@fayz-ai/plugin-marketing 0.11.2 → 0.12.0

package/dist/lib/onboarding.d.ts

@@ -0,0 +1,18 @@
+import { type OnboardingProgramDef } from '@fayz-ai/core';
+/**
+ * Implantação do marketing — dois cadastros e a conta que fecha.
+ *
+ * Ordem 90, DEPOIS do CRM (80), e a razão é a métrica: neste plugin a conversão
+ * do funil é lida da venda — negócio ganho, pedido, agendamento, conforme o
+ * domínio. Sem funil com etapa de ganho do lado do CRM, cada painel daqui
+ * mostra zero e a pessoa conclui que a ferramenta não funciona, quando o que
+ * falta é o outro lado da conta.
+ *
+ * O programa é curto porque o módulo é curto de verdade: canais e campanhas são
+ * dois cadastros. O que ele NÃO consegue fazer sozinho é o terceiro passo —
+ * fechar o circuito da origem, que depende de um hábito do atendimento e mora
+ * no CRM. Ele está aqui mesmo assim, dito com todas as letras, porque é onde a
+ * atribuição morre e o passo que ninguém dá é o que ninguém escreveu.
+ */
+export declare function buildMarketingOnboarding(): OnboardingProgramDef;
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/lib/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/lib/onboarding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAGxE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,IAAI,oBAAoB,CAmE/D"}

package/dist/migrations/index.d.ts

@@ -1,13 +1,5 @@
-export declare const MIGRATION_000_PLG_RENAME = "-- 000_plg_rename.sql \u2014 rename legacy marketing tables to plg_marketing_* for pools\n-- provisioned before the industry-pool rename. Guarded: fires only when legacy\n-- name exists and target does not, so fresh pools skip every branch.\nDO $$\nBEGIN\n  IF to_regclass('public.mkt_social_accounts') IS NOT NULL AND to_regclass('public.plg_marketing_social_accounts') IS NULL THEN\n    ALTER TABLE public.mkt_social_accounts RENAME TO plg_marketing_social_accounts;\n  END IF;\n  IF to_regclass('public.mkt_content_plans') IS NOT NULL AND to_regclass('public.plg_marketing_content_plans') IS NULL THEN\n    ALTER TABLE public.mkt_content_plans RENAME TO plg_marketing_content_plans;\n  END IF;\n  IF to_regclass('public.mkt_content_posts') IS NOT NULL AND to_regclass('public.plg_marketing_content_posts') IS NULL THEN\n    ALTER TABLE public.mkt_content_posts RENAME TO plg_marketing_content_posts;\n  END IF;\nEND $$;\n";
-export declare const MIGRATION_001_CONTENT_PLANNER = "-- Marketing Plugin: Content Planner\n-- Prefix: plg_marketing_\n-- Social accounts + content plans + posts (Notion-style markdown pages).\n\nCREATE TABLE IF NOT EXISTS public.plg_marketing_social_accounts (\n  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),\n  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,\n  name text NOT NULL,\n  handle text,\n  platform text NOT NULL DEFAULT 'instagram'\n    CHECK (platform IN ('instagram', 'tiktok', 'youtube', 'facebook', 'linkedin')),\n  is_active boolean NOT NULL DEFAULT true,\n  created_at timestamptz NOT NULL DEFAULT now()\n);\nALTER TABLE public.plg_marketing_social_accounts ENABLE ROW LEVEL SECURITY;\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_social_accounts_tenant ON public.plg_marketing_social_accounts(tenant_id);\n\nCREATE TABLE IF NOT EXISTS public.plg_marketing_content_plans (\n  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),\n  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,\n  account_id uuid NOT NULL REFERENCES public.plg_marketing_social_accounts(id) ON DELETE CASCADE,\n  name text NOT NULL,\n  status text NOT NULL DEFAULT 'active'\n    CHECK (status IN ('draft', 'active', 'archived')),\n  weeks_count integer NOT NULL DEFAULT 8,\n  start_date date,\n  objective text,\n  tone text,\n  pillars jsonb NOT NULL DEFAULT '[]'::jsonb,\n  formats jsonb NOT NULL DEFAULT '[]'::jsonb,\n  weekly_frequency integer NOT NULL DEFAULT 3,\n  brief_md text NOT NULL DEFAULT '',\n  created_at timestamptz NOT NULL DEFAULT now(),\n  updated_at timestamptz NOT NULL DEFAULT now()\n);\nALTER TABLE public.plg_marketing_content_plans ENABLE ROW LEVEL SECURITY;\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_content_plans_tenant ON public.plg_marketing_content_plans(tenant_id);\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_content_plans_account ON public.plg_marketing_content_plans(account_id);\n\nCREATE TABLE IF NOT EXISTS public.plg_marketing_content_posts (\n  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),\n  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,\n  plan_id uuid NOT NULL REFERENCES public.plg_marketing_content_plans(id) ON DELETE CASCADE,\n  week_number integer NOT NULL DEFAULT 1,\n  position integer NOT NULL DEFAULT 0,\n  title text NOT NULL,\n  format text NOT NULL DEFAULT 'reel'\n    CHECK (format IN ('reel', 'static', 'carousel', 'story')),\n  