@@ -1,9 +1,9 @@
 -- Financial Plugin: Base Tables
 -- Pattern: uuid PK, tenant_id FK, timestamps, RLS via project_rls.sql auto-detection
 
-CREATE TABLE IF NOT EXISTS public.payment_method_types (
+CREATE TABLE IF NOT EXISTS public.plg_financial_payment_method_types (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   name text NOT NULL,
   transaction_type text NOT NULL,
   is_active boolean NOT NULL DEFAULT true,
@@ -11,14 +11,14 @@ CREATE TABLE IF NOT EXISTS public.payment_method_types (
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.payment_method_types ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_payment_method_types_tenant ON public.payment_method_types(tenant_id);
+ALTER TABLE public.plg_financial_payment_method_types ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_payment_method_types_tenant ON public.plg_financial_payment_method_types(tenant_id);
 
-CREATE TABLE IF NOT EXISTS public.payment_methods (
+CREATE TABLE IF NOT EXISTS public.plg_financial_payment_methods (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   name text NOT NULL,
-  payment_method_type_id uuid REFERENCES public.payment_method_types(id),
+  payment_method_type_id uuid REFERENCES public.plg_financial_payment_method_types(id),
   is_active boolean NOT NULL DEFAULT true,
   discount_mode text,
   discount_value numeric(12,2) DEFAULT 0,
@@ -31,12 +31,12 @@ CREATE TABLE IF NOT EXISTS public.payment_methods (
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.payment_methods ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_payment_methods_tenant ON public.payment_methods(tenant_id);
+ALTER TABLE public.plg_financial_payment_methods ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_payment_methods_tenant ON public.plg_financial_payment_methods(tenant_id);
 
-CREATE TABLE IF NOT EXISTS public.bank_accounts (
+CREATE TABLE IF NOT EXISTS public.plg_financial_bank_accounts (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   name text NOT NULL,
   account_type text NOT NULL DEFAULT 'bank_account',
   bank_name text,
@@ -52,13 +52,13 @@ CREATE TABLE IF NOT EXISTS public.bank_accounts (
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.bank_accounts ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_bank_accounts_tenant ON public.bank_accounts(tenant_id);
+ALTER TABLE public.plg_financial_bank_accounts ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_bank_accounts_tenant ON public.plg_financial_bank_accounts(tenant_id);
 
-CREATE TABLE IF NOT EXISTS public.cash_register_sessions (
+CREATE TABLE IF NOT EXISTS public.plg_financial_cash_register_sessions (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
-  bank_account_id uuid NOT NULL REFERENCES public.bank_accounts(id),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  bank_account_id uuid NOT NULL REFERENCES public.plg_financial_bank_accounts(id),
   status text NOT NULL DEFAULT 'open',
   opened_at timestamptz NOT NULL DEFAULT now(),
   opened_by_user_id uuid,
@@ -75,15 +75,15 @@ CREATE TABLE IF NOT EXISTS public.cash_register_sessions (
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.cash_register_sessions ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_cash_register_sessions_tenant ON public.cash_register_sessions(tenant_id);
+ALTER TABLE public.plg_financial_cash_register_sessions ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_cash_register_sessions_tenant ON public.plg_financial_cash_register_sessions(tenant_id);
 
