@fayz-ai/plugin-marketing 0.11.2 → 0.12.0

package/dist/index.js

@@ -1,5 +1,5 @@
 import React9, { useState, useEffect, useMemo, useCallback } from 'react';
-import { connectionSettings, connectionStatus, settingsStatus, createConnectionStore, getActiveTenantId, registerTranslations, createSafeDataProvider, getSupabaseClientOptional, useTranslation, useDataChanged, resolveDataProvider } from '@fayz-ai/core';
+import { connectionSettings, connectionStatus, settingsStatus, createConnectionStore, getActiveTenantId, registerTranslations, createSafeDataProvider, getSupabaseClientOptional, countByTenant, useTranslation, useDataChanged, resolveDataProvider } from '@fayz-ai/core';
 import { createPluginContext, fayzConnectorOAuth, PluginSettingsPanel, useModuleNavigation, createViewRouter, ModuleActionBar, SettingsGroup, SelectRow, ToggleRow, askAI, PageActions, useLimitGuard, useOrganizationStore, CrudFormPage, RightRailPage, invalidateLimit, CrudListView } from '@fayz-ai/admin';
 import { defineKpiWidget, defineCustomWidget, defineTableWidget, ModulePage, PageToolbar, DataTable, SubpageHeader, RowActions, PageHeaderActions, Button, Skeleton, ConfirmDialog, ContentSplit, ContentSplitTrigger, Input, Select, SelectTrigger, SelectValue, SelectContent, SelectItem, MarkdownEditor, DashboardCanvas, RangeControl, cn, Modal, ModalContent, ModalHeader, ModalTitle, ModalBody, ModalFooter, SheetBody, SegmentedControl, Badge, SheetFooter, SelectSeparator, Checkbox, toast, KpiCard as KpiCard$1, Card, CardHeader, CardTitle, CardContent, TableWidget } from '@fayz-ai/ui';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
@@ -2921,7 +2921,7 @@ var T = {
   campaigns: "plg_marketing_campaigns",
   landingPages: "plg_marketing_landing_pages"
 };
-var SITES_TABLE = "fayz_projects";
+var SITES_TABLE = "published_sites";
 var LEAD_TAGS_SOURCE = {
   table: "plg_crm_tags",
   valueField: "slug",
@@ -2987,6 +2987,68 @@ function buildMarketingRegistries(channels) {
     }
   ];
 }
+function buildMarketingOnboarding() {
+  return {
+    id: "marketing",
+    title: "De onde vem o movimento",
+    order: 90,
+    role: "growth",
+    instructions: `Voc\xEA est\xE1 implantando o marketing. O risco aqui n\xE3o \xE9 a pessoa n\xE3o achar a tela \u2014 \xE9 ela olhar um painel de zeros e achar que a ferramenta est\xE1 quebrada.
+
+- Diga logo de cara de onde v\xEAm os n\xFAmeros: a convers\xE3o deste m\xF3dulo \xE9 a VENDA (neg\xF3cio ganho, pedido, agendamento \u2014 depende do ramo), lida do outro m\xF3dulo. Painel zerado quase sempre quer dizer que ningu\xE9m est\xE1 preenchendo origem, e n\xE3o que o marketing n\xE3o funcionou.
+- Comece pelos CANAIS. A lista j\xE1 vem com os do ramo: o trabalho \xE9 desativar o que a casa n\xE3o usa e acrescentar o que ela usa de verdade. Lista curta \xE9 lista preenchida.
+- S\xF3 depois CAMPANHA, e s\xF3 se ela investe em alguma. Quem n\xE3o anuncia n\xE3o precisa de campanha para ver de onde vem gente \u2014 os canais j\xE1 respondem isso.
+- O \xFAltimo passo n\xE3o \xE9 uma tela e n\xE3o \xE9 seu: sem origem preenchida no lead, nada aqui tem o que somar. Diga isso explicitamente e ofere\xE7a combinar com quem atende.`,
+    steps: [
+      {
+        key: "channels",
+        title: "Marque por onde as pessoas chegam",
+        description: "An\xFAncio, busca, indica\xE7\xE3o, boca a boca \u2014 a lista que responde onde investir.",
+        icon: "Radio",
+        route: "/marketing/channels",
+        priority: "high",
+        requiresRoute: true,
+        agentHint: "A lista j\xE1 vem com os canais do ramo. Conduza como PODA: mostre o que existe, pergunte o que n\xE3o \xE9 o caso e acrescente o que a casa usa de verdade.",
+        howTo: 'Marketing \u203A Canais. J\xE1 v\xEAm os canais t\xEDpicos do seu ramo \u2014 desative o que a casa n\xE3o usa e acrescente os seus. Se voc\xEA investe em algum, preencha o gasto do m\xEAs: \xE9 o que transforma "veio bastante gente do Instagram" em "cada cliente do Instagram custou tanto".',
+        celebrate: "D\xE1 para saber por onde chega gente \u{1F4E1}",
+        script: [
+          { kind: "goto", route: "/marketing/channels" },
+          {
+            kind: "ask",
+            text: "Estamos nos Canais, que j\xE1 v\xEAm preenchidos pelo ramo. Mostre a lista, pergunte quais n\xE3o s\xE3o o caso desta casa e quais faltam, e ajuste com a pessoa."
+          }
+        ],
+        check: async () => await countByTenant(T.channels) > 0
+      },
+      {
+        key: "campaign",
+        title: "Registre a primeira campanha",
+        description: "S\xF3 se voc\xEA investe em alguma \u2014 quem n\xE3o anuncia n\xE3o precisa deste passo.",
+        icon: "Megaphone",
+        route: "/marketing/campaigns",
+        requiresRoute: true,
+        agentHint: "Pergunte ANTES se a casa investe em an\xFAncio. Se n\xE3o investe, diga que este passo n\xE3o \xE9 para ela e siga \u2014 uma campanha inventada para fechar a checklist polui o painel para sempre.",
+        howTo: "Marketing \u203A Campanhas \u203A Nova campanha. Amarre a campanha ao canal onde ela roda e ao per\xEDodo em que rodou. O resultado que aparece aqui n\xE3o \xE9 clique: \xE9 venda fechada que veio daquele canal, com o valor junto.",
+        celebrate: "Campanha registrada \u{1F4E3}",
+        check: async () => await countByTenant(T.campaigns) > 0
+      },
+      {
+        key: "attribution",
+        title: "Combine que todo lead sai com origem",
+        description: "\xC9 aqui que a atribui\xE7\xE3o morre. O campo j\xE1 existe; o h\xE1bito \xE9 o que falta.",
+        icon: "Compass",
+        // Aponta para o CRM de propósito: o passo é deste programa porque é
+        // este painel que fica zerado sem ele, e a tela é de lá porque é lá
+        // que o campo mora. Um passo honesto sobre onde a coisa falha vale
+        // mais que um passo dentro do próprio módulo.
+        route: "/sales/leads/new",
+        agentHint: "N\xE3o \xE9 passo de tela. Mostre onde o campo de origem est\xE1 no formul\xE1rio do lead, diga em uma linha o que se perde sem ele \u2014 todo painel deste m\xF3dulo \u2014 e ofere\xE7a criar uma tarefa para combinar isso com a equipe.",
+        howTo: "A origem \xE9 preenchida no cadastro do lead, n\xE3o aqui. Sem ela, os pain\xE9is de Canais e Campanhas somam zero: n\xE3o existe outro jeito de o sistema saber que aquele cliente veio do an\xFAncio. Combine com quem atende que nenhum lead sai sem origem \u2014 \xE9 uma pergunta a mais no atendimento e \xE9 a \xFAnica coisa que faz o resto valer.",
+        celebrate: "Agora d\xE1 para saber o que valeu a pena \u{1F9ED}"
+      }
+    ]
+  };
+}
 function useEnsureMarketingData() {
   const overview = useMarketingStore((s) => s.overview);
   const loading = useMarketingStore((s) => s.loading);
@@ -3632,7 +3694,7 @@ function createSupabaseMarketingProvider(options) {
   }
   function fetchLandingPages(tenantId) {
     return memo(`lp:${tenantId}`, async () => {
-      const { data, error } = await getClient().from(V.landingPages).select("id, site_id, name, route, lead_tags, status, prompt, is_active, site_name, site_url, app_id, fayz_project_id, editor_url").eq("tenant_id", tenantId).order("name");
+      const { data, error } = await getClient().from(V.landingPages).select("id, site_id, name, route, lead_tags, status, prompt, is_active, site_name, site_url, app_id, provider_site_id, editor_url").eq("tenant_id", tenantId).order("name");
       if (error) return [];
       return data ?? [];
     });
@@ -3658,7 +3720,7 @@ function createSupabaseMarketingProvider(options) {
       pages: rows.map((r) => ({
         id: r.id,
         appId: r.app_id ?? void 0,
-        fayzProjectId: r.fayz_project_id ?? void 0,
+        fayzProjectId: r.provider_site_id ?? void 0,
         siteUrl: r.site_url ?? void 0,
         route: r.route
       }))
@@ -3814,7 +3876,7 @@ function createSupabaseMarketingProvider(options) {
           siteName: r.site_name,
           siteUrl: r.site_url ?? void 0,
           appId: r.app_id ?? void 0,
-          editorUrl: r.editor_url ?? (r.fayz_project_id ? `${FAYZ_EDITOR_BASE}/${r.fayz_project_id}` : void 0),
+          editorUrl: r.editor_url ?? (r.provider_site_id ? `${FAYZ_EDITOR_BASE}/${r.provider_site_id}` : void 0),
           url: pageUrl(r.site_url, r.route),
           visits,
           conversions,
@@ -3849,15 +3911,15 @@ function createSupabaseMarketingProvider(options) {
     async listSites() {
       const tenantId = requireTenantId();
       return memo(`sites:${tenantId}`, async () => {
-        const { data, error } = await getClient().from(SITES_TABLE).select("id, name, preview_url, app_id, fayz_project_id, editor_url").eq("tenant_id", tenantId).order("is_default", { ascending: false }).order("name");
+        const { data, error } = await getClient().from(SITES_TABLE).select("id, name, preview_url, app_id, provider_site_id, editor_url").eq("tenant_id", tenantId).order("is_default", { ascending: false }).order("name");
         if (error) return [];
         return (data ?? []).map((r) => ({
           id: r.id,
           name: r.name,
           url: r.preview_url ?? void 0,
           appId: r.app_id ?? void 0,
-          fayzProjectId: r.fayz_project_id ?? void 0,
-          editorUrl: r.editor_url ?? (r.fayz_project_id ? `${FAYZ_EDITOR_BASE}/${r.fayz_project_id}` : void 0)
+          fayzProjectId: r.provider_site_id ?? void 0,
+          editorUrl: r.editor_url ?? (r.provider_site_id ? `${FAYZ_EDITOR_BASE}/${r.provider_site_id}` : void 0)
         }));
       });
     },
@@ -4462,325 +4524,239 @@ function createContentPlannerStore(provider2) {
 }
 