status text NOT NULL DEFAULT 'idea'\n    CHECK (status IN ('idea', 'script', 'recording', 'editing', 'scheduled', 'published')),\n  scheduled_date date,\n  hook text,\n  cta text,\n  content_md text NOT NULL DEFAULT '',\n  created_at timestamptz NOT NULL DEFAULT now(),\n  updated_at timestamptz NOT NULL DEFAULT now()\n);\nALTER TABLE public.plg_marketing_content_posts ENABLE ROW LEVEL SECURITY;\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_content_posts_tenant ON public.plg_marketing_content_posts(tenant_id);\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_content_posts_plan ON public.plg_marketing_content_posts(plan_id, week_number, position);\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_content_posts_status ON public.plg_marketing_content_posts(tenant_id, status);\n\n-- RLS policies for plg_marketing_social_accounts\nDROP POLICY IF EXISTS plg_marketing_social_accounts_select ON public.plg_marketing_social_accounts;\nDROP POLICY IF EXISTS plg_marketing_social_accounts_insert ON public.plg_marketing_social_accounts;\nDROP POLICY IF EXISTS plg_marketing_social_accounts_update ON public.plg_marketing_social_accounts;\nDROP POLICY IF EXISTS plg_marketing_social_accounts_delete ON public.plg_marketing_social_accounts;\nCREATE POLICY plg_marketing_social_accounts_select ON public.plg_marketing_social_accounts FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_social_accounts_insert ON public.plg_marketing_social_accounts FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_social_accounts_update ON public.plg_marketing_social_accounts FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_social_accounts_delete ON public.plg_marketing_social_accounts FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nGRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_marketing_social_accounts TO authenticated;\n\n-- RLS policies for plg_marketing_content_plans\nDROP POLICY IF EXISTS plg_marketing_content_plans_select ON public.plg_marketing_content_plans;\nDROP POLICY IF EXISTS plg_marketing_content_plans_insert ON public.plg_marketing_content_plans;\nDROP POLICY IF EXISTS plg_marketing_content_plans_update ON public.plg_marketing_content_plans;\nDROP POLICY IF EXISTS plg_marketing_content_plans_delete ON public.plg_marketing_content_plans;\nCREATE POLICY plg_marketing_content_plans_select ON public.plg_marketing_content_plans FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_content_plans_insert ON public.plg_marketing_content_plans FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_content_plans_update ON public.plg_marketing_content_plans FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_content_plans_delete ON public.plg_marketing_content_plans FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nGRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_marketing_content_plans TO authenticated;\n\n-- RLS policies for plg_marketing_content_posts\nDROP POLICY IF EXISTS plg_marketing_content_posts_select ON public.plg_marketing_content_posts;\nDROP POLICY IF EXISTS plg_marketing_content_posts_insert ON public.plg_marketing_content_posts;\nDROP POLICY IF EXISTS plg_marketing_content_posts_update ON public.plg_marketing_content_posts;\nDROP POLICY IF EXISTS plg_marketing_content_posts_delete ON public.plg_marketing_content_posts;\nCREATE POLICY plg_marketing_content_posts_select ON public.plg_marketing_content_posts FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_content_posts_insert ON public.plg_marketing_content_posts FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_content_posts_update ON public.plg_marketing_content_posts FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nCREATE POLICY plg_marketing_content_posts_delete ON public.plg_marketing_content_posts FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));\nGRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_marketing_content_posts TO authenticated;\n";
-export declare const MIGRATION_002_MULTI_PLATFORM = "-- Marketing Plugin: multi-platform accounts + per-post targets.\n-- An account is a brand/profile that publishes to MANY platforms (Instagram,\n-- YouTube, TikTok, ...). Posts optionally narrow the target platforms; an\n-- empty array means \"inherit the account's platforms\".\n\nALTER TABLE public.plg_marketing_social_accounts\n  ADD COLUMN IF NOT EXISTS platforms text[] NOT NULL DEFAULT '{instagram}';\n\n-- Backfill from the legacy single-platform column, then drop it (also drops\n-- its CHECK constraint \u2014 the platform list is UI-driven from here on).\nDO $$\nBEGIN\n  IF EXISTS (\n    SELECT 1 FROM information_schema.columns\n    WHERE table_schema = 'public' AND table_name = 'plg_marketing_social_accounts' AND column_name = 'platform'\n  ) THEN\n    UPDATE public.plg_marketing_social_accounts\n      SET platforms = ARRAY[platform]\n      WHERE platform IS NOT NULL AND platforms = '{instagram}';\n    ALTER TABLE public.plg_marketing_social_accounts DROP COLUMN platform;\n  END IF;\nEND $$;\n\nALTER TABLE public.plg_marketing_content_posts\n  ADD COLUMN IF NOT EXISTS platforms text[] NOT NULL DEFAULT '{}';\n";