 -- Financial movements (installments, payments) — plugin-specific, not archetype
--- Invoices themselves use saas_core.orders (kind='invoice_payable'/'invoice_receivable')
-CREATE TABLE IF NOT EXISTS public.financial_movements (
+-- Invoices themselves use public.orders (kind='invoice_payable'/'invoice_receivable')
+CREATE TABLE IF NOT EXISTS public.plg_financial_movements (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
-  invoice_id uuid REFERENCES saas_core.orders(id),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  invoice_id uuid REFERENCES public.orders(id),
   direction text NOT NULL,
   movement_kind text NOT NULL,
   amount numeric(14,2) NOT NULL,
@@ -92,9 +92,9 @@ CREATE TABLE IF NOT EXISTS public.financial_movements (
   due_date date NOT NULL,
   payment_date date,
   installment_number integer,
-  payment_method_id uuid REFERENCES public.payment_methods(id),
-  bank_account_id uuid REFERENCES public.bank_accounts(id),
-  cash_session_id uuid REFERENCES public.cash_register_sessions(id),
+  payment_method_id uuid REFERENCES public.plg_financial_payment_methods(id),
+  bank_account_id uuid REFERENCES public.plg_financial_bank_accounts(id),
+  cash_session_id uuid REFERENCES public.plg_financial_cash_register_sessions(id),
   card_brand text,
   card_installments integer,
   notes text,
@@ -102,8 +102,8 @@ CREATE TABLE IF NOT EXISTS public.financial_movements (
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.financial_movements ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_financial_movements_tenant ON public.financial_movements(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_financial_movements_invoice ON public.financial_movements(invoice_id);
-CREATE INDEX IF NOT EXISTS idx_financial_movements_due ON public.financial_movements(tenant_id, due_date);
-CREATE INDEX IF NOT EXISTS idx_financial_movements_bank ON public.financial_movements(bank_account_id);
+ALTER TABLE public.plg_financial_movements ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_movements_tenant ON public.plg_financial_movements(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_financial_movements_invoice ON public.plg_financial_movements(invoice_id);
+CREATE INDEX IF NOT EXISTS idx_plg_financial_movements_due ON public.plg_financial_movements(tenant_id, due_date);
+CREATE INDEX IF NOT EXISTS idx_plg_financial_movements_bank ON public.plg_financial_movements(bank_account_id);

package/src/migrations/002_chart_of_accounts.sql

@@ -1,28 +1,28 @@
 -- Financial Plugin: Chart of Accounts + Cost Centers
 
-CREATE TABLE IF NOT EXISTS public.chart_of_accounts (
+CREATE TABLE IF NOT EXISTS public.plg_financial_chart_of_accounts (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   code text NOT NULL,
   name text NOT NULL,
   node_type text NOT NULL DEFAULT 'leaf',
-  parent_id uuid REFERENCES public.chart_of_accounts(id),
+  parent_id uuid REFERENCES public.plg_financial_chart_of_accounts(id),
   is_active boolean NOT NULL DEFAULT true,
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.chart_of_accounts ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_chart_of_accounts_tenant ON public.chart_of_accounts(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_chart_of_accounts_parent ON public.chart_of_accounts(parent_id);
+ALTER TABLE public.plg_financial_chart_of_accounts ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_chart_of_accounts_tenant ON public.plg_financial_chart_of_accounts(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_financial_chart_of_accounts_parent ON public.plg_financial_chart_of_accounts(parent_id);
 
-CREATE TABLE IF NOT EXISTS public.cost_centers (
+CREATE TABLE IF NOT EXISTS public.plg_financial_cost_centers (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   code text NOT NULL,
   name text NOT NULL,
   is_active boolean NOT NULL DEFAULT true,
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.cost_centers ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_cost_centers_tenant ON public.cost_centers(tenant_id);
+ALTER TABLE public.plg_financial_cost_centers ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_cost_centers_tenant ON public.plg_financial_cost_centers(tenant_id);

package/src/migrations/003_card_brands.sql

@@ -1,12 +1,12 @@
 -- Financial Plugin: Card Brands
 
-CREATE TABLE IF NOT EXISTS public.card_brands (
+CREATE TABLE IF NOT EXISTS public.plg_financial_card_brands (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   name text NOT NULL,
   is_active boolean NOT NULL DEFAULT true,
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.card_brands ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_card_brands_tenant ON public.card_brands(tenant_id);
+ALTER TABLE public.plg_financial_card_brands ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_financial_card_brands_tenant ON public.plg_financial_card_brands(tenant_id);

package/src/migrations/004_order_to_cash.sql

@@ -1,45 +1,59 @@
 -- Financial plugin — order-to-cash companion SQL.
 -- The atomic "promote an order into an invoice + installment ledger" function
 -- that CRM (approveQuote) and the agenda financial bridge both RPC. It belongs
--- to the financial plugin (it writes financial_movements + reads orders), and it
+-- to the financial plugin (it writes plg_financial_movements + reads orders), and it
 -- ships WITH the plugin so enabling Payments provisions it. Idempotent.
--- Depends on: saas_core.orders, public.financial_movements (001_financial_base).
+-- Depends on: public.orders, public.plg_financial_movements (001_financial_base).
 