 // src/migrations/index.ts
-var MIGRATION_000_PLG_RENAME = `-- 000_plg_rename.sql \u2014 rename legacy marketing tables to plg_marketing_* for pools
--- provisioned before the industry-pool rename. Guarded: fires only when legacy
--- name exists and target does not, so fresh pools skip every branch.
-DO $$
-BEGIN
-  IF to_regclass('public.mkt_social_accounts') IS NOT NULL AND to_regclass('public.plg_marketing_social_accounts') IS NULL THEN
-    ALTER TABLE public.mkt_social_accounts RENAME TO plg_marketing_social_accounts;
-  END IF;
-  IF to_regclass('public.mkt_content_plans') IS NOT NULL AND to_regclass('public.plg_marketing_content_plans') IS NULL THEN
-    ALTER TABLE public.mkt_content_plans RENAME TO plg_marketing_content_plans;
-  END IF;
-  IF to_regclass('public.mkt_content_posts') IS NOT NULL AND to_regclass('public.plg_marketing_content_posts') IS NULL THEN
-    ALTER TABLE public.mkt_content_posts RENAME TO plg_marketing_content_posts;
-  END IF;
-END $$;
-`;
-var MIGRATION_001_CONTENT_PLANNER = `-- Marketing Plugin: Content Planner
--- Prefix: plg_marketing_
--- Social accounts + content plans + posts (Notion-style markdown pages).
-
-CREATE TABLE IF NOT EXISTS public.plg_marketing_social_accounts (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  handle text,
-  platform text NOT NULL DEFAULT 'instagram'
-    CHECK (platform IN ('instagram', 'tiktok', 'youtube', 'facebook', 'linkedin')),
-  is_active boolean NOT NULL DEFAULT true,
-  created_at timestamptz NOT NULL DEFAULT now()
+var MIGRATION_000_BASELINE = `-- ============================================================================
+-- plugins/plugin-marketing/src/migrations/000_baseline.sql \u2014 what installing this provisions, as one file.
+--
+-- GENERATED by scripts/emit-unit-baselines.mjs (#338). Do not edit by hand:
+-- change the schema, regenerate, and let scripts/check-chain-equivalence.mjs
+-- prove the result still matches.
+--
+-- This replaced 12 migration files. They are kept, unapplied, in
+-- migrations.archive/ \u2014 a year of decisions is worth reading even when it is no
+-- longer worth replaying.
+--
+-- Object order is fixed rather than dependency-sorted: schemas, types,
+-- sequences, tables, defaults, functions, constraints, views, indexes, foreign
+-- keys, triggers, row security, policies, grants. Dependencies BETWEEN units
+-- are carried by the order packages/db/chain.json declares.
+-- ============================================================================
+
+-- A LANGUAGE sql function binds its body at CREATE time, and 570 functions
+-- sorted by name are not sorted by who calls whom. This is what lets them load
+-- in any order; every body is still compiled on first call, so a genuinely
+-- broken reference surfaces then rather than never. Session-scoped.
+SET check_function_bodies = false;
+
+
+
+-- \u2500\u2500 default privileges: reset \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- Cleared BEFORE anything is created, so every object below gets the ACL the
+-- dump describes rather than the image's defaults on top of it. Restored at
+-- the end of this file.
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;
+END $dp$;
+
+
+-- \u2500\u2500 table \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE TABLE public.plg_marketing_audiences (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    unit_id uuid,
+    campaign_id uuid NOT NULL,
+    person_id uuid NOT NULL,
+    state text DEFAULT 'entered'::text NOT NULL,
+    entered_at timestamp with time zone DEFAULT now() NOT NULL,
+    queued_at timestamp with time zone,
+    converted_at timestamp with time zone,
+    left_at timestamp with time zone,
+    reason text,
+    queue_id uuid,
+    owner_id uuid,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT plg_marketing_audiences_state_check CHECK ((state = ANY (ARRAY['entered'::text, 'queued'::text, 'sent'::text, 'converted'::text, 'left'::text, 'blocked'::text])))
 );
-ALTER TABLE public.plg_marketing_social_accounts ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_social_accounts_tenant ON public.plg_marketing_social_accounts(tenant_id);
-
-CREATE TABLE IF NOT EXISTS public.plg_marketing_content_plans (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  account_id uuid NOT NULL REFERENCES public.plg_marketing_social_accounts(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  status text NOT NULL DEFAULT 'active'
-    CHECK (status IN ('draft', 'active', 'archived')),
-  weeks_count integer NOT NULL DEFAULT 8,
-  start_date date,
-  objective text,
-  tone text,
-  pillars jsonb NOT NULL DEFAULT '[]'::jsonb,
-  formats jsonb NOT NULL DEFAULT '[]'::jsonb,
-  weekly_frequency integer NOT NULL DEFAULT 3,
-  brief_md text NOT NULL DEFAULT '',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
+
+ALTER TABLE ONLY public.plg_marketing_audiences FORCE ROW LEVEL SECURITY;
+
+CREATE TABLE public.plg_marketing_campaigns (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    name text NOT NULL,
+    channel_key text NOT NULL,
+    status text DEFAULT 'draft'::text NOT NULL,
+    starts_at timestamp with time zone,
+    ends_at timestamp with time zone,
+    spend numeric DEFAULT 0 NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    unit_id uuid,
+    owner_id uuid,
+    kind text DEFAULT 'ad_spend'::text NOT NULL,
+    key text,
+    template_key text,
+    audience_query jsonb DEFAULT '{}'::jsonb NOT NULL,
+    purpose text DEFAULT 'promotion'::text NOT NULL,
+    schedule text,
+    last_run_at timestamp with time zone,
+    next_run_at timestamp with time zone,
+    metadata jsonb DEFAULT '{}'::jsonb NOT NULL,
+    CONSTRAINT plg_marketing_campaigns_kind_check CHECK ((kind = ANY (ARRAY['ad_spend'::text, 'outbound'::text]))),
+    CONSTRAINT plg_marketing_campaigns_outbound_shape CHECK (((kind <> 'outbound'::text) OR ((template_key IS NOT NULL) AND (key IS NOT NULL)))),
+    CONSTRAINT plg_marketing_campaigns_purpose_check CHECK ((purpose = ANY (ARRAY['promotion'::text, 'survey'::text, 'newsletter'::text, 'transactional'::text]))),
+    CONSTRAINT plg_marketing_campaigns_status_check CHECK ((status = ANY (ARRAY['active'::text, 'paused'::text, 'ended'::text, 'draft'::text])))
 );
-ALTER TABLE public.plg_marketing_content_plans ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_content_plans_tenant ON public.plg_marketing_content_plans(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_content_plans_account ON public.plg_marketing_content_plans(account_id);
-
-CREATE TABLE IF NOT EXISTS public.plg_marketing_content_posts (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  plan_id uuid NOT NULL REFERENCES public.plg_marketing_content_plans(id) ON DELETE CASCADE,
-  week_number integer NOT NULL DEFAULT 1,
-  position integer NOT NULL DEFAULT 0,
-  title text NOT NULL,
-  format text NOT NULL DEFAULT 'reel'
-    CHECK (format IN ('reel', 'static', 'carousel', 'story')),
-  status text NOT NULL DEFAULT 'idea'
-    CHECK (status IN ('idea', 'script', 'recording', 'editing', 'scheduled', 'published')),
-  scheduled_date date,
-  hook text,
-  cta text,
-  content_md text NOT NULL DEFAULT '',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
+
+ALTER TABLE ONLY public.plg_marketing_campaigns FORCE ROW LEVEL SECURITY;
+
+CREATE TABLE public.plg_marketing_channels (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    channel_key text NOT NULL,
+    label text NOT NULL,
+    icon text,
+    kind text DEFAULT 'organic'::text NOT NULL,
+    is_active boolean DEFAULT true NOT NULL,
+    monthly_spend numeric DEFAULT 0 NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    unit_id uuid,
+    owner_id uuid,
+    CONSTRAINT plg_marketing_channels_kind_check CHECK ((kind = ANY (ARRAY['paid'::text, 'organic'::text, 'social'::text, 'referral'::text, 'direct'::text, 'outbound'::text])))
 );
-ALTER TABLE public.plg_marketing_content_posts ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_content_posts_tenant ON public.plg_marketing_content_posts(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_content_posts_plan ON public.plg_marketing_content_posts(plan_id, week_number, position);
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_content_posts_status ON public.plg_marketing_content_posts(tenant_id, status);
-
--- RLS policies for plg_marketing_social_accounts
-DROP POLICY IF EXISTS plg_marketing_social_accounts_select ON public.plg_marketing_social_accounts;
-DROP POLICY IF EXISTS plg_marketing_social_accounts_insert ON public.plg_marketing_social_accounts;
-DROP POLICY IF EXISTS plg_marketing_social_accounts_update ON public.plg_marketing_social_accounts;
-DROP POLICY IF EXISTS plg_marketing_social_accounts_delete ON public.plg_marketing_social_accounts;
-CREATE POLICY plg_marketing_social_accounts_select ON public.plg_marketing_social_accounts FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_social_accounts_insert ON public.plg_marketing_social_accounts FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_social_accounts_update ON public.plg_marketing_social_accounts FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_social_accounts_delete ON public.plg_marketing_social_accounts FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_marketing_social_accounts TO authenticated;
-
--- RLS policies for plg_marketing_content_plans
-DROP POLICY IF EXISTS plg_marketing_content_plans_select ON public.plg_marketing_content_plans;
-DROP POLICY IF EXISTS plg_marketing_content_plans_insert ON public.plg_marketing_content_plans;
-DROP POLICY IF EXISTS plg_marketing_content_plans_update ON public.plg_marketing_content_plans;
-DROP POLICY IF EXISTS plg_marketing_content_plans_delete ON public.plg_marketing_content_plans;
-CREATE POLICY plg_marketing_content_plans_select ON public.plg_marketing_content_plans FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_content_plans_insert ON public.plg_marketing_content_plans FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_content_plans_update ON public.plg_marketing_content_plans FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_content_plans_delete ON public.plg_marketing_content_plans FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_marketing_content_plans TO authenticated;
-
--- RLS policies for plg_marketing_content_posts
-DROP POLICY IF EXISTS plg_marketing_content_posts_select ON public.plg_marketing_content_posts;
-DROP POLICY IF EXISTS plg_marketing_content_posts_insert ON public.plg_marketing_content_posts;
-DROP POLICY IF EXISTS plg_marketing_content_posts_update ON public.plg_marketing_content_posts;
-DROP POLICY IF EXISTS plg_marketing_content_posts_delete ON public.plg_marketing_content_posts;
-CREATE POLICY plg_marketing_content_posts_select ON public.plg_marketing_content_posts FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_content_posts_insert ON public.plg_marketing_content_posts FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_content_posts_update ON public.plg_marketing_content_posts FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY plg_marketing_content_posts_delete ON public.plg_marketing_content_posts FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_marketing_content_posts TO authenticated;
-`;
-var MIGRATION_002_MULTI_PLATFORM = `-- Marketing Plugin: multi-platform accounts + per-post targets.
--- An account is a brand/profile that publishes to MANY platforms (Instagram,
--- YouTube, TikTok, ...). Posts optionally narrow the target platforms; an
--- empty array means "inherit the account's platforms".
 