-export declare const MIGRATION_003_RECORDING_OPS = "-- Marketing Plugin: recording-day ops on posts.\n-- checklist: shooting checklist items [{ id, text, done }] \u2014 the on-set\n-- companion for recording day. media_url: uploaded asset (static posts get a\n-- caption + final art instead of a script).\n\nALTER TABLE public.plg_marketing_content_posts\n  ADD COLUMN IF NOT EXISTS checklist jsonb NOT NULL DEFAULT '[]';\n\nALTER TABLE public.plg_marketing_content_posts\n  ADD COLUMN IF NOT EXISTS media_url text;\n\n-- Public media bucket for content assets (mirrors the avatars-bucket pattern:\n-- public read, authenticated write). Path convention: content/{tenantId}/{postId}-{ts}.{ext}\nINSERT INTO storage.buckets (id, name, public)\n  VALUES ('mkt-media', 'mkt-media', true)\n  ON CONFLICT (id) DO NOTHING;\n\nDROP POLICY IF EXISTS plg_marketing_media_read ON storage.objects;\nDROP POLICY IF EXISTS plg_marketing_media_insert ON storage.objects;\nDROP POLICY IF EXISTS plg_marketing_media_update ON storage.objects;\nDROP POLICY IF EXISTS plg_marketing_media_delete ON storage.objects;\nCREATE POLICY plg_marketing_media_read ON storage.objects FOR SELECT TO public USING (bucket_id = 'mkt-media');\nCREATE POLICY plg_marketing_media_insert ON storage.objects FOR INSERT TO authenticated WITH CHECK (bucket_id = 'mkt-media');\nCREATE POLICY plg_marketing_media_update ON storage.objects FOR UPDATE TO authenticated USING (bucket_id = 'mkt-media');\nCREATE POLICY plg_marketing_media_delete ON storage.objects FOR DELETE TO authenticated USING (bucket_id = 'mkt-media');\n";
-export declare const MIGRATION_005_ANALYTICS_BASE = "-- Marketing Plugin: analytics base tables (channels + campaigns).\n-- Prefix: plg_marketing_\n-- Channels are tenant-owned rows lazily seeded from the app's domain preset\n-- (channel_key = preset/config id). Campaign performance is DERIVED at read\n-- time from v_marketing_attribution (006); only spend is stored.\n-- Canonical RLS form: tenant_id IN (SELECT public.user_tenant_ids()).\n\nCREATE TABLE IF NOT EXISTS public.plg_marketing_channels (\n  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),\n  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,\n  channel_key text NOT NULL,\n  label text NOT NULL,\n  icon text,\n  kind text NOT NULL DEFAULT 'organic'\n    CHECK (kind IN ('paid', 'organic', 'social', 'referral', 'direct', 'outbound')),\n  is_active boolean NOT NULL DEFAULT true,\n  monthly_spend numeric NOT NULL DEFAULT 0,\n  created_at timestamptz NOT NULL DEFAULT now(),\n  updated_at timestamptz NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_channels_tenant ON public.plg_marketing_channels(tenant_id);\nCREATE UNIQUE INDEX IF NOT EXISTS u_plg_marketing_channels_tenant_key ON public.plg_marketing_channels(tenant_id, channel_key);\n\nCREATE TABLE IF NOT EXISTS public.plg_marketing_campaigns (\n  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),\n  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,\n  name text NOT NULL,\n  channel_key text NOT NULL,\n  status text NOT NULL DEFAULT 'draft'\n    CHECK (status IN ('active', 'paused', 'ended', 'draft')),\n  starts_at timestamptz,\n  ends_at timestamptz,\n  spend numeric NOT NULL DEFAULT 0,\n  created_at timestamptz NOT NULL DEFAULT now(),\n  updated_at timestamptz NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_tenant ON public.plg_marketing_campaigns(tenant_id);\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_channel ON public.plg_marketing_campaigns(tenant_id, channel_key);\n\nDO $$\nDECLARE t text;\nBEGIN\n  FOR t IN SELECT unnest(ARRAY['plg_marketing_channels','plg_marketing_campaigns'])\n  LOOP\n    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', t);\n    EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO authenticated', t);\n    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_select') THEN\n      EXECUTE format('CREATE POLICY %I ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_select', t);\n    END IF;\n    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_insert') THEN\n      EXECUTE format('CREATE POLICY %I ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_insert', t);\n    END IF;\n    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_update') THEN\n      EXECUTE format('CREATE POLICY %I ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_update', t);\n    END IF;\n    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_delete') THEN\n      EXECUTE format('CREATE POLICY %I ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_delete', t);\n    END IF;\n  END LOOP;\nEND $$;\n";