 -- 1. Sequence generator (REC-00001 / PAG-00001 numbering)
-CREATE TABLE IF NOT EXISTS saas_core.sequences (
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id),
+CREATE TABLE IF NOT EXISTS public.sequences (
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id),
   kind text NOT NULL,
   current_value bigint NOT NULL DEFAULT 0,
   PRIMARY KEY (tenant_id, kind)
 );
-CREATE OR REPLACE FUNCTION saas_core.next_sequence(p_tenant_id uuid, p_kind text)
-RETURNS bigint LANGUAGE plpgsql AS $$
+-- Baseline: RLS ON, deny-all (no policies), like the salon pool. The counter is
+-- an internal, non-API table written ONLY through next_sequence() below, which is
+-- SECURITY DEFINER and so bypasses RLS as the table owner. Legacy pools that
+-- shipped this table without RLS are also remediated by packages/db 013_sequences_rls.sql.
+ALTER TABLE public.sequences ENABLE ROW LEVEL SECURITY;
+
+-- SECURITY DEFINER: next_sequence is called directly via PostgREST RPC by
+-- authenticated users (src/data/supabase.ts → createInvoice), so with deny-all
+-- RLS on public.sequences it MUST run as the table owner to write the counter.
+-- SET search_path pins schema resolution for the definer context.
+CREATE OR REPLACE FUNCTION public.next_sequence(p_tenant_id uuid, p_kind text)
+RETURNS bigint
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
 DECLARE v_next bigint;
 BEGIN
-  INSERT INTO saas_core.sequences (tenant_id, kind, current_value)
+  INSERT INTO public.sequences (tenant_id, kind, current_value)
   VALUES (p_tenant_id, p_kind, 1)
   ON CONFLICT (tenant_id, kind)
-  DO UPDATE SET current_value = saas_core.sequences.current_value + 1
+  DO UPDATE SET current_value = public.sequences.current_value + 1
   RETURNING current_value INTO v_next;
   RETURN v_next;
 END;
 $$;
 
--- 2. Order-to-cash columns on the spine orders (plugin extends saas_core.orders)
-ALTER TABLE saas_core.orders
+-- 2. Order-to-cash columns on the spine orders (plugin extends public.orders)
+ALTER TABLE public.orders
   ADD COLUMN IF NOT EXISTS stage text,
   ADD COLUMN IF NOT EXISTS direction text;
 
--- 3. RLS + grants for financial_movements (table from 001_financial_base.sql)
-ALTER TABLE public.financial_movements ENABLE ROW LEVEL SECURITY;
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.financial_movements TO authenticated;
+-- 3. RLS + grants for plg_financial_movements (table from 001_financial_base.sql)
+ALTER TABLE public.plg_financial_movements ENABLE ROW LEVEL SECURITY;
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_financial_movements TO authenticated;
 DO $$
 BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename='financial_movements' AND policyname='financial_movements_select') THEN
-    CREATE POLICY financial_movements_select ON public.financial_movements FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-    CREATE POLICY financial_movements_insert ON public.financial_movements FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-    CREATE POLICY financial_movements_update ON public.financial_movements FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-    CREATE POLICY financial_movements_delete ON public.financial_movements FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename='plg_financial_movements' AND policyname='plg_financial_movements_select') THEN
+    CREATE POLICY plg_financial_movements_select ON public.plg_financial_movements FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+    CREATE POLICY plg_financial_movements_insert ON public.plg_financial_movements FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+    CREATE POLICY plg_financial_movements_update ON public.plg_financial_movements FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+    CREATE POLICY plg_financial_movements_delete ON public.plg_financial_movements FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
   END IF;
 END $$;
 