-ALTER TABLE public.plg_marketing_social_accounts
-  ADD COLUMN IF NOT EXISTS platforms text[] NOT NULL DEFAULT '{instagram}';
+ALTER TABLE ONLY public.plg_marketing_channels FORCE ROW LEVEL SECURITY;
+
+CREATE TABLE public.plg_marketing_consents (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    unit_id uuid,
+    person_id uuid NOT NULL,
+    purpose text NOT NULL,
+    granted_at timestamp with time zone,
+    revoked_at timestamp with time zone,
+    source text,
+    evidence jsonb DEFAULT '{}'::jsonb NOT NULL,
+    owner_id uuid,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT plg_marketing_consents_purpose_check CHECK ((purpose = ANY (ARRAY['promotion'::text, 'survey'::text, 'newsletter'::text, 'transactional'::text])))
+);
 
--- Backfill from the legacy single-platform column, then drop it (also drops
--- its CHECK constraint \u2014 the platform list is UI-driven from here on).
-DO $$
-BEGIN
-  IF EXISTS (
-    SELECT 1 FROM information_schema.columns
-    WHERE table_schema = 'public' AND table_name = 'plg_marketing_social_accounts' AND column_name = 'platform'
-  ) THEN
-    UPDATE public.plg_marketing_social_accounts
-      SET platforms = ARRAY[platform]
-      WHERE platform IS NOT NULL AND platforms = '{instagram}';
-    ALTER TABLE public.plg_marketing_social_accounts DROP COLUMN platform;
-  END IF;
-END $$;
+ALTER TABLE ONLY public.plg_marketing_consents FORCE ROW LEVEL SECURITY;
+
+CREATE TABLE public.plg_marketing_content_plans (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    account_id uuid NOT NULL,
+    name text NOT NULL,
+    status text DEFAULT 'active'::text NOT NULL,
+    weeks_count integer DEFAULT 8 NOT NULL,
+    start_date date,
+    objective text,
+    tone text,
+    pillars jsonb DEFAULT '[]'::jsonb NOT NULL,
+    formats jsonb DEFAULT '[]'::jsonb NOT NULL,
+    weekly_frequency integer DEFAULT 3 NOT NULL,
+    brief_md text DEFAULT ''::text NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT plg_marketing_content_plans_status_check CHECK ((status = ANY (ARRAY['draft'::text, 'active'::text, 'archived'::text])))
+);
 
-ALTER TABLE public.plg_marketing_content_posts
-  ADD COLUMN IF NOT EXISTS platforms text[] NOT NULL DEFAULT '{}';
-`;
-var MIGRATION_003_RECORDING_OPS = `-- Marketing Plugin: recording-day ops on posts.
--- checklist: shooting checklist items [{ id, text, done }] \u2014 the on-set
--- companion for recording day. media_url: uploaded asset (static posts get a
--- caption + final art instead of a script).
-
-ALTER TABLE public.plg_marketing_content_posts
-  ADD COLUMN IF NOT EXISTS checklist jsonb NOT NULL DEFAULT '[]';
-
-ALTER TABLE public.plg_marketing_content_posts
-  ADD COLUMN IF NOT EXISTS media_url text;
-
--- Public media bucket for content assets (mirrors the avatars-bucket pattern:
--- public read, authenticated write). Path convention: content/{tenantId}/{postId}-{ts}.{ext}
-INSERT INTO storage.buckets (id, name, public)
-  VALUES ('mkt-media', 'mkt-media', true)
-  ON CONFLICT (id) DO NOTHING;
-
-DROP POLICY IF EXISTS plg_marketing_media_read ON storage.objects;
-DROP POLICY IF EXISTS plg_marketing_media_insert ON storage.objects;
-DROP POLICY IF EXISTS plg_marketing_media_update ON storage.objects;
-DROP POLICY IF EXISTS plg_marketing_media_delete ON storage.objects;
-CREATE POLICY plg_marketing_media_read ON storage.objects FOR SELECT TO public USING (bucket_id = 'mkt-media');
-CREATE POLICY plg_marketing_media_insert ON storage.objects FOR INSERT TO authenticated WITH CHECK (bucket_id = 'mkt-media');
-CREATE POLICY plg_marketing_media_update ON storage.objects FOR UPDATE TO authenticated USING (bucket_id = 'mkt-media');
-CREATE POLICY plg_marketing_media_delete ON storage.objects FOR DELETE TO authenticated USING (bucket_id = 'mkt-media');
-`;
-var MIGRATION_005_ANALYTICS_BASE = `-- Marketing Plugin: analytics base tables (channels + campaigns).
--- Prefix: plg_marketing_
--- Channels are tenant-owned rows lazily seeded from the app's domain preset
--- (channel_key = preset/config id). Campaign performance is DERIVED at read
--- time from v_marketing_attribution (006); only spend is stored.
--- Canonical RLS form: tenant_id IN (SELECT public.user_tenant_ids()).
-
-CREATE TABLE IF NOT EXISTS public.plg_marketing_channels (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  channel_key text NOT NULL,
-  label text NOT NULL,
-  icon text,
-  kind text NOT NULL DEFAULT 'organic'
-    CHECK (kind IN ('paid', 'organic', 'social', 'referral', 'direct', 'outbound')),
-  is_active boolean NOT NULL DEFAULT true,
-  monthly_spend numeric NOT NULL DEFAULT 0,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
+CREATE TABLE public.plg_marketing_content_posts (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    plan_id uuid NOT NULL,
+    week_number integer DEFAULT 1 NOT NULL,
+    "position" integer DEFAULT 0 NOT NULL,
+    title text NOT NULL,
+    format text DEFAULT 'reel'::text NOT NULL,
+    status text DEFAULT 'idea'::text NOT NULL,
+    scheduled_date date,
+    hook text,
+    cta text,
+    content_md text DEFAULT ''::text NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    platforms text[] DEFAULT '{}'::text[] NOT NULL,
+    checklist jsonb DEFAULT '[]'::jsonb NOT NULL,
+    media_url text,
+    CONSTRAINT plg_marketing_content_posts_format_check CHECK ((format = ANY (ARRAY['reel'::text, 'static'::text, 'carousel'::text, 'story'::text]))),
+    CONSTRAINT plg_marketing_content_posts_status_check CHECK ((status = ANY (ARRAY['idea'::text, 'script'::text, 'recording'::text, 'editing'::text, 'scheduled'::text, 'published'::text])))
 );
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_channels_tenant ON public.plg_marketing_channels(tenant_id);
-CREATE UNIQUE INDEX IF NOT EXISTS u_plg_marketing_channels_tenant_key ON public.plg_marketing_channels(tenant_id, channel_key);
-
-CREATE TABLE IF NOT EXISTS public.plg_marketing_campaigns (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  channel_key text NOT NULL,
-  status text NOT NULL DEFAULT 'draft'
-    CHECK (status IN ('active', 'paused', 'ended', 'draft')),
-  starts_at timestamptz,
-  ends_at timestamptz,
-  spend numeric NOT NULL DEFAULT 0,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
+
+CREATE TABLE public.plg_marketing_landing_pages (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    site_id uuid NOT NULL,
+    name text NOT NULL,
+    route text NOT NULL,
+    lead_tags text[] DEFAULT '{}'::text[] NOT NULL,
+    status text DEFAULT 'live'::text NOT NULL,
+    prompt text,
+    is_active boolean DEFAULT true NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    updated_at timestamp with time zone DEFAULT now() NOT NULL,
+    unit_id uuid,
+    owner_id uuid,
+    CONSTRAINT plg_marketing_landing_pages_status_check CHECK ((status = ANY (ARRAY['live'::text, 'planned'::text])))
 );
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_tenant ON public.plg_marketing_campaigns(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_channel ON public.plg_marketing_campaigns(tenant_id, channel_key);
 