-export declare const MIGRATION_006_ANALYTICS_VIEWS = "-- Marketing Plugin: analytics read views.\n-- v_marketing_channels / v_marketing_campaigns \u2014 bridge views for the surface\n-- and the agent's data primitives.\n-- v_marketing_attribution \u2014 GENERIC, spine-only attribution event stream\n-- (people/appointments/orders metadata). `channel_raw` is the unnormalized\n-- origin string; the provider matches it against the app's channel set\n-- (id or label, case/punctuation-insensitive).\n-- Apps whose origin lives in an app-local extension table (e.g. beauty's\n-- clients.origin) may CREATE OR REPLACE this view in their own incubator\n-- migration, KEEPING the column contract:\n--   (tenant_id uuid, kind text, source text, channel_raw text,\n--    occurred_at timestamptz, value numeric)\n\nCREATE OR REPLACE VIEW public.v_marketing_channels WITH (security_invoker=true) AS\nSELECT c.id, c.tenant_id, c.channel_key, c.label, c.icon, c.kind,\n       c.is_active, c.monthly_spend, c.created_at, c.updated_at\nFROM public.plg_marketing_channels c;\nGRANT SELECT ON public.v_marketing_channels TO authenticated;\n\nCREATE OR REPLACE VIEW public.v_marketing_campaigns WITH (security_invoker=true) AS\nSELECT g.id, g.tenant_id, g.name, g.channel_key, ch.label AS channel_label,\n       g.status, g.starts_at, g.ends_at, g.spend, g.created_at, g.updated_at\nFROM public.plg_marketing_campaigns g\nLEFT JOIN public.plg_marketing_channels ch\n  ON ch.tenant_id = g.tenant_id AND ch.channel_key = g.channel_key;\nGRANT SELECT ON public.v_marketing_campaigns TO authenticated;\n\nCREATE OR REPLACE VIEW public.v_marketing_attribution WITH (security_invoker=true) AS\n-- lead events (CRM leads; sourceId aligns with lead-sources/channel ids)\nSELECT p.tenant_id,\n       'lead'::text AS kind,\n       'crm'::text AS source,\n       COALESCE(p.metadata->>'sourceId', p.metadata->>'sourceName', p.metadata->>'origin') AS channel_raw,\n       p.created_at AS occurred_at,\n       NULLIF(p.metadata->>'value', '')::numeric AS value\nFROM public.people p\nWHERE p.kind = 'lead'\nUNION ALL\n-- booking conversions (agenda verticals)\nSELECT b.tenant_id, 'conversion', 'agenda',\n       COALESCE(b.metadata->>'origin', pc.metadata->>'origin', pc.metadata->>'sourceId', pc.metadata->>'sourceName'),\n       b.starts_at,\n       o.total\nFROM public.appointments b\nLEFT JOIN public.people pc ON pc.id = b.party_id\nLEFT JOIN public.orders o ON o.id = b.order_id\nWHERE b.status NOT IN ('cancelled', 'no_show')\nUNION ALL\n-- order conversions (commerce verticals)\nSELECT o.tenant_id, 'conversion', 'orders',\n       COALESCE(o.metadata->>'origin', pp.metadata->>'origin', pp.metadata->>'sourceId'),\n       o.created_at,\n       o.total\nFROM public.orders o\nLEFT JOIN public.people pp ON pp.id = o.party_id\nWHERE o.kind NOT IN ('appointment', 'deal')\n  AND o.status NOT IN ('cancelled', 'draft')\nUNION ALL\n-- won-deal conversions (CRM verticals)\nSELECT o.tenant_id, 'conversion', 'crm',\n       COALESCE(pp.metadata->>'sourceId', pp.metadata->>'sourceName', o.metadata->>'origin'),\n       o.updated_at,\n       o.total\nFROM public.orders o\nLEFT JOIN public.people pp ON pp.id = o.party_id\nWHERE o.kind = 'deal' AND o.status = 'won';\n\nGRANT SELECT ON public.v_marketing_attribution TO authenticated;\n";
-export declare const MIGRATION_007_AGENT_RPCS = "-- ============================================================================\n-- plugin-marketing 007: server-plane agent write RPC.\n--\n-- public.agent_marketing_create_campaign \u2014 guarded campaign create for the\n-- assistant. Mirrors agent_agenda_create_appointment (agenda 005):\n--   * actor-authorized: public.agent_guard (spine 015) runs role\u2192plan\u2192limit\n--     BEFORE anything \u2014 denial comes back as structured jsonb;\n--   * channel is validated against the tenant's plg_marketing_channels rows\n--     (key or label, case/punctuation-insensitive); when the tenant has no\n--     channel rows yet (surface not opened \u2192 lazy seed not run) the raw key is\n--     accepted as-is;\n--   * audited: audit_logs row with the acting user.\n--\n-- Contract (all agent_* RPCs): (p_tenant_id, p_actor_user_id, p_payload jsonb)\n-- \u2192 jsonb {ok:true, id, record:{...}} | {ok:false, denial:{...}} | {ok:false,\n-- error text}. GRANT authenticated+service_role \u2014 NEVER anon.