@@ -54,10 +68,10 @@ CREATE OR REPLACE FUNCTION public.fn_invoice_from_order(
 ) RETURNS uuid
 LANGUAGE plpgsql
 SECURITY DEFINER
-SET search_path = public, saas_core
+SET search_path = public
 AS $$
 DECLARE
-  v_order   saas_core.orders%ROWTYPE;
+  v_order   public.orders%ROWTYPE;
   v_ref     text;
   v_seq     bigint;
   v_summary text;
@@ -73,27 +87,27 @@ DECLARE
   v_due     date;
   i         int;
 BEGIN
-  SELECT * INTO v_order FROM saas_core.orders WHERE id = p_order_id;
+  SELECT * INTO v_order FROM public.orders WHERE id = p_order_id;
   IF NOT FOUND THEN RAISE EXCEPTION 'fn_invoice_from_order: order % not found', p_order_id; END IF;
   IF v_order.tenant_id NOT IN (SELECT public.user_tenant_ids()) THEN
     RAISE EXCEPTION 'fn_invoice_from_order: forbidden';
   END IF;
 
-  SELECT id INTO v_existing FROM public.financial_movements
+  SELECT id INTO v_existing FROM public.plg_financial_movements
     WHERE invoice_id = p_order_id AND movement_kind = 'bill' LIMIT 1;
   IF v_existing IS NOT NULL THEN RETURN p_order_id; END IF;
 
   IF p_direction = 'debit' THEN v_kind := 'invoice_payable'; v_prefix := 'PAG';
   ELSE v_kind := 'invoice_receivable'; v_prefix := 'REC'; END IF;
 
-  SELECT saas_core.next_sequence(v_order.tenant_id, v_kind) INTO v_seq;
+  SELECT public.next_sequence(v_order.tenant_id, v_kind) INTO v_seq;
   v_ref := v_prefix || '-' || lpad(v_seq::text, 5, '0');
 
   SELECT string_agg(name, ', ' ORDER BY sort_order) INTO v_summary
-    FROM saas_core.order_items WHERE order_id = p_order_id;
-  SELECT name INTO v_contact FROM saas_core.persons WHERE id = v_order.party_id;
+    FROM public.order_items WHERE order_id = p_order_id;
+  SELECT name INTO v_contact FROM public.people WHERE id = v_order.party_id;
 
-  UPDATE saas_core.orders SET
+  UPDATE public.orders SET
     status = COALESCE(p_status, status),
     stage = 'invoiced',
     direction = p_direction,
@@ -114,7 +128,7 @@ BEGIN
   FOR i IN 1..v_n LOOP
     IF i = v_n THEN v_amt := round(v_total - v_alloc, 2);
     ELSE v_amt := v_base; v_alloc := v_alloc + v_base; END IF;
-    INSERT INTO public.financial_movements
+    INSERT INTO public.plg_financial_movements
       (tenant_id, invoice_id, direction, movement_kind, amount, paid_amount, status, due_date, installment_number)
     VALUES
       (v_order.tenant_id, p_order_id, p_direction, 'bill', v_amt, 0, 'pending',
@@ -134,7 +148,7 @@ WITH bill AS (
     SUM(amount)      FILTER (WHERE status <> 'cancelled') AS billed,
     SUM(paid_amount) FILTER (WHERE status <> 'cancelled') AS paid,
     bool_or(status NOT IN ('paid','cancelled') AND due_date < current_date) AS has_overdue
-  FROM public.financial_movements
+  FROM public.plg_financial_movements
   WHERE movement_kind = 'bill'
   GROUP BY invoice_id
 )
@@ -154,7 +168,7 @@ SELECT
     ELSE 'open'
   END AS status,
   o.created_at, o.updated_at
-FROM saas_core.orders o
+FROM public.orders o
 LEFT JOIN bill b ON b.invoice_id = o.id
 WHERE o.kind IN ('invoice_receivable','invoice_payable') OR b.invoice_id IS NOT NULL;
 ALTER VIEW public.v_invoice_balances SET (security_invoker = true);