-DO $$
-DECLARE t text;
-BEGIN
-  FOR t IN SELECT unnest(ARRAY['plg_marketing_channels','plg_marketing_campaigns'])
-  LOOP
-    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', t);
-    EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO authenticated', t);
-    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_select') THEN
-      EXECUTE format('CREATE POLICY %I ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_select', t);
-    END IF;
-    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_insert') THEN
-      EXECUTE format('CREATE POLICY %I ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_insert', t);
-    END IF;
-    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_update') THEN
-      EXECUTE format('CREATE POLICY %I ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_update', t);
-    END IF;
-    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_delete') THEN
-      EXECUTE format('CREATE POLICY %I ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_delete', t);
-    END IF;
-  END LOOP;
-END $$;
-`;
-var MIGRATION_006_ANALYTICS_VIEWS = `-- Marketing Plugin: analytics read views.
--- v_marketing_channels / v_marketing_campaigns \u2014 bridge views for the surface
--- and the agent's data primitives.
--- v_marketing_attribution \u2014 GENERIC, spine-only attribution event stream
--- (people/appointments/orders metadata). \`channel_raw\` is the unnormalized
--- origin string; the provider matches it against the app's channel set
--- (id or label, case/punctuation-insensitive).
--- Apps whose origin lives in an app-local extension table (e.g. beauty's
--- clients.origin) may CREATE OR REPLACE this view in their own incubator
--- migration, KEEPING the column contract:
---   (tenant_id uuid, kind text, source text, channel_raw text,
---    occurred_at timestamptz, value numeric)
-
-CREATE OR REPLACE VIEW public.v_marketing_channels WITH (security_invoker=true) AS
-SELECT c.id, c.tenant_id, c.channel_key, c.label, c.icon, c.kind,
-       c.is_active, c.monthly_spend, c.created_at, c.updated_at
-FROM public.plg_marketing_channels c;
-GRANT SELECT ON public.v_marketing_channels TO authenticated;
-
-CREATE OR REPLACE VIEW public.v_marketing_campaigns WITH (security_invoker=true) AS
-SELECT g.id, g.tenant_id, g.name, g.channel_key, ch.label AS channel_label,
-       g.status, g.starts_at, g.ends_at, g.spend, g.created_at, g.updated_at
-FROM public.plg_marketing_campaigns g
-LEFT JOIN public.plg_marketing_channels ch
-  ON ch.tenant_id = g.tenant_id AND ch.channel_key = g.channel_key;
-GRANT SELECT ON public.v_marketing_campaigns TO authenticated;
-
-CREATE OR REPLACE VIEW public.v_marketing_attribution WITH (security_invoker=true) AS
--- lead events (CRM leads; sourceId aligns with lead-sources/channel ids)
-SELECT p.tenant_id,
-       'lead'::text AS kind,
-       'crm'::text AS source,
-       COALESCE(p.metadata->>'sourceId', p.metadata->>'sourceName', p.metadata->>'origin') AS channel_raw,
-       p.created_at AS occurred_at,
-       NULLIF(p.metadata->>'value', '')::numeric AS value
-FROM public.people p
-WHERE p.kind = 'lead'
-UNION ALL
--- booking conversions (agenda verticals)
-SELECT b.tenant_id, 'conversion', 'agenda',
-       COALESCE(b.metadata->>'origin', pc.metadata->>'origin', pc.metadata->>'sourceId', pc.metadata->>'sourceName'),
-       b.starts_at,
-       o.total
-FROM public.appointments b
-LEFT JOIN public.people pc ON pc.id = b.party_id
-LEFT JOIN public.orders o ON o.id = b.order_id
-WHERE b.status NOT IN ('cancelled', 'no_show')
-UNION ALL
--- order conversions (commerce verticals)
-SELECT o.tenant_id, 'conversion', 'orders',
-       COALESCE(o.metadata->>'origin', pp.metadata->>'origin', pp.metadata->>'sourceId'),
-       o.created_at,
-       o.total
-FROM public.orders o
-LEFT JOIN public.people pp ON pp.id = o.party_id
-WHERE o.kind NOT IN ('appointment', 'deal')
-  AND o.status NOT IN ('cancelled', 'draft')
-UNION ALL
--- won-deal conversions (CRM verticals)
-SELECT o.tenant_id, 'conversion', 'crm',
-       COALESCE(pp.metadata->>'sourceId', pp.metadata->>'sourceName', o.metadata->>'origin'),
-       o.updated_at,
-       o.total
-FROM public.orders o
-LEFT JOIN public.people pp ON pp.id = o.party_id
-WHERE o.kind = 'deal' AND o.status = 'won';
-
-GRANT SELECT ON public.v_marketing_attribution TO authenticated;
-`;
-var MIGRATION_007_AGENT_RPCS = `-- ============================================================================
--- plugin-marketing 007: server-plane agent write RPC.
---
--- public.agent_marketing_create_campaign \u2014 guarded campaign create for the
--- assistant. Mirrors agent_agenda_create_appointment (agenda 005):
---   * actor-authorized: public.agent_guard (spine 015) runs role\u2192plan\u2192limit
---     BEFORE anything \u2014 denial comes back as structured jsonb;
---   * channel is validated against the tenant's plg_marketing_channels rows
---     (key or label, case/punctuation-insensitive); when the tenant has no
---     channel rows yet (surface not opened \u2192 lazy seed not run) the raw key is
---     accepted as-is;
---   * audited: audit_logs row with the acting user.
---
--- Contract (all agent_* RPCs): (p_tenant_id, p_actor_user_id, p_payload jsonb)
--- \u2192 jsonb {ok:true, id, record:{...}} | {ok:false, denial:{...}} | {ok:false,
--- error text}. GRANT authenticated+service_role \u2014 NEVER anon.
--- ============================================================================
+ALTER TABLE ONLY public.plg_marketing_landing_pages FORCE ROW LEVEL SECURITY;
+
+CREATE TABLE public.plg_marketing_social_accounts (
+    id uuid DEFAULT gen_random_uuid() NOT NULL,
+    tenant_id uuid NOT NULL,
+    name text NOT NULL,
+    handle text,
+    is_active boolean DEFAULT true NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL,
+    platforms text[] DEFAULT '{instagram}'::text[] NOT NULL
+);
 
-CREATE OR REPLACE FUNCTION public.agent_marketing_create_campaign(
-  p_tenant_id uuid,
-  p_actor_user_id uuid,
-  p_payload jsonb
-) RETURNS jsonb
-LANGUAGE plpgsql SECURITY DEFINER
-SET search_path = public
-AS $$
+
+-- \u2500\u2500 function \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) RETURNS jsonb
+    LANGUAGE plpgsql SECURITY DEFINER
+    SET search_path TO 'public'
+    AS $$
 DECLARE
   v_denial jsonb;
   v_used int;
@@ -4870,187 +4846,863 @@ BEGIN
 END;
 $$;
 
-REVOKE ALL ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM public;
-REVOKE EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM anon;
-GRANT EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb)
-  TO authenticated, service_role;
-`;
-var MIGRATION_008_LANDING_PAGES = `-- Marketing Plugin: landing pages.
--- Prefix: plg_marketing_
--- A landing page IS a site plus a route (espacorenovario.com.br + /lp-capilar).
--- The SITE is not modelled here: it is the tenant's fayz project
--- (public.fayz_projects, @fayz-ai/db 020) \u2014 the same rows Settings \u2192 Sites
--- manages \u2014 so \`app_id\` / \`fayz_project_id\` / \`preview_url\` come from there.
--- Visit analytics are read from the platform that hosts the deploy (app id +
--- route + period); that source is not wired yet, so visits render as pending.
--- \`lead_tags\` is the cross with the CRM: leads that arrive through the page
--- carry those tag slugs in people.tags (v_marketing_lead_tag_events counts them).
--- \`status\`='planned' + \`prompt\` is a page that does NOT exist on the site yet:
--- the brief is written here and the page gets built with Fayz later.
--- Canonical RLS form: tenant_id IN (SELECT public.user_tenant_ids()).
-
-CREATE TABLE IF NOT EXISTS public.plg_marketing_landing_pages (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
-  site_id uuid NOT NULL,
-  name text NOT NULL,
-  route text NOT NULL,
-  lead_tags text[] NOT NULL DEFAULT '{}',
-  status text NOT NULL DEFAULT 'live' CHECK (status IN ('live', 'planned')),
-  prompt text,
-  is_active boolean NOT NULL DEFAULT true,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
--- The site table was renamed fayz_projects -> published_sites (db 137), and on a
--- pool mid-migration the old name is 141's compat VIEW \u2014 which a FOREIGN KEY
--- cannot reference. So the constraint is declared against whichever name is the
--- real TABLE here, instead of being frozen into the CREATE above.
-DO $$
-DECLARE v_target text;
+CREATE FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer DEFAULT 1000) RETURNS jsonb
+    LANGUAGE plpgsql SECURITY DEFINER
+    SET search_path TO ''
+    AS $$
+DECLARE
+  c         public.plg_marketing_campaigns%ROWTYPE;
+  v_person  uuid;
+  v_queue   uuid;
+  v_entered integer := 0;
+  v_queued  integer := 0;
+  v_left    integer := 0;
 BEGIN
-  SELECT c.relname INTO v_target
-    FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
-   WHERE n.nspname = 'public' AND c.relkind = 'r'
-     AND c.relname IN ('published_sites', 'fayz_projects')
-   ORDER BY (c.relname = 'published_sites') DESC
-   LIMIT 1;
-
-  IF v_target IS NOT NULL
-     AND NOT EXISTS (SELECT 1 FROM pg_constraint
-                      WHERE conrelid = 'public.plg_marketing_landing_pages'::regclass
-                        AND conname = 'plg_marketing_landing_pages_site_fk') THEN
-    EXECUTE format(
-      'ALTER TABLE public.plg_marketing_landing_pages
-         ADD CONSTRAINT plg_marketing_landing_pages_site_fk
-         FOREIGN KEY (site_id) REFERENCES public.%I(id) ON DELETE CASCADE', v_target);
+  SELECT * INTO c FROM public.plg_marketing_campaigns WHERE id = p_campaign_id;
+  IF c.id IS NULL THEN
+    RAISE EXCEPTION 'marketing_campaign_run: campaign % not found', p_campaign_id USING ERRCODE = 'P0002';
+  END IF;
+  IF c.kind <> 'outbound' THEN
+    RETURN jsonb_build_object('skipped', 'not an outbound campaign');
+  END IF;
+  IF to_regprocedure('public.notifications_enqueue(uuid, text, uuid, jsonb, text, timestamptz, text, text, uuid, uuid)') IS NULL THEN
+    RAISE EXCEPTION 'marketing_campaign_run: plugin-notifications is not installed' USING ERRCODE = '0A000';
   END IF;
-END $$;
 
--- Self-healing for pools that ran an earlier cut of this migration (single
--- lead_tag column, no status/prompt). No-op on a fresh table. The views are
--- rebuilt at the bottom; dropping them first is what lets the column go.
-DROP VIEW IF EXISTS public.v_marketing_landing_pages;
+  -- Whoever no longer qualifies LEAVES, and the moment is recorded. Revoking
+  -- consent has to show up as an act, not as an absence.
+  UPDATE public.plg_marketing_audiences a
+     SET state = 'left', left_at = now(), reason = 'no longer in the audience'
+   WHERE a.campaign_id = c.id
+     AND a.state IN ('entered', 'queued')
+     AND NOT EXISTS (SELECT 1 FROM public.marketing_resolve_audience(c.id) r WHERE r.person_id = a.person_id);
+  GET DIAGNOSTICS v_left = ROW_COUNT;
+
+  FOR v_person IN
+    SELECT r.person_id FROM public.marketing_resolve_audience(c.id) r
+     LIMIT greatest(p_limit, 0)
+  LOOP
+    INSERT INTO public.plg_marketing_audiences (tenant_id, unit_id, campaign_id, person_id, state)
+    VALUES (c.tenant_id, c.unit_id, c.id, v_person, 'entered')
+    ON CONFLICT (campaign_id, person_id) DO NOTHING;
+    IF FOUND THEN v_entered := v_entered + 1; END IF;
+
+    -- Enqueue once per (campaign, person). The dedupe key is what makes a second
+    -- run of the same campaign harmless, exactly as a redelivered event is.
+    IF EXISTS (SELECT 1 FROM public.plg_marketing_audiences a
+                WHERE a.campaign_id = c.id AND a.person_id = v_person AND a.state = 'entered') THEN
+      v_queue := public.notifications_enqueue(
+        p_tenant_id    => c.tenant_id,
+        p_template_key => c.template_key,
+        p_person_id    => v_person,
+        p_payload      => jsonb_build_object('campaign', c.name, 'campaign_key', c.key),
+        p_dedupe_key   => 'campaign:' || c.id::text || ':' || v_person::text,
+        p_unit_id      => c.unit_id);
+
+      UPDATE public.plg_marketing_audiences
+         SET state = 'queued', queued_at = now(), queue_id = v_queue
+       WHERE campaign_id = c.id AND person_id = v_person;
+      v_queued := v_queued + 1;
+    END IF;
+  END LOOP;
 