\n-- ============================================================================\n\nCREATE OR REPLACE FUNCTION public.agent_marketing_create_campaign(\n  p_tenant_id uuid,\n  p_actor_user_id uuid,\n  p_payload jsonb\n) RETURNS jsonb\nLANGUAGE plpgsql SECURITY DEFINER\nSET search_path = public\nAS $$\nDECLARE\n  v_denial jsonb;\n  v_used int;\n  v_name text;\n  v_channel_raw text;\n  v_channel_key text;\n  v_status text;\n  v_starts timestamptz;\n  v_ends timestamptz;\n  v_spend numeric;\n  v_has_channels boolean;\n  v_id uuid;\nBEGIN\n  -- \u2500\u2500 payload \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  v_name := left(trim(p_payload->>'name'), 200);\n  v_channel_raw := trim(p_payload->>'channel_key');\n  v_status := COALESCE(NULLIF(trim(p_payload->>'status'), ''), 'draft');\n  v_spend := COALESCE(NULLIF(p_payload->>'spend', '')::numeric, 0);\n  BEGIN\n    v_starts := NULLIF(p_payload->>'starts_at', '')::timestamptz;\n    v_ends := NULLIF(p_payload->>'ends_at', '')::timestamptz;\n  EXCEPTION WHEN OTHERS THEN\n    RETURN jsonb_build_object('ok', false, 'error', 'invalid payload: ' || SQLERRM);\n  END;\n  IF v_name IS NULL OR v_name = '' OR v_channel_raw IS NULL OR v_channel_raw = '' THEN\n    RETURN jsonb_build_object('ok', false, 'error', 'name and channel_key are required');\n  END IF;\n  IF v_status NOT IN ('active', 'paused', 'ended', 'draft') THEN\n    RETURN jsonb_build_object('ok', false, 'error', 'status must be one of active|paused|ended|draft');\n  END IF;\n\n  -- \u2500\u2500 authorization: role \u2192 plan \u2192 campaigns_active cap \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  SELECT count(*) INTO v_used FROM plg_marketing_campaigns c\n  WHERE c.tenant_id = p_tenant_id AND c.status = 'active';\n  v_denial := agent_guard(p_tenant_id, p_actor_user_id,\n                          'marketing', 'create', 'campaigns_active', v_used,\n                          CASE WHEN v_status = 'active' THEN 1 ELSE 0 END);\n  IF v_denial IS NOT NULL THEN\n    RETURN jsonb_build_object('ok', false, 'denial', v_denial);\n  END IF;\n\n  -- \u2500\u2500 channel resolution (key or label, normalized) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  SELECT EXISTS (SELECT 1 FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id)\n    INTO v_has_channels;\n  IF v_has_channels THEN\n    SELECT ch.channel_key INTO v_channel_key\n    FROM plg_marketing_channels ch\n    WHERE ch.tenant_id = p_tenant_id\n      AND (\n        regexp_replace(lower(ch.channel_key), '[^a-z0-9]', '', 'g')\n          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')\n        OR regexp_replace(lower(ch.label), '[^a-z0-9]', '', 'g')\n          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')\n      )\n    LIMIT 1;\n    IF v_channel_key IS NULL THEN\n      RETURN jsonb_build_object('ok', false, 'error',\n        'unknown channel \"' || v_channel_raw || '\" \u2014 valid channels: ' ||\n        COALESCE((SELECT string_agg(ch.channel_key, ', ' ORDER BY ch.channel_key)\n                  FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id), ''));\n    END IF;\n  ELSE\n    v_channel_key := v_channel_raw;\n  END IF;\n\n  -- \u2500\u2500 write + audit \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  INSERT INTO plg_marketing_campaigns (tenant_id, name, channel_key, status, starts_at, ends_at, spend)\n  VALUES (p_tenant_id, v_name, v_channel_key, v_status, COALESCE(v_starts, now()), v_ends, v_spend)\n  RETURNING id INTO v_id;\n\n  INSERT INTO audit_logs (tenant_id, user_id, action, entity_type, entity_id, metadata)\n  VALUES (p_tenant_id, p_actor_user_id, 'agent.createCampaign', 'marketing_campaign', v_id::text,\n          jsonb_build_object('payload', p_payload));\n\n  RETURN jsonb_build_object(\n    'ok', true,\n    'id', v_id,\n    'record', jsonb_build_object(\n      'id', v_id,\n      'name', v_name,\n      'channel_key', v_channel_key,\n      'status', v_status,\n      'starts_at', COALESCE(v_starts, now()),\n      'spend', v_spend\n    )\n  );\nEND;\n$$;\n\nREVOKE ALL ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM public;\nREVOKE EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM anon;\nGRANT EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb)\n  TO authenticated, service_role;\n";
-export declare const MIGRATION_008_LANDING_PAGES = "-- Marketing Plugin: landing pages.\n-- Prefix: plg_marketing_\n-- A landing page IS a site plus a route (espacorenovario.com.br + /lp-capilar).\n-- The SITE is not modelled here: it is the tenant's fayz project\n-- (public.fayz_projects, @fayz-ai/db 020) \u2014 the same rows Settings \u2192 Sites\n-- manages \u2014 so `app_id` / `fayz_project_id` / `preview_url` come from there.\n-- Visit analytics are read from the platform that hosts the deploy (app id +\n-- route + period); that source is not wired yet, so visits render as pending.\n-- `lead_tags` is the cross with the CRM: leads that arrive through the page\n-- carry those tag slugs in people.tags (v_marketing_lead_tag_events counts them).