package/src/migrations/005_seed_defaults.sql

@@ -8,11 +8,11 @@ DO $$
 DECLARE t_id uuid;
 BEGIN
   FOR t_id IN (
-    SELECT id FROM saas_core.tenants
-    WHERE id NOT IN (SELECT DISTINCT tenant_id FROM public.payment_method_types)
+    SELECT id FROM public.tenants
+    WHERE id NOT IN (SELECT DISTINCT tenant_id FROM public.plg_financial_payment_method_types)
   )
   LOOP
-    INSERT INTO public.payment_method_types (tenant_id, name, transaction_type) VALUES
+    INSERT INTO public.plg_financial_payment_method_types (tenant_id, name, transaction_type) VALUES
       (t_id, 'Cash', 'cash'),
       (t_id, 'PIX', 'pix'),
       (t_id, 'Credit Card', 'credit_card'),
@@ -26,11 +26,11 @@ DO $$
 DECLARE t_id uuid;
 BEGIN
   FOR t_id IN (
-    SELECT id FROM saas_core.tenants
-    WHERE id NOT IN (SELECT DISTINCT tenant_id FROM public.card_brands)
+    SELECT id FROM public.tenants
+    WHERE id NOT IN (SELECT DISTINCT tenant_id FROM public.plg_financial_card_brands)
   )
   LOOP
-    INSERT INTO public.card_brands (tenant_id, name) VALUES
+    INSERT INTO public.plg_financial_card_brands (tenant_id, name) VALUES
       (t_id, 'Visa'), (t_id, 'Mastercard'), (t_id, 'American Express'),
       (t_id, 'Elo'), (t_id, 'Hipercard'), (t_id, 'Diners Club'),
       (t_id, 'Discover'), (t_id, 'JCB'), (t_id, 'Aura'), (t_id, 'Hiper');

package/src/migrations/006_rls_policies.sql

@@ -3,10 +3,10 @@
 -- The base migrations (001/002/003) ENABLE row-level security but relied on an
 -- external `project_rls.sql` auto-detection step to create the actual policies.
 -- That step does not run in the Drizzle/companion pipeline, so every table
--- except financial_movements was RLS-enabled with NO policy → all inserts denied
+-- except plg_financial_movements was RLS-enabled with NO policy → all inserts denied
 -- ("new row violates row-level security policy"). This creates the canonical
 -- per-tenant policies idempotently. Re-running is a no-op (IF NOT EXISTS guards;
--- financial_movements policies from 004 are skipped).
+-- plg_financial_movements policies from 004 are skipped).
 --
 -- Canonical RLS form: tenant_id IN (SELECT public.user_tenant_ids()).
 
@@ -14,9 +14,9 @@ DO $$
 DECLARE t text;
 BEGIN
   FOR t IN SELECT unnest(ARRAY[
-    'payment_method_types','payment_methods','bank_accounts',
-    'cash_register_sessions','financial_movements',
-    'chart_of_accounts','cost_centers','card_brands'
+    'plg_financial_payment_method_types','plg_financial_payment_methods','plg_financial_bank_accounts',
+    'plg_financial_cash_register_sessions','plg_financial_movements',
+    'plg_financial_chart_of_accounts','plg_financial_cost_centers','plg_financial_card_brands'
   ])
   LOOP
     EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', t);

package/src/migrations/{006_extract_fee_amount.sql → 006b_extract_fee_amount.sql}

@@ -5,14 +5,14 @@
 -- the running balance reflects the NET cash that actually lands in the account.
 --   gross    = paid_amount (settles the receivable/payable)
 --   net cash = paid_amount - fee_amount  (credits only; v1 has no fee on debits)
-ALTER TABLE public.financial_movements
+ALTER TABLE public.plg_financial_movements
   ADD COLUMN IF NOT EXISTS fee_amount numeric(14,2) NOT NULL DEFAULT 0;
 
-COMMENT ON COLUMN public.financial_movements.fee_amount IS
+COMMENT ON COLUMN public.plg_financial_movements.fee_amount IS
   'Processing/MDR fee deducted at settlement. Net cash impact = paid_amount - fee_amount (credit). v1: same-day net, no D+N settlement-date modeling.';
 
-CREATE INDEX IF NOT EXISTS idx_financial_movements_statement
-  ON public.financial_movements (bank_account_id, payment_date)
+CREATE INDEX IF NOT EXISTS idx_plg_financial_movements_statement
+  ON public.plg_financial_movements (bank_account_id, payment_date)
   WHERE status IN ('paid', 'partial');
 