-ALTER TABLE public.plg_marketing_landing_pages
-  ADD COLUMN IF NOT EXISTS lead_tags text[] NOT NULL DEFAULT '{}',
-  ADD COLUMN IF NOT EXISTS status text NOT NULL DEFAULT 'live',
-  ADD COLUMN IF NOT EXISTS prompt text;
+  UPDATE public.plg_marketing_campaigns
+     SET last_run_at = now(), next_run_at = now() + interval '1 day'
+   WHERE id = c.id;
 
-DO $$
-BEGIN
-  IF EXISTS (
-    SELECT 1 FROM information_schema.columns
-    WHERE table_schema = 'public' AND table_name = 'plg_marketing_landing_pages' AND column_name = 'lead_tag'
-  ) THEN
-    UPDATE public.plg_marketing_landing_pages
-       SET lead_tags = ARRAY[lead_tag]
-     WHERE lead_tag IS NOT NULL AND lead_tags = '{}';
-    ALTER TABLE public.plg_marketing_landing_pages DROP COLUMN lead_tag;
-  END IF;
-  IF NOT EXISTS (
-    SELECT 1 FROM pg_constraint
-    WHERE conname = 'plg_marketing_landing_pages_status_check'
-  ) THEN
-    ALTER TABLE public.plg_marketing_landing_pages
-      ADD CONSTRAINT plg_marketing_landing_pages_status_check CHECK (status IN ('live', 'planned'));
-  END IF;
+  RETURN jsonb_build_object('campaign_id', c.id, 'entered', v_entered, 'queued', v_queued, 'left', v_left);
 END $$;
 
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_landing_pages_tenant ON public.plg_marketing_landing_pages(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_plg_marketing_landing_pages_site ON public.plg_marketing_landing_pages(site_id);
--- One row per route within a site: the route IS the page's identity.
-CREATE UNIQUE INDEX IF NOT EXISTS u_plg_marketing_landing_pages_site_route
-  ON public.plg_marketing_landing_pages(site_id, route);
+CREATE FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) RETURNS boolean
+    LANGUAGE sql STABLE SECURITY DEFINER
+    SET search_path TO ''
+    AS $$
+  SELECT CASE
+    -- The carve-out, named rather than assumed: a message about something the
+    -- person already bought is not marketing. It is still subject to the channel
+    -- opt-out, which the notification engine applies on its own.
+    WHEN p_purpose = 'transactional' THEN true
+    ELSE EXISTS (
+      SELECT 1 FROM public.plg_marketing_consents c
+       WHERE c.tenant_id = p_tenant AND c.person_id = p_person AND c.purpose = p_purpose
+         AND c.granted_at IS NOT NULL AND c.revoked_at IS NULL)
+  END
+$$;
 
-DO $$
-DECLARE t text := 'plg_marketing_landing_pages';
+CREATE FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) RETURNS TABLE(person_id uuid)
+    LANGUAGE plpgsql STABLE SECURITY DEFINER
+    SET search_path TO ''
+    AS $_$
+DECLARE
+  c        public.plg_marketing_campaigns%ROWTYPE;
+  v_source text;
+  v_where  text := '';
+  v_clause jsonb;
+  v_kind   char;
 BEGIN
-  EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', t);
-  EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO authenticated', t);
-  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_select') THEN
-    EXECUTE format('CREATE POLICY %I ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_select', t);
-  END IF;
-  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_insert') THEN
-    EXECUTE format('CREATE POLICY %I ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_insert', t);
+  SELECT * INTO c FROM public.plg_marketing_campaigns WHERE id = p_campaign_id;
+  IF c.id IS NULL THEN
+    RAISE EXCEPTION 'marketing_resolve_audience: campaign % not found', p_campaign_id USING ERRCODE = 'P0002';
   END IF;
-  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_update') THEN
-    EXECUTE format('CREATE POLICY %I ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_update', t);
+
+  v_source := coalesce(c.audience_query ->> 'source_view', 'people');
+  IF v_source !~ '^[a-z_][a-z0-9_]*$' THEN
+    RAISE EXCEPTION 'marketing_resolve_audience: % is not a bare relation name', v_source USING ERRCODE = '22023';
   END IF;
-  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_delete') THEN
-    EXECUTE format('CREATE POLICY %I ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_delete', t);
+  SELECT cl.relkind INTO v_kind FROM pg_class cl JOIN pg_namespace n ON n.oid = cl.relnamespace
+   WHERE n.nspname = 'public' AND cl.relname = v_source;
+  IF v_kind IS NULL THEN
+    RAISE EXCEPTION 'marketing_resolve_audience: public.% does not exist', v_source USING ERRCODE = '42P01';
   END IF;
+
+  v_where := format('tenant_id = %L', c.tenant_id);
+
+  FOR v_clause IN SELECT * FROM jsonb_array_elements(coalesce(c.audience_query -> 'where', '[]'::jsonb)) LOOP
+    IF NOT EXISTS (SELECT 1 FROM information_schema.columns
+                    WHERE table_schema = 'public' AND table_name = v_source
+                      AND column_name = v_clause ->> 'column') THEN
+      RAISE EXCEPTION 'marketing_resolve_audience: public.% has no column %', v_source, v_clause ->> 'column'
+        USING ERRCODE = '42703';
+    END IF;
+    -- The operator comes from a fixed set and the value is quoted as a literal:
+    -- the audience is declarative on purpose, so a campaign can never become a
+    -- way to run arbitrary SQL.
+    v_where := v_where || format(' AND %I %s %L',
+      v_clause ->> 'column',
+      CASE v_clause ->> 'op' WHEN '>=' THEN '>=' WHEN '<=' THEN '<=' WHEN '>' THEN '>' WHEN '<' THEN '<'
+                             WHEN '<>' THEN '<>' WHEN 'ilike' THEN 'ILIKE' ELSE '=' END,
+      v_clause ->> 'value');
+  END LOOP;
+
+  RETURN QUERY EXECUTE format(
+    'SELECT s.id FROM public.%I s WHERE %s AND public.marketing_has_consent(%L, s.id, %L)',
+    v_source, v_where, c.tenant_id, c.purpose);
+END $_$;
+
+CREATE FUNCTION public.marketing_run_due(p_limit integer DEFAULT 20) RETURNS jsonb
+    LANGUAGE plpgsql SECURITY DEFINER
+    SET search_path TO ''
+    AS $$
+DECLARE c record; v_n integer := 0; v_out jsonb := '[]'::jsonb;
+BEGIN
+  FOR c IN
+    SELECT id FROM public.plg_marketing_campaigns
+     WHERE kind = 'outbound' AND status = 'active'
+       AND (next_run_at IS NULL OR next_run_at <= now())
+       AND (starts_at IS NULL OR starts_at <= now())
+       AND (ends_at IS NULL OR ends_at >= now())
+     ORDER BY next_run_at NULLS FIRST
+     LIMIT greatest(p_limit, 0)
+     FOR UPDATE SKIP LOCKED
+  LOOP
+    v_out := v_out || public.marketing_campaign_run(c.id);
+    v_n := v_n + 1;
+  END LOOP;
+  RETURN jsonb_build_object('campaigns', v_n, 'results', v_out);
 END $$;
 