\n-- `status`='planned' + `prompt` is a page that does NOT exist on the site yet:\n-- the brief is written here and the page gets built with Fayz later.\n-- Canonical RLS form: tenant_id IN (SELECT public.user_tenant_ids()).\n\nCREATE TABLE IF NOT EXISTS public.plg_marketing_landing_pages (\n  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),\n  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,\n  site_id uuid NOT NULL,\n  name text NOT NULL,\n  route text NOT NULL,\n  lead_tags text[] NOT NULL DEFAULT '{}',\n  status text NOT NULL DEFAULT 'live' CHECK (status IN ('live', 'planned')),\n  prompt text,\n  is_active boolean NOT NULL DEFAULT true,\n  created_at timestamptz NOT NULL DEFAULT now(),\n  updated_at timestamptz NOT NULL DEFAULT now()\n);\n\n-- The site table was renamed fayz_projects -> published_sites (db 137), and on a\n-- pool mid-migration the old name is 141's compat VIEW \u2014 which a FOREIGN KEY\n-- cannot reference. So the constraint is declared against whichever name is the\n-- real TABLE here, instead of being frozen into the CREATE above.\nDO $$\nDECLARE v_target text;\nBEGIN\n  SELECT c.relname INTO v_target\n    FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace\n   WHERE n.nspname = 'public' AND c.relkind = 'r'\n     AND c.relname IN ('published_sites', 'fayz_projects')\n   ORDER BY (c.relname = 'published_sites') DESC\n   LIMIT 1;\n\n  IF v_target IS NOT NULL\n     AND NOT EXISTS (SELECT 1 FROM pg_constraint\n                      WHERE conrelid = 'public.plg_marketing_landing_pages'::regclass\n                        AND conname = 'plg_marketing_landing_pages_site_fk') THEN\n    EXECUTE format(\n      'ALTER TABLE public.plg_marketing_landing_pages\n         ADD CONSTRAINT plg_marketing_landing_pages_site_fk\n         FOREIGN KEY (site_id) REFERENCES public.%I(id) ON DELETE CASCADE', v_target);\n  END IF;\nEND $$;\n\n-- Self-healing for pools that ran an earlier cut of this migration (single\n-- lead_tag column, no status/prompt). No-op on a fresh table. The views are\n-- rebuilt at the bottom; dropping them first is what lets the column go.\nDROP VIEW IF EXISTS public.v_marketing_landing_pages;\n\nALTER TABLE public.plg_marketing_landing_pages\n  ADD COLUMN IF NOT EXISTS lead_tags text[] NOT NULL DEFAULT '{}',\n  ADD COLUMN IF NOT EXISTS status text NOT NULL DEFAULT 'live',\n  ADD COLUMN IF NOT EXISTS prompt text;\n\nDO $$\nBEGIN\n  IF EXISTS (\n    SELECT 1 FROM information_schema.columns\n    WHERE table_schema = 'public' AND table_name = 'plg_marketing_landing_pages' AND column_name = 'lead_tag'\n  ) THEN\n    UPDATE public.plg_marketing_landing_pages\n       SET lead_tags = ARRAY[lead_tag]\n     WHERE lead_tag IS NOT NULL AND lead_tags = '{}';\n    ALTER TABLE public.plg_marketing_landing_pages DROP COLUMN lead_tag;\n  END IF;\n  IF NOT EXISTS (\n    SELECT 1 FROM pg_constraint\n    WHERE conname = 'plg_marketing_landing_pages_status_check'\n  ) THEN\n    ALTER TABLE public.plg_marketing_landing_pages\n      ADD CONSTRAINT plg_marketing_landing_pages_status_check CHECK (status IN ('live', 'planned'));\n  END IF;\nEND $$;\n\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_landing_pages_tenant ON public.plg_marketing_landing_pages(tenant_id);\nCREATE INDEX IF NOT EXISTS idx_plg_marketing_landing_pages_site ON public.plg_marketing_landing_pages(site_id);\n-- One row per route within a site: the route IS the page's identity.\nCREATE UNIQUE INDEX IF NOT EXISTS u_plg_marketing_landing_pages_site_route\n  ON public.plg_marketing_landing_pages(site_id, route);\n\nDO $$\nDECLARE t text := 'plg_marketing_landing_pages';\nBEGIN\n  EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', t);\n  EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO authenticated', t);\n  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_select') THEN\n    EXECUTE format('CREATE POLICY %I ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_select', t);\n  END IF;\n  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_insert') THEN\n    EXECUTE format('CREATE POLICY %I ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_insert', t);\n  END IF;\n  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_update') THEN\n    EXECUTE format('CREATE POLICY %I ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_update', t);\n  END IF;\n  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_delete') THEN\n    EXECUTE format('CREATE POLICY %I ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_delete', t);\n  END IF;\nEND $$;\n\n-- Read view: the page joined to its site, so the surface renders the full URL\n-- (and the analytics keys) without a second round trip.