 -- Transfers between accounts = a debit row (source) + credit row (destination),

package/src/migrations/007_reconciliation.sql

@@ -2,31 +2,31 @@
 -- Reconciliation (conciliação): bank-statement lines ↔ internal movements
 -- ---------------------------------------------------------------------------
 -- An integration (e.g. open banking) imports bank-statement lines as
--- financial_movements tagged with (external_source, external_id). The matching
+-- plg_financial_movements tagged with (external_source, external_id). The matching
 -- UI then links each imported line to the internal movement it settles, or
 -- accepts it standalone. These columns make a movement carry its bank-line
 -- identity and its reconciliation state.
 --   external_source / external_id : the bank line's provider + unique id
 --   reconciled_at                 : when the line was matched/accepted (NULL = pending)
 --   matched_movement_id           : the internal movement this line reconciles (NULL = standalone)
-ALTER TABLE public.financial_movements
+ALTER TABLE public.plg_financial_movements
   ADD COLUMN IF NOT EXISTS external_id text,
   ADD COLUMN IF NOT EXISTS external_source text,
   ADD COLUMN IF NOT EXISTS reconciled_at timestamptz,
   ADD COLUMN IF NOT EXISTS matched_movement_id uuid
-    REFERENCES public.financial_movements(id) ON DELETE SET NULL;
+    REFERENCES public.plg_financial_movements(id) ON DELETE SET NULL;
 
-COMMENT ON COLUMN public.financial_movements.external_source IS
+COMMENT ON COLUMN public.plg_financial_movements.external_source IS
   'Provider of an imported bank-statement line (e.g. plugbank, inter). NULL for app-native movements.';
-COMMENT ON COLUMN public.financial_movements.external_id IS
+COMMENT ON COLUMN public.plg_financial_movements.external_id IS
   'Provider-unique id of the imported bank line. Forms the import idempotency key with external_source.';
 
 -- Idempotency: a given bank line imports at most once per tenant.
-CREATE UNIQUE INDEX IF NOT EXISTS uq_financial_movements_external
-  ON public.financial_movements (tenant_id, external_source, external_id)
+CREATE UNIQUE INDEX IF NOT EXISTS uq_plg_financial_movements_external
+  ON public.plg_financial_movements (tenant_id, external_source, external_id)
   WHERE external_id IS NOT NULL AND external_source IS NOT NULL;
 
 -- Fast lookup of imported-but-unreconciled lines for the matching screen.
-CREATE INDEX IF NOT EXISTS idx_financial_movements_unreconciled
-  ON public.financial_movements (tenant_id, payment_date)
+CREATE INDEX IF NOT EXISTS idx_plg_financial_movements_unreconciled
+  ON public.plg_financial_movements (tenant_id, payment_date)
   WHERE external_source IS NOT NULL AND reconciled_at IS NULL;

package/src/migrations/007b_movement_payment_method_type.sql

@@ -0,0 +1,6 @@
+-- payment_method_type_id existed on pre-pool installs (added out-of-band on
+-- the salon/beauty DB) but was never captured in the file series; 008 requires
+-- it on plg_financial_movements. No-op where the column already exists.
+
+ALTER TABLE public.plg_financial_movements
+  ADD COLUMN IF NOT EXISTS payment_method_type_id uuid REFERENCES public.plg_financial_payment_method_types(id);

package/src/migrations/008_split_payment_movements.sql

@@ -3,9 +3,9 @@
 -- two payments on one installment show as two extract rows instead of one summed row.
 -- Bills stay pure obligations; v_invoice_balances already filters movement_kind='bill',
 -- so the new payment rows don't affect invoice balances. Backfill is idempotent.
--- Requires fee_amount (006_extract_fee_amount.sql).
+-- Requires fee_amount (006b_extract_fee_amount.sql).
 
-INSERT INTO public.financial_movements
+INSERT INTO public.plg_financial_movements
   (tenant_id, invoice_id, direction, movement_kind, amount, paid_amount, fee_amount, status,
    due_date, payment_date, installment_number, payment_method_id, payment_method_type_id,
    bank_account_id, cash_session_id, card_brand, card_installments, notes, metadata)
@@ -16,14 +16,14 @@ SELECT
   b.payment_method_id, b.payment_method_type_id, b.bank_account_id, b.cash_session_id,
   b.card_brand, b.card_installments, b.notes,
   jsonb_build_object('backfilledFromBill', b.id)
-FROM public.financial_movements b
+FROM public.plg_financial_movements b
 WHERE b.movement_kind = 'bill' AND b.paid_amount > 0
   AND NOT EXISTS (
-    SELECT 1 FROM public.financial_movements p
+    SELECT 1 FROM public.plg_financial_movements p
     WHERE p.movement_kind = 'payment' AND p.metadata->>'backfilledFromBill' = b.id::text
   );
 
-UPDATE public.financial_movements
+UPDATE public.plg_financial_movements
 SET payment_date = NULL, bank_account_id = NULL, payment_method_id = NULL,
     payment_method_type_id = NULL, cash_session_id = NULL, card_brand = NULL, card_installments = NULL
 WHERE movement_kind = 'bill';

package/src/migrations/009_agent_rpcs.sql

@@ -0,0 +1,165 @@
+-- ============================================================================
+-- plugin-financial 009: server-plane agent write RPC.
+--
+-- public.agent_financial_mark_payment_received — "marca o atendimento como
+-- pago em cartão 2x". Resolves the order (directly or via a booking id),
+-- guard-checks the actor (agent_guard, spine 015), promotes the order into an
+-- invoice + installment ledger through the EXISTING invariant function
+-- fn_invoice_from_order (004) — never re-implementing its numbering/allocation
+-- logic — then settles the installments following 008's split model (bill rows
+-- flip to paid; each cash event is its own movement_kind='payment' row).
+--
+-- fn_invoice_from_order authorizes via user_tenant_ids() (auth.uid()). This
+-- RPC runs under the broker's service key, so it impersonates the ALREADY
+-- GUARD-VERIFIED actor for the duration of the transaction by setting
+-- request.jwt.claims locally — the invariant function keeps working unchanged
+-- and the audit trail carries the real acting user.
+--
+-- Contract: (p_tenant_id, p_actor_user_id, p_payload) → jsonb
+--   payload {order_id? uuid, booking_id? uuid, method text
+--            ('cash'|'pix'|'credit_card'|'debit_card'|'transfer'),
+--            installments? int (credit_card only, 1–12), amount? numeric}
+-- ============================================================================
+
+CREATE OR REPLACE FUNCTION public.agent_financial_mark_payment_received(
+  p_tenant_id uuid,
+  p_actor_user_id uuid,
+  p_payload jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_denial jsonb;
+  v_order_id uuid;
+  v_booking_id uuid;
+  v_method text;
+  v_installments int;
+  v_amount numeric;
+  v_order record;
+  v_bill record;
+  v_paid_count int := 0;
+  v_total_paid numeric := 0;
+BEGIN
+  -- ── payload ──────────────────────────────────────────────────────────────
+  BEGIN
+    v_order_id   := (p_payload->>'order_id')::uuid;
+    v_booking_id := (p_payload->>'booking_id')::uuid;
+    v_amount     := (p_payload->>'amount')::numeric;
+    v_installments := COALESCE((p_payload->>'installments')::int, 1);
+  EXCEPTION WHEN OTHERS THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'invalid payload: ' || SQLERRM);
+  END;
+  v_method := lower(COALESCE(p_payload->>'method', 'cash'));
+  IF v_method NOT IN ('cash', 'pix', 'credit_card', 'debit_card', 'transfer') THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'unknown payment method');
+  END IF;
+  IF v_installments NOT BETWEEN 1 AND 12
+     OR (v_installments > 1 AND v_method <> 'credit_card') THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'installments require credit_card (1-12)');
+  END IF;
+
+  -- booking → order
+  IF v_order_id IS NULL AND v_booking_id IS NOT NULL THEN
+    SELECT b.order_id INTO v_order_id
+    FROM appointments b
+    WHERE b.id = v_booking_id AND b.tenant_id = p_tenant_id;
+  END IF;
+  IF v_order_id IS NULL THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'order_id or booking_id required (booking must have an order)');
+  END IF;
+
+  SELECT o.id, o.status, o.total INTO v_order
+  FROM orders o
+  WHERE o.id = v_order_id AND o.tenant_id = p_tenant_id;
+  IF NOT FOUND THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'unknown order for this tenant');
+  END IF;
+  IF v_order.status = 'cancelled' THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'cannot receive payment on a cancelled order');
+  END IF;
+
+  -- ── authorization ────────────────────────────────────────────────────────
+  v_denial := agent_guard(p_tenant_id, p_actor_user_id, 'financial.receivables', 'update');
+  IF v_denial IS NOT NULL THEN
+    RETURN jsonb_build_object('ok', false, 'denial', v_denial);
+  END IF;
+
+  -- already fully paid?
+  IF EXISTS (
+    SELECT 1 FROM plg_financial_movements m
+    WHERE m.invoice_id = v_order_id AND m.movement_kind = 'bill'
+  ) AND NOT EXISTS (
+    SELECT 1 FROM plg_financial_movements m
+    WHERE m.invoice_id = v_order_id AND m.movement_kind = 'bill' AND m.status <> 'paid'
+  ) THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'order is already fully paid');
+  END IF;
+
+  -- ── invoice via the existing invariant function (impersonate the verified
+  --     actor so fn_invoice_from_order's user_tenant_ids() check passes) ─────
+  PERFORM set_config('request.jwt.claims',
+                     jsonb_build_object('sub', p_actor_user_id, 'role', 'authenticated')::text,
+                     true);
+  PERFORM fn_invoice_from_order(v_order_id, current_date, NULL, v_installments, 'credit');
+
+  -- ── settle: flip pending bill installments to paid + emit payment rows ───
+  FOR v_bill IN
+    SELECT m.* FROM plg_financial_movements m
+    WHERE m.invoice_id = v_order_id
+      AND m.tenant_id = p_tenant_id
+      AND m.movement_kind = 'bill'
+      AND m.status <> 'paid'
+    ORDER BY m.installment_number NULLS FIRST
+  LOOP
+    UPDATE plg_financial_movements SET
+      status = 'paid',
+      paid_amount = v_bill.amount,
+      payment_date = current_date,
+      card_installments = CASE WHEN v_method = 'credit_card' THEN v_installments ELSE NULL END,
+      metadata = COALESCE(metadata, '{}'::jsonb)
+                 || jsonb_build_object('paidVia', 'agent', 'method', v_method),
+      updated_at = now()
+    WHERE id = v_bill.id;
+
+    INSERT INTO plg_financial_movements
+      (tenant_id, invoice_id, direction, movement_kind, amount, paid_amount, status,
+       due_date, payment_date, installment_number, card_installments, metadata)
+    VALUES
+      (p_tenant_id, v_order_id, v_bill.direction, 'payment', v_bill.amount, v_bill.amount,
+       'paid', v_bill.due_date, current_date, v_bill.installment_number,
+       CASE WHEN v_method = 'credit_card' THEN v_installments ELSE NULL END,
+       jsonb_build_object('source', 'agent', 'method', v_method));
+
+    v_paid_count := v_paid_count + 1;
+    v_total_paid := v_total_paid + v_bill.amount;
+  END LOOP;
+
+  IF v_paid_count = 0 THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'no open installments found to settle');
+  END IF;
+
+  INSERT INTO audit_logs (tenant_id, user_id, action, entity_type, entity_id, metadata)
+  VALUES (p_tenant_id, p_actor_user_id, 'agent.markPaymentReceived', 'order', v_order_id::text,
+          jsonb_build_object('payload', p_payload, 'installmentsSettled', v_paid_count,
+                             'totalPaid', v_total_paid));
+
+  RETURN jsonb_build_object(
+    'ok', true,
+    'id', v_order_id,
+    'record', jsonb_build_object(
+      'ref', jsonb_build_object('id', v_order_id, 'resource', 'orders',
+                                'archetype', 'order:service_order'),
+      'method', v_method,
+      'installments', v_installments,
+      'installments_settled', v_paid_count,
+      'total_paid', v_total_paid
+    )
+  );
+END;
+$$;
+
+REVOKE ALL ON FUNCTION public.agent_financial_mark_payment_received(uuid, uuid, jsonb) FROM public;
+REVOKE EXECUTE ON FUNCTION public.agent_financial_mark_payment_received(uuid, uuid, jsonb) FROM anon;
+GRANT EXECUTE ON FUNCTION public.agent_financial_mark_payment_received(uuid, uuid, jsonb)
+  TO authenticated, service_role;