--- Read view: the page joined to its site, so the surface renders the full URL
--- (and the analytics keys) without a second round trip.
-CREATE VIEW public.v_marketing_landing_pages WITH (security_invoker=true) AS
-SELECT lp.id, lp.tenant_id, lp.site_id, lp.name, lp.route, lp.lead_tags, lp.status, lp.prompt, lp.is_active,
-       s.name AS site_name, s.preview_url AS site_url, s.app_id, s.fayz_project_id, s.editor_url,
-       lp.created_at, lp.updated_at
-FROM public.plg_marketing_landing_pages lp
-JOIN public.fayz_projects s ON s.id = lp.site_id;  -- alias or table, both read fine
-GRANT SELECT ON public.v_marketing_landing_pages TO authenticated;
-
--- Lead events keyed by tag \u2014 the cross that turns "leads tagged lp-capilar"
--- into that page's conversions. One row per (lead, tag); \`person_id\` is what
--- keeps a lead carrying two of a page's tags from counting twice. Archived
--- leads are OUT: plugin-crm archives by flipping people.is_active to false, and
--- a page's number has to match what the funnel shows. Apps whose leads live
--- elsewhere may CREATE OR REPLACE this view keeping the contract:
---   (tenant_id uuid, tag text, person_id uuid, occurred_at timestamptz, value numeric)
-DROP VIEW IF EXISTS public.v_marketing_lead_tag_events;
-CREATE VIEW public.v_marketing_lead_tag_events WITH (security_invoker=true) AS
-SELECT p.tenant_id,
-       tag,
-       p.id AS person_id,
-       p.created_at AS occurred_at,
-       NULLIF(p.metadata->>'value', '')::numeric AS value
-FROM public.people p
-CROSS JOIN LATERAL unnest(COALESCE(p.tags, '{}'::text[])) AS tag
-WHERE p.kind = 'lead'
-  AND COALESCE(p.is_active, true);
-GRANT SELECT ON public.v_marketing_lead_tag_events TO authenticated;
+
+-- \u2500\u2500 constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_campaign_id_person_id_key UNIQUE (campaign_id, person_id);
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_tenant_id_id_key UNIQUE (tenant_id, id);
+
+ALTER TABLE ONLY public.plg_marketing_campaigns
+    ADD CONSTRAINT plg_marketing_campaigns_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_marketing_campaigns
+    ADD CONSTRAINT plg_marketing_campaigns_tenant_id_id_key UNIQUE (tenant_id, id);
+
+ALTER TABLE ONLY public.plg_marketing_channels
+    ADD CONSTRAINT plg_marketing_channels_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_marketing_channels
+    ADD CONSTRAINT plg_marketing_channels_tenant_id_id_key UNIQUE (tenant_id, id);
+
+ALTER TABLE ONLY public.plg_marketing_consents
+    ADD CONSTRAINT plg_marketing_consents_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_marketing_consents
+    ADD CONSTRAINT plg_marketing_consents_tenant_id_id_key UNIQUE (tenant_id, id);
+
+ALTER TABLE ONLY public.plg_marketing_consents
+    ADD CONSTRAINT plg_marketing_consents_tenant_id_person_id_purpose_key UNIQUE (tenant_id, person_id, purpose);
+
+ALTER TABLE ONLY public.plg_marketing_content_plans
+    ADD CONSTRAINT plg_marketing_content_plans_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_marketing_content_posts
+    ADD CONSTRAINT plg_marketing_content_posts_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_marketing_landing_pages
+    ADD CONSTRAINT plg_marketing_landing_pages_pkey PRIMARY KEY (id);
+
+ALTER TABLE ONLY public.plg_marketing_landing_pages
+    ADD CONSTRAINT plg_marketing_landing_pages_tenant_id_id_key UNIQUE (tenant_id, id);
+
+ALTER TABLE ONLY public.plg_marketing_social_accounts
+    ADD CONSTRAINT plg_marketing_social_accounts_pkey PRIMARY KEY (id);
+
+
+-- \u2500\u2500 view \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE VIEW public.v_marketing_attribution WITH (security_invoker='true') AS
+ SELECT p.tenant_id,
+    'lead'::text AS kind,
+    'crm'::text AS source,
+    COALESCE((p.metadata ->> 'sourceId'::text), (p.metadata ->> 'sourceName'::text), (p.metadata ->> 'origin'::text)) AS channel_raw,
+    p.created_at AS occurred_at,
+    (NULLIF((p.metadata ->> 'value'::text), ''::text))::numeric AS value
+   FROM public.people p
+  WHERE (p.kind = 'lead'::text)
+UNION ALL
+ SELECT b.tenant_id,
+    'conversion'::text AS kind,
+    'agenda'::text AS source,
+    COALESCE((b.metadata ->> 'origin'::text), (pc.metadata ->> 'origin'::text), (pc.metadata ->> 'sourceId'::text), (pc.metadata ->> 'sourceName'::text)) AS channel_raw,
+    b.starts_at AS occurred_at,
+    o.total AS value
+   FROM ((public.appointments b
+     LEFT JOIN public.people pc ON ((pc.id = b.party_id)))
+     LEFT JOIN public.orders o ON ((o.id = b.order_id)))
+  WHERE (b.status <> ALL (ARRAY['cancelled'::text, 'no_show'::text]))
+UNION ALL
+ SELECT o.tenant_id,
+    'conversion'::text AS kind,
+    'orders'::text AS source,
+    COALESCE((o.metadata ->> 'origin'::text), (pp.metadata ->> 'origin'::text), (pp.metadata ->> 'sourceId'::text)) AS channel_raw,
+    o.created_at AS occurred_at,
+    o.total AS value
+   FROM (public.orders o
+     LEFT JOIN public.people pp ON ((pp.id = o.party_id)))
+  WHERE ((o.kind <> ALL (ARRAY['appointment'::text, 'deal'::text])) AND (o.status <> ALL (ARRAY['cancelled'::text, 'draft'::text])))
+UNION ALL
+ SELECT o.tenant_id,
+    'conversion'::text AS kind,
+    'crm'::text AS source,
+    COALESCE((pp.metadata ->> 'sourceId'::text), (pp.metadata ->> 'sourceName'::text), (o.metadata ->> 'origin'::text)) AS channel_raw,
+    o.updated_at AS occurred_at,
+    o.total AS value
+   FROM (public.orders o
+     LEFT JOIN public.people pp ON ((pp.id = o.party_id)))
+  WHERE ((o.kind = 'deal'::text) AND (o.status = 'won'::text));
+
+CREATE VIEW public.v_marketing_campaign_metrics WITH (security_invoker='true') AS
+ SELECT c.id AS campaign_id,
+    c.tenant_id,
+    c.unit_id,
+    c.key,
+    c.name,
+    c.status,
+    c.purpose,
+    c.template_key,
+    c.last_run_at,
+    count(a.id) AS audience,
+    count(a.id) FILTER (WHERE (a.state = 'queued'::text)) AS queued,
+    count(a.id) FILTER (WHERE (a.state = 'sent'::text)) AS sent,
+    count(a.id) FILTER (WHERE (a.state = 'converted'::text)) AS converted,
+    count(a.id) FILTER (WHERE (a.state = 'left'::text)) AS left_audience,
+    count(a.id) FILTER (WHERE (a.state = 'blocked'::text)) AS blocked,
+    count(q.id) FILTER (WHERE (q.status = 'sent'::text)) AS delivered,
+    count(q.id) FILTER (WHERE (q.status = 'blocked'::text)) AS refused
+   FROM ((public.plg_marketing_campaigns c
+     LEFT JOIN public.plg_marketing_audiences a ON ((a.campaign_id = c.id)))
+     LEFT JOIN public.plg_notifications_queue q ON ((q.id = a.queue_id)))
+  WHERE (c.kind = 'outbound'::text)
+  GROUP BY c.id, c.tenant_id, c.unit_id, c.key, c.name, c.status, c.purpose, c.template_key, c.last_run_at;
+
+CREATE VIEW public.v_marketing_campaigns WITH (security_invoker='true') AS
+ SELECT g.id,
+    g.tenant_id,
+    g.name,
+    g.channel_key,
+    ch.label AS channel_label,
+    g.status,
+    g.starts_at,
+    g.ends_at,
+    g.spend,
+    g.created_at,
+    g.updated_at
+   FROM (public.plg_marketing_campaigns g
+     LEFT JOIN public.plg_marketing_channels ch ON (((ch.tenant_id = g.tenant_id) AND (ch.channel_key = g.channel_key))));
+
+CREATE VIEW public.v_marketing_channels WITH (security_invoker='true') AS
+ SELECT id,
+    tenant_id,
+    channel_key,
+    label,
+    icon,
+    kind,
+    is_active,
+    monthly_spend,
+    created_at,
+    updated_at
+   FROM public.plg_marketing_channels c;
+
+CREATE VIEW public.v_marketing_landing_pages WITH (security_invoker='true') AS
+ SELECT lp.id,
+    lp.tenant_id,
+    lp.site_id,
+    lp.name,
+    lp.route,
+    lp.lead_tags,
+    lp.status,
+    lp.prompt,
+    lp.is_active,
+    s.name AS site_name,
+    s.preview_url AS site_url,
+    s.app_id,
+    s.fayz_project_id,
+    s.editor_url,
+    lp.created_at,
+    lp.updated_at
+   FROM (public.plg_marketing_landing_pages lp
+     JOIN public.fayz_projects s ON ((s.id = lp.site_id)));
+
+CREATE VIEW public.v_marketing_lead_tag_events WITH (security_invoker='true') AS
+ SELECT p.tenant_id,
+    tag.tag,
+    p.id AS person_id,
+    p.created_at AS occurred_at,
+    (NULLIF((p.metadata ->> 'value'::text), ''::text))::numeric AS value
+   FROM (public.people p
+     CROSS JOIN LATERAL unnest(COALESCE(p.tags, '{}'::text[])) tag(tag))
+  WHERE ((p.kind = 'lead'::text) AND COALESCE(p.is_active, true));
+
+
+-- \u2500\u2500 index \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE INDEX idx_plg_marketing_campaigns_channel ON public.plg_marketing_campaigns USING btree (tenant_id, channel_key);
+
+CREATE INDEX idx_plg_marketing_campaigns_tenant ON public.plg_marketing_campaigns USING btree (tenant_id);
+
+CREATE INDEX idx_plg_marketing_channels_tenant ON public.plg_marketing_channels USING btree (tenant_id);
+
+CREATE INDEX idx_plg_marketing_content_plans_account ON public.plg_marketing_content_plans USING btree (account_id);
+
+CREATE INDEX idx_plg_marketing_content_plans_tenant ON public.plg_marketing_content_plans USING btree (tenant_id);
+
+CREATE INDEX idx_plg_marketing_content_posts_plan ON public.plg_marketing_content_posts USING btree (plan_id, week_number, "position");
+
+CREATE INDEX idx_plg_marketing_content_posts_status ON public.plg_marketing_content_posts USING btree (tenant_id, status);
+
+CREATE INDEX idx_plg_marketing_content_posts_tenant ON public.plg_marketing_content_posts USING btree (tenant_id);
+
+CREATE INDEX idx_plg_marketing_landing_pages_site ON public.plg_marketing_landing_pages USING btree (site_id);
+
+CREATE INDEX idx_plg_marketing_landing_pages_tenant ON public.plg_marketing_landing_pages USING btree (tenant_id);
+
+CREATE INDEX idx_plg_marketing_social_accounts_tenant ON public.plg_marketing_social_accounts USING btree (tenant_id);
+
+CREATE INDEX plg_marketing_audiences_state_idx ON public.plg_marketing_audiences USING btree (campaign_id, state);
+
+CREATE INDEX plg_marketing_audiences_tenant_owner_idx ON public.plg_marketing_audiences USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);
+
+CREATE INDEX plg_marketing_audiences_tenant_unit_idx ON public.plg_marketing_audiences USING btree (tenant_id, unit_id);
+
+CREATE INDEX plg_marketing_campaigns_due_idx ON public.plg_marketing_campaigns USING btree (next_run_at) WHERE ((kind = 'outbound'::text) AND (status = 'active'::text));
+
+CREATE UNIQUE INDEX plg_marketing_campaigns_key_uq ON public.plg_marketing_campaigns USING btree (tenant_id, key) WHERE (key IS NOT NULL);
+
+CREATE INDEX plg_marketing_campaigns_tenant_owner_idx ON public.plg_marketing_campaigns USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);
+
+CREATE INDEX plg_marketing_campaigns_tenant_unit_idx ON public.plg_marketing_campaigns USING btree (tenant_id, unit_id);
+
+CREATE INDEX plg_marketing_channels_tenant_owner_idx ON public.plg_marketing_channels USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);
+
+CREATE INDEX plg_marketing_channels_tenant_unit_idx ON public.plg_marketing_channels USING btree (tenant_id, unit_id);
+
+CREATE INDEX plg_marketing_consents_person_idx ON public.plg_marketing_consents USING btree (tenant_id, person_id);
+
+CREATE INDEX plg_marketing_consents_tenant_owner_idx ON public.plg_marketing_consents USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);
+
+CREATE INDEX plg_marketing_consents_tenant_unit_idx ON public.plg_marketing_consents USING btree (tenant_id, unit_id);
+
+CREATE INDEX plg_marketing_landing_pages_tenant_owner_idx ON public.plg_marketing_landing_pages USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);
+
+CREATE INDEX plg_marketing_landing_pages_tenant_unit_idx ON public.plg_marketing_landing_pages USING btree (tenant_id, unit_id);
+
+CREATE UNIQUE INDEX u_plg_marketing_channels_tenant_key ON public.plg_marketing_channels USING btree (tenant_id, channel_key);
+
+CREATE UNIQUE INDEX u_plg_marketing_landing_pages_site_route ON public.plg_marketing_landing_pages USING btree (site_id, route);
+
+
+-- \u2500\u2500 fk constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_campaign_id_fkey FOREIGN KEY (campaign_id) REFERENCES public.plg_marketing_campaigns(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_person_id_fkey FOREIGN KEY (person_id) REFERENCES public.people(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_audiences
+    ADD CONSTRAINT plg_marketing_audiences_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_campaigns
+    ADD CONSTRAINT plg_marketing_campaigns_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_campaigns
+    ADD CONSTRAINT plg_marketing_campaigns_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_campaigns
+    ADD CONSTRAINT plg_marketing_campaigns_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_channels
+    ADD CONSTRAINT plg_marketing_channels_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_channels
+    ADD CONSTRAINT plg_marketing_channels_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_channels
+    ADD CONSTRAINT plg_marketing_channels_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_consents
+    ADD CONSTRAINT plg_marketing_consents_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_consents
+    ADD CONSTRAINT plg_marketing_consents_person_id_fkey FOREIGN KEY (person_id) REFERENCES public.people(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_consents
+    ADD CONSTRAINT plg_marketing_consents_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_consents
+    ADD CONSTRAINT plg_marketing_consents_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_content_plans
+    ADD CONSTRAINT plg_marketing_content_plans_account_id_fkey FOREIGN KEY (account_id) REFERENCES public.plg_marketing_social_accounts(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_content_plans
+    ADD CONSTRAINT plg_marketing_content_plans_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_content_posts
+    ADD CONSTRAINT plg_marketing_content_posts_plan_id_fkey FOREIGN KEY (plan_id) REFERENCES public.plg_marketing_content_plans(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_content_posts
+    ADD CONSTRAINT plg_marketing_content_posts_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_landing_pages
+    ADD CONSTRAINT plg_marketing_landing_pages_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_landing_pages
+    ADD CONSTRAINT plg_marketing_landing_pages_site_fk FOREIGN KEY (site_id) REFERENCES public.published_sites(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_landing_pages
+    ADD CONSTRAINT plg_marketing_landing_pages_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+ALTER TABLE ONLY public.plg_marketing_landing_pages
+    ADD CONSTRAINT plg_marketing_landing_pages_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;
+
+ALTER TABLE ONLY public.plg_marketing_social_accounts
+    ADD CONSTRAINT plg_marketing_social_accounts_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;
+
+
+-- \u2500\u2500 trigger \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE TRIGGER plg_marketing_audiences_updated_at BEFORE UPDATE ON public.plg_marketing_audiences FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+CREATE TRIGGER plg_marketing_campaigns_updated_at BEFORE UPDATE ON public.plg_marketing_campaigns FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+CREATE TRIGGER plg_marketing_channels_updated_at BEFORE UPDATE ON public.plg_marketing_channels FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+CREATE TRIGGER plg_marketing_consents_updated_at BEFORE UPDATE ON public.plg_marketing_consents FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+CREATE TRIGGER plg_marketing_landing_pages_updated_at BEFORE UPDATE ON public.plg_marketing_landing_pages FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();
+
+
+-- \u2500\u2500 row security \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+ALTER TABLE public.plg_marketing_audiences ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_marketing_campaigns ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_marketing_channels ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_marketing_consents ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_marketing_content_plans ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_marketing_content_posts ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_marketing_landing_pages ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE public.plg_marketing_social_accounts ENABLE ROW LEVEL SECURITY;
+
+
+-- \u2500\u2500 policy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE POLICY plg_marketing_audiences_authz_delete ON public.plg_marketing_audiences FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.audience'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.audience'::text, plg_marketing_audiences.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_audiences.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_audiences.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_audiences_authz_insert ON public.plg_marketing_audiences FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_audiences.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_audiences_authz_select ON public.plg_marketing_audiences FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.audience'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.audience'::text, plg_marketing_audiences.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_audiences.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_audiences.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_audiences_authz_update ON public.plg_marketing_audiences FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.audience'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.audience'::text, plg_marketing_audiences.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_audiences.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_audiences.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_audiences.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_campaigns_authz_delete ON public.plg_marketing_campaigns FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.campaign'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.campaign'::text, plg_marketing_campaigns.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_campaigns.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_campaigns.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_campaigns_authz_insert ON public.plg_marketing_campaigns FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_campaigns.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_campaigns_authz_select ON public.plg_marketing_campaigns FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.campaign'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.campaign'::text, plg_marketing_campaigns.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_campaigns.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_campaigns.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_campaigns_authz_update ON public.plg_marketing_campaigns FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.campaign'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.campaign'::text, plg_marketing_campaigns.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_campaigns.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_campaigns.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_campaigns.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_channels_authz_delete ON public.plg_marketing_channels FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.channel'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.channel'::text, plg_marketing_channels.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_channels.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_channels.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_channels_authz_insert ON public.plg_marketing_channels FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_channels.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_channels_authz_select ON public.plg_marketing_channels FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.channel'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.channel'::text, plg_marketing_channels.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_channels.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_channels.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_channels_authz_update ON public.plg_marketing_channels FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.channel'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.channel'::text, plg_marketing_channels.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_channels.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_channels.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_channels.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_consents_authz_delete ON public.plg_marketing_consents FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.consent'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.consent'::text, plg_marketing_consents.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_consents.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_consents.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_consents_authz_insert ON public.plg_marketing_consents FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_consents.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_consents_authz_select ON public.plg_marketing_consents FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.consent'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.consent'::text, plg_marketing_consents.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_consents.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_consents.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_consents_authz_update ON public.plg_marketing_consents FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.consent'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.consent'::text, plg_marketing_consents.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_consents.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_consents.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_consents.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_content_plans_delete ON public.plg_marketing_content_plans FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_content_plans_insert ON public.plg_marketing_content_plans FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_content_plans_select ON public.plg_marketing_content_plans FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_content_plans_update ON public.plg_marketing_content_plans FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_content_posts_delete ON public.plg_marketing_content_posts FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_content_posts_insert ON public.plg_marketing_content_posts FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_content_posts_select ON public.plg_marketing_content_posts FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_content_posts_update ON public.plg_marketing_content_posts FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_landing_pages_authz_delete ON public.plg_marketing_landing_pages FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.landing_page'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.landing_page'::text, plg_marketing_landing_pages.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_landing_pages.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_landing_pages_authz_insert ON public.plg_marketing_landing_pages FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_landing_pages_authz_select ON public.plg_marketing_landing_pages FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.landing_page'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.landing_page'::text, plg_marketing_landing_pages.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_landing_pages.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_landing_pages_authz_update ON public.plg_marketing_landing_pages FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.landing_page'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.landing_page'::text, plg_marketing_landing_pages.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_landing_pages.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_landing_pages.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));
+
+CREATE POLICY plg_marketing_social_accounts_delete ON public.plg_marketing_social_accounts FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_social_accounts_insert ON public.plg_marketing_social_accounts FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_social_accounts_select ON public.plg_marketing_social_accounts FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+CREATE POLICY plg_marketing_social_accounts_update ON public.plg_marketing_social_accounts FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));
+
+
+-- \u2500\u2500 acl \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+REVOKE ALL ON FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) FROM PUBLIC;
+GRANT ALL ON FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) TO authenticated;
+GRANT ALL ON FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) TO service_role;
+
+REVOKE ALL ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) FROM PUBLIC;
+GRANT ALL ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) TO authenticated;
+GRANT ALL ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) TO service_role;
+
+REVOKE ALL ON FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) FROM PUBLIC;
+GRANT ALL ON FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) TO authenticated;
+GRANT ALL ON FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) TO service_role;
+
+REVOKE ALL ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) FROM PUBLIC;
+GRANT ALL ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) TO authenticated;
+GRANT ALL ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) TO service_role;
+
+REVOKE ALL ON FUNCTION public.marketing_run_due(p_limit integer) FROM PUBLIC;
+GRANT ALL ON FUNCTION public.marketing_run_due(p_limit integer) TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_audiences TO anon;
+GRANT ALL ON TABLE public.plg_marketing_audiences TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_audiences TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_campaigns TO anon;
+GRANT ALL ON TABLE public.plg_marketing_campaigns TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_campaigns TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_channels TO anon;
+GRANT ALL ON TABLE public.plg_marketing_channels TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_channels TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_consents TO anon;
+GRANT ALL ON TABLE public.plg_marketing_consents TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_consents TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_content_plans TO anon;
+GRANT ALL ON TABLE public.plg_marketing_content_plans TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_content_plans TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_content_posts TO anon;
+GRANT ALL ON TABLE public.plg_marketing_content_posts TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_content_posts TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_landing_pages TO anon;
+GRANT ALL ON TABLE public.plg_marketing_landing_pages TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_landing_pages TO service_role;
+
+GRANT MAINTAIN ON TABLE public.plg_marketing_social_accounts TO anon;
+GRANT ALL ON TABLE public.plg_marketing_social_accounts TO authenticated;
+GRANT ALL ON TABLE public.plg_marketing_social_accounts TO service_role;
+
+GRANT MAINTAIN ON TABLE public.v_marketing_attribution TO anon;
+GRANT ALL ON TABLE public.v_marketing_attribution TO authenticated;
+GRANT ALL ON TABLE public.v_marketing_attribution TO service_role;
+
+GRANT MAINTAIN ON TABLE public.v_marketing_campaign_metrics TO anon;
+GRANT ALL ON TABLE public.v_marketing_campaign_metrics TO authenticated;
+GRANT ALL ON TABLE public.v_marketing_campaign_metrics TO service_role;
+
+GRANT MAINTAIN ON TABLE public.v_marketing_campaigns TO anon;
+GRANT ALL ON TABLE public.v_marketing_campaigns TO authenticated;
+GRANT ALL ON TABLE public.v_marketing_campaigns TO service_role;
+
+GRANT MAINTAIN ON TABLE public.v_marketing_channels TO anon;
+GRANT ALL ON TABLE public.v_marketing_channels TO authenticated;
+GRANT ALL ON TABLE public.v_marketing_channels TO service_role;
+
+GRANT MAINTAIN ON TABLE public.v_marketing_landing_pages TO anon;
+GRANT ALL ON TABLE public.v_marketing_landing_pages TO authenticated;
+GRANT ALL ON TABLE public.v_marketing_landing_pages TO service_role;
+
+GRANT MAINTAIN ON TABLE public.v_marketing_lead_tag_events TO anon;
+GRANT ALL ON TABLE public.v_marketing_lead_tag_events TO authenticated;
+GRANT ALL ON TABLE public.v_marketing_lead_tag_events TO service_role;
+
+
+-- \u2500\u2500 comment \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+COMMENT ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) IS 'Run a campaign (PRD 09): re-resolve the audience, drop whoever no longer qualifies, and ENQUEUE the rest through the notification engine. It never sends \u2014 that is what makes a promotion and a dunning reminder the same machine.';
+
+COMMENT ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) IS 'Who is in a campaign''s audience right now (PRD 09). Declarative filters over a read model, with consent for the campaign''s purpose applied AT THE SOURCE \u2014 someone who revoked never appears here, rather than appearing and being dropped later.';
+
+COMMENT ON TABLE public.plg_marketing_audiences IS 'Who a campaign reached and what happened (PRD 09). The audience is a QUERY re-evaluated on every run, not a frozen list: whoever qualifies later enters later, and whoever revokes consent leaves on the next run. This table is the record of that, not its definition.';
+
+COMMENT ON COLUMN public.plg_marketing_campaigns.kind IS 'ad_spend (the imported numbers of an external campaign) or outbound (a campaign this system fires). Same noun, two animals \u2014 a species rather than a second table called almost the same thing.';
+
+COMMENT ON COLUMN public.plg_marketing_campaigns.audience_query IS 'A DECLARATIVE audience: {"source_view": "...", "where": [{"column","op","value"}]}. Not SQL \u2014 a stored query string would make every campaign an injection surface, and a frozen list would answer yesterday''s question.';
+
+COMMENT ON TABLE public.plg_marketing_consents IS 'Consent per PURPOSE (PRD 09), separate from the channel opt-out: a customer may accept a payment reminder and refuse a promotion. Revoking is a timestamp, never a delete \u2014 the record that consent once existed is itself the evidence LGPD asks for.';
+
+COMMENT ON VIEW public.v_marketing_campaign_metrics IS 'Reach, delivery and conversion per campaign (PRD 09), computed from the audience and the notification queue. The campaign keeps no counter of its own \u2014 two tallies of the same fact is how a dashboard starts disagreeing with the queue.';
+
+
+-- \u2500\u2500 default privileges: restore \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- Put back, so the NEXT thing installed inherits what the chain had.
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;
+END $dp$;
+
+DO $dp$ BEGIN
+  EXECUTE $stmt$--
+-- PostgreSQL database dump complete
+--$stmt$;
+EXCEPTION WHEN insufficient_privilege OR undefined_object THEN
+  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$--
+-- PostgreSQL database dump complete
+--$stmt$;
+END $dp$;
 `;
-var MIGRATION_010_RANKLAYER_ONTO_CONNECTIONS = `-- ============================================================================
--- Marketing 010 \u2014 RankLayer stops owning tables.
---
--- Retires plg_marketing_ranklayer_integrations and plg_marketing_ranklayer_sync_log.
--- Both were the generic shape under a private name: tenant, active, one config
--- field, last sync \u2014 plus a run history beside it. They are now rows of
--- public.plg_connections / public.plg_sync_runs (packages/db 029), reached
--- through createConnectionStore('ranklayer'). See FAY-1376.
+var MIGRATION_001_THE_LANDING_PAGE_NAMES_THE_SITE = `-- ============================================================================
+-- 001_the_landing_page_names_the_site \u2014 the last caller of fayz_projects, and
+-- then the name itself (#352).
 --
--- Where each column went:
---   integrations.site_domain   \u2192 plg_connections.settings->>'siteDomain'
---   integrations.active        \u2192 plg_connections.active
---   integrations.last_sync_at  \u2192 plg_connections.last_sync_at
---   UNIQUE (tenant_id)         \u2192 UNIQUE (tenant_id, connector_id, instance_key),
---                                with instance_key = '' (RankLayer publishes to
---                                one site per tenant; a second site is a second
---                                instance_key the day it is asked for)
---   sync_log.created_at        \u2192 plg_sync_runs.started_at
---   sync_log.status            \u2192 plg_sync_runs.status
---   sync_log.fetched/written   \u2192 plg_sync_runs.fetched/written
---   sync_log.message           \u2192 plg_sync_runs.error on a failed run, and
---                                plg_sync_runs.stats->>'message' otherwise
---   sync_log.integration_id    \u2192 plg_sync_runs.connection_id
+-- 137 renamed the vendor out of the spine: \`fayz_projects\` became
+-- \`published_sites\`, because a table should say what it holds and not who
+-- built it. 141 left the old name answering as a view until callers moved.
+-- This view is the last one that did not, and it is the reason the name could
+-- not be dropped by the spine: a CREATE VIEW is a HARD dependency, so the
+-- spine \u2014 which runs first \u2014 would be dropping a name this file then joins.
 --
--- 004 (which created the pair) and 009 (which dropped its api_key column) are
--- deleted rather than edited: their ids stay in the ledger of any pool that ran
--- them, and this migration is what removes what they left behind. Nothing is in
--- production, so this is a drop, not a data migration.
---
--- One thing is not merely moved: 004 granted INSERT on the sync log to
--- \`authenticated\`, so any member of the tenant could forge publication history.
--- plg_sync_runs carries no such grant \u2014 runs are written server-side. The
--- exposure closes by moving.
+-- So the drop lives here, with the last reader. The view body is
+-- 000_baseline's with one name changed.
 -- ============================================================================
 
-DROP TABLE IF EXISTS public.plg_marketing_ranklayer_sync_log CASCADE;
-DROP TABLE IF EXISTS public.plg_marketing_ranklayer_integrations CASCADE;
+-- DROP, not CREATE OR REPLACE: this renames a COLUMN (fayz_project_id ->
+-- provider_site_id) and Postgres refuses that in a replace, which is the same
+-- wall 0084 and 0086 hit. Dropping takes the grants with it, so they are
+-- restored below exactly as 000_baseline set them.
+DROP VIEW IF EXISTS public.v_marketing_landing_pages;
+
+CREATE VIEW public.v_marketing_landing_pages WITH (security_invoker='true') AS
+ SELECT lp.id,
+    lp.tenant_id,
+    lp.site_id,
+    lp.name,
+    lp.route,
+    lp.lead_tags,
+    lp.status,
+    lp.prompt,
+    lp.is_active,
+    s.name AS site_name,
+    s.preview_url AS site_url,
+    s.app_id,
+    s.provider_site_id,
+    s.editor_url,
+    lp.created_at,
+    lp.updated_at
+   FROM (public.plg_marketing_landing_pages lp
+     JOIN public.published_sites s ON ((s.id = lp.site_id)));
+GRANT MAINTAIN ON TABLE public.v_marketing_landing_pages TO anon;
+GRANT ALL ON TABLE public.v_marketing_landing_pages TO authenticated;
+GRANT ALL ON TABLE public.v_marketing_landing_pages TO service_role;
+
+DROP VIEW IF EXISTS public.fayz_projects;
 `;
+var MIGRATIONS = [
+  { id: "000_baseline", sql: MIGRATION_000_BASELINE },
+  { id: "001_the_landing_page_names_the_site", sql: MIGRATION_001_THE_LANDING_PAGE_NAMES_THE_SITE }
+];
 
 // src/integrations/ranklayer/settings.ts
 var RANKLAYER_SETTINGS = [
@@ -5256,7 +5908,7 @@ var ranklayerConnectorDef = {
   ...connectionSettings(store2),
   /**
    * Called with no values: the credential is not ours to see, and the platform's
-   * redirect route does not write this pool's `plg_connections` (FAY-1388) — the
+   * redirect route does not write this pool's `connections` (FAY-1388) — the
    * app writes its own row, or the tenant authorizes, comes back, and reads "not
    * connected" forever. Bling shipped with the other belief and looped.
    */
@@ -5899,62 +6551,15 @@ function createMarketingPlugin(options) {
       { name: "marketing.content.post.created", description: "A content post was created" },
       { name: "marketing.content.post.updated", description: "A content post was updated" }
     ],
-    migrations: [
-      {
-        id: "marketing-000-plg-rename",
-        version: "1.0.0",
-        sql: MIGRATION_000_PLG_RENAME,
-        description: "Rename legacy mkt_* tables to plg_marketing_* in-place for pools provisioned before the industry-pool rename (guarded no-op on fresh pools)"
-      },
-      {
-        id: "marketing-001-content-planner",
-        version: "1.0.0",
-        sql: MIGRATION_001_CONTENT_PLANNER,
-        description: "Create plg_marketing_social_accounts, plg_marketing_content_plans and plg_marketing_content_posts"
-      },
-      {
-        id: "marketing-002-multi-platform",
-        version: "1.1.0",
-        sql: MIGRATION_002_MULTI_PLATFORM,
-        description: "Accounts publish to many platforms (platforms[]); posts gain optional platform targets"
-      },
-      {
-        id: "marketing-003-recording-ops",
-        version: "1.2.0",
-        sql: MIGRATION_003_RECORDING_OPS,
-        description: "Recording-day checklist + media asset URL on posts; content-media storage bucket"
-      },
-      {
-        id: "marketing-005-analytics-base",
-        version: "1.4.0",
-        sql: MIGRATION_005_ANALYTICS_BASE,
-        description: "Analytics base: plg_marketing_channels + plg_marketing_campaigns with canonical tenant RLS"
-      },
-      {
-        id: "marketing-006-analytics-views",
-        version: "1.4.0",
-        sql: MIGRATION_006_ANALYTICS_VIEWS,
-        description: "Read views v_marketing_channels/_campaigns + generic spine-only v_marketing_attribution"
-      },
-      {
-        id: "marketing-007-agent-rpcs",
-        version: "1.4.0",
-        sql: MIGRATION_007_AGENT_RPCS,
-        description: "agent_marketing_create_campaign \u2014 guarded, audited server-plane campaign create"
-      },
-      {
-        id: "marketing-008-landing-pages",
-        version: "1.5.0",
-        sql: MIGRATION_008_LANDING_PAGES,
-        description: "Sites + landing pages (site + route + lead tag) with tenant RLS, v_marketing_landing_pages and v_marketing_lead_tag_events"
-      },
-      {
-        id: "marketing-010-ranklayer-onto-connections",
-        version: "1.6.0",
-        sql: MIGRATION_010_RANKLAYER_ONTO_CONNECTIONS,
-        description: "Retire plg_marketing_ranklayer_integrations + _sync_log \u2014 the connection and its publication history are rows of plg_connections/plg_sync_runs (packages/db 029)"
-      }
-    ],
+    // One baseline per unit since #338 — read from the generated barrel
+    // rather than listed here, so regenerating the SQL never needs a
+    // manifest edit to match.
+    migrations: MIGRATIONS.map((entry) => ({
+      id: `marketing-${entry.id}`,
+      version: "1.0.0",
+      sql: entry.sql,
+      description: "The whole schema this plugin provisions, as one file: every table, view, function, policy and grant, plus the reference rows it seeds. Replaced the per-change chain in the 1.0.0 squash (#338); the files it collapsed are kept, unapplied, in src/migrations.archive/."
+    })),
     // RankLayer SEO connector — renders in the Integrações settings tab. A push
     // connector: RankLayer writes posts in and subscribes to blog.post.* to hear
     // the edits back. See src/integrations/ranklayer/RANKLAYER.md.
@@ -6022,6 +6627,7 @@ function createMarketingPlugin(options) {
       }
     ],
     registries: marketingRegistries,
+    onboarding: { program: buildMarketingOnboarding() },
     settings: [
       {
         id: "marketing",