\nCREATE VIEW public.v_marketing_landing_pages WITH (security_invoker=true) AS\nSELECT lp.id, lp.tenant_id, lp.site_id, lp.name, lp.route, lp.lead_tags, lp.status, lp.prompt, lp.is_active,\n       s.name AS site_name, s.preview_url AS site_url, s.app_id, s.fayz_project_id, s.editor_url,\n       lp.created_at, lp.updated_at\nFROM public.plg_marketing_landing_pages lp\nJOIN public.fayz_projects s ON s.id = lp.site_id;  -- alias or table, both read fine\nGRANT SELECT ON public.v_marketing_landing_pages TO authenticated;\n\n-- Lead events keyed by tag \u2014 the cross that turns \"leads tagged lp-capilar\"\n-- into that page's conversions. One row per (lead, tag); `person_id` is what\n-- keeps a lead carrying two of a page's tags from counting twice. Archived\n-- leads are OUT: plugin-crm archives by flipping people.is_active to false, and\n-- a page's number has to match what the funnel shows. Apps whose leads live\n-- elsewhere may CREATE OR REPLACE this view keeping the contract:\n--   (tenant_id uuid, tag text, person_id uuid, occurred_at timestamptz, value numeric)\nDROP VIEW IF EXISTS public.v_marketing_lead_tag_events;\nCREATE VIEW public.v_marketing_lead_tag_events WITH (security_invoker=true) AS\nSELECT p.tenant_id,\n       tag,\n       p.id AS person_id,\n       p.created_at AS occurred_at,\n       NULLIF(p.metadata->>'value', '')::numeric AS value\nFROM public.people p\nCROSS JOIN LATERAL unnest(COALESCE(p.tags, '{}'::text[])) AS tag\nWHERE p.kind = 'lead'\n  AND COALESCE(p.is_active, true);\nGRANT SELECT ON public.v_marketing_lead_tag_events TO authenticated;\n";
-export declare const MIGRATION_010_RANKLAYER_ONTO_CONNECTIONS = "-- ============================================================================\n-- Marketing 010 \u2014 RankLayer stops owning tables.\n--\n-- Retires plg_marketing_ranklayer_integrations and plg_marketing_ranklayer_sync_log.\n-- Both were the generic shape under a private name: tenant, active, one config\n-- field, last sync \u2014 plus a run history beside it. They are now rows of\n-- public.plg_connections / public.plg_sync_runs (packages/db 029), reached\n-- through createConnectionStore('ranklayer'). See FAY-1376.\n--\n-- Where each column went:\n--   integrations.site_domain   \u2192 plg_connections.settings->>'siteDomain'\n--   integrations.active        \u2192 plg_connections.active\n--   integrations.last_sync_at  \u2192 plg_connections.last_sync_at\n--   UNIQUE (tenant_id)         \u2192 UNIQUE (tenant_id, connector_id, instance_key),\n--                                with instance_key = '' (RankLayer publishes to\n--                                one site per tenant; a second site is a second\n--                                instance_key the day it is asked for)\n--   sync_log.created_at        \u2192 plg_sync_runs.started_at\n--   sync_log.status            \u2192 plg_sync_runs.status\n--   sync_log.fetched/written   \u2192 plg_sync_runs.fetched/written\n--   sync_log.message           \u2192 plg_sync_runs.error on a failed run, and\n--                                plg_sync_runs.stats->>'message' otherwise\n--   sync_log.integration_id    \u2192 plg_sync_runs.connection_id\n--\n-- 004 (which created the pair) and 009 (which dropped its api_key column) are\n-- deleted rather than edited: their ids stay in the ledger of any pool that ran\n-- them, and this migration is what removes what they left behind. Nothing is in\n-- production, so this is a drop, not a data migration.\n--\n-- One thing is not merely moved: 004 granted INSERT on the sync log to\n-- `authenticated`, so any member of the tenant could forge publication history.\n-- plg_sync_runs carries no such grant \u2014 runs are written server-side. The\n-- exposure closes by moving.\n-- ============================================================================\n\nDROP TABLE IF EXISTS public.plg_marketing_ranklayer_sync_log CASCADE;\nDROP TABLE IF EXISTS public.plg_marketing_ranklayer_integrations CASCADE;\n";
-export declare const MIGRATION_011_THE_ANALYTICS_TABLES_JOIN_THE_TEMPLATE = "-- ---------------------------------------------------------------------------\n-- 011_the_analytics_tables_join_the_template.sql \u2014 three tables that carry\n-- tenant_id and were never given row security (#283).\n--\n-- The same shape the plugin review found in plugin-inventory the week it was\n-- written, and the same severity: a cluster is shared \u2014 many businesses in one\n-- database \u2014 so a table with `tenant_id` and no policy is every tenant's rows\n-- readable by every other. `plg_marketing_channels` and\n-- `plg_marketing_campaigns` (005) hold a tenant's channel mix and monthly ad\n-- spend; `plg_marketing_landing_pages` (008) holds their pages and conversion\n-- numbers. None of that is a neighbour's business.\n--\n-- Nothing bespoke: the same platform template every other tenant-scoped table\n-- goes through. ENFORCED rather than shadowed, and that is not a shortcut \u2014\n-- shadow mode exists to measure a NEW predicate against an existing one before\n-- it starts refusing, and here there is no existing one. A rule cannot take a\n-- row away from someone who was never allowed to see it.\n-- ---------------------------------------------------------------------------\n\nDO $$\nDECLARE\n  t record;\nBEGIN\n  IF to_regprocedure('app.scaffold_table(regclass, text, text, boolean, text)') IS NULL THEN\n    RAISE NOTICE 'plugin-marketing 011: app.scaffold_table missing \u2014 skipped';\n    RETURN;\n  END IF;\n\n  FOR t IN SELECT * FROM (VALUES\n      ('plg_marketing_channels',      'marketing.channel'),\n      ('plg_marketing_campaigns',     'marketing.campaign'),\n      ('plg_marketing_landing_pages', 'marketing.landing_page')\n    ) AS v(table_name, resource_type)\n  LOOP\n    IF to_regclass('public.' || t.table_name) IS NULL THEN CONTINUE; END IF;\n    PERFORM app.scaffold_table(('public.' || t.table_name)::regclass, t.resource_type, 'marketing', false, 'enforce');\n    EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO authenticated', t.table_name);\n    EXECUTE format('GRANT ALL ON public.%I TO service_role', t.table_name);\n  END LOOP;\nEND $$;\n\n-- The template is what enables row security; these are the belt to its braces,\n-- so a pool whose scaffold helper is older still gets the table locked rather\n-- than left open. Written out one per line, not looped: a reader \u2014 and the\n-- review gate \u2014 should be able to see which tables are covered without\n-- executing anything.\nALTER TABLE public.plg_marketing_channels      ENABLE ROW LEVEL SECURITY;\nALTER TABLE public.plg_marketing_campaigns     ENABLE ROW LEVEL SECURITY;\nALTER TABLE public.plg_marketing_landing_pages ENABLE ROW LEVEL SECURITY;\n";
+export declare const MIGRATION_000_BASELINE = "-- ============================================================================\n-- plugins/plugin-marketing/src/migrations/000_baseline.sql \u2014 what installing this provisions, as one file.\n--\n-- GENERATED by scripts/emit-unit-baselines.mjs (#338). Do not edit by hand:\n-- change the schema, regenerate, and let scripts/check-chain-equivalence.mjs\n-- prove the result still matches.\n--\n-- This replaced 12 migration files. They are kept, unapplied, in\n-- migrations.archive/ \u2014 a year of decisions is worth reading even when it is no\n-- longer worth replaying.\n--\n-- Object order is fixed rather than dependency-sorted: schemas, types,\n-- sequences, tables, defaults, functions, constraints, views, indexes, foreign\n-- keys, triggers, row security, policies, grants. Dependencies BETWEEN units\n-- are carried by the order packages/db/chain.json declares.\n-- ============================================================================\n\n-- A LANGUAGE sql function binds its body at CREATE time, and 570 functions\n-- sorted by name are not sorted by who calls whom. This is what lets them load\n-- in any order; every body is still compiled on first call, so a genuinely\n-- broken reference surfaces then rather than never. Session-scoped.\nSET check_function_bodies = false;\n\n\n\n-- \u2500\u2500 default privileges: reset \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n-- Cleared BEFORE anything is created, so every object below gets the ACL the\n-- dump describes rather than the image's defaults on top of it. Restored at\n-- the end of this file.\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON SEQUENCES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON FUNCTIONS FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public REVOKE ALL ON TABLES FROM anon, authenticated, service_role, fayz_connector$stmt$;\nEND $dp$;\n\n\n-- \u2500\u2500 table \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE TABLE public.plg_marketing_audiences (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    unit_id uuid,\n    campaign_id uuid NOT NULL,\n    person_id uuid NOT NULL,\n    state text DEFAULT 'entered'::text NOT NULL,\n    entered_at timestamp with time zone DEFAULT now() NOT NULL,\n    queued_at timestamp with time zone,\n    converted_at timestamp with time zone,\n    left_at timestamp with time zone,\n    reason text,\n    queue_id uuid,\n    owner_id uuid,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    updated_at timestamp with time zone DEFAULT now() NOT NULL,\n    CONSTRAINT plg_marketing_audiences_state_check CHECK ((state = ANY (ARRAY['entered'::text, 'queued'::text, 'sent'::text, 'converted'::text, 'left'::text, 'blocked'::text])))\n);\n\nALTER TABLE ONLY public.plg_marketing_audiences FORCE ROW LEVEL SECURITY;\n\nCREATE TABLE public.plg_marketing_campaigns (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    name text NOT NULL,\n    channel_key text NOT NULL,\n    status text DEFAULT 'draