@fayz-ai/plugin-inventory 0.14.0 → 0.14.1

package/dist/index.js

@@ -18400,6 +18400,27 @@ BEGIN
     jsonb_build_object('location_id', p_location, 'unit_id', v_unit, 'lines', v_no, 'document_type', coalesce(v_doc->>'type', 'manual')));
 END $function$;
 `;
+var MIGRATION_023_A_RECEITA_SE_ESCREVE_COM_PERMISSAO = `-- ---------------------------------------------------------------------------
+-- 023 \u2014 a receita se escreve com permiss\xE3o.
+--
+-- The baseline kept the pre-authz insert/update/delete policies on recipes and
+-- product categories next to the *_authz_* ones. Permissive policies are ORed,
+-- so \`tenant_id IN user_tenant_ids()\` let any member (viewer, staff, kitchen)
+-- write what inventory.create/edit/delete is supposed to gate.
+--
+-- The old SELECT policies stay on purpose: agenda's service kit
+-- (getServiceKit) reads recipes as reception/professional, who hold no
+-- inventory.read. Narrowing reads is a separate decision.
+-- ---------------------------------------------------------------------------
+
+DROP POLICY IF EXISTS plg_inventory_recipes_insert ON public.plg_inventory_recipes;
+DROP POLICY IF EXISTS plg_inventory_recipes_update ON public.plg_inventory_recipes;
+DROP POLICY IF EXISTS plg_inventory_recipes_delete ON public.plg_inventory_recipes;
+
+DROP POLICY IF EXISTS plg_inventory_product_categories_insert ON public.plg_inventory_product_categories;
+DROP POLICY IF EXISTS plg_inventory_product_categories_update ON public.plg_inventory_product_categories;
+DROP POLICY IF EXISTS plg_inventory_product_categories_delete ON public.plg_inventory_product_categories;
+`;
 var MIGRATIONS = [
   { id: "000_baseline", sql: MIGRATION_000_BASELINE },
   { id: "001_the_usage_that_left_stock_can_be_audited", sql: MIGRATION_001_THE_USAGE_THAT_LEFT_STOCK_CAN_BE_AUDITED },
@@ -18423,7 +18444,8 @@ var MIGRATIONS = [
   { id: "019_sem_saldo_nao_se_baixa", sql: MIGRATION_019_SEM_SALDO_NAO_SE_BAIXA },
   { id: "020_o_produto_e_varias_coisas_ao_mesmo_tempo", sql: MIGRATION_020_O_PRODUTO_E_VARIAS_COISAS_AO_MESMO_TEMPO },
   { id: "021_o_razao_diz_de_onde_veio", sql: MIGRATION_021_O_RAZAO_DIZ_DE_ONDE_VEIO },
-  { id: "022_receber_estoque_volta_a_funcionar", sql: MIGRATION_022_RECEBER_ESTOQUE_VOLTA_A_FUNCIONAR }
+  { id: "022_receber_estoque_volta_a_funcionar", sql: MIGRATION_022_RECEBER_ESTOQUE_VOLTA_A_FUNCIONAR },
+  { id: "023_a_receita_se_escreve_com_permissao", sql: MIGRATION_023_A_RECEITA_SE_ESCREVE_COM_PERMISSAO }
 ];
 
 // src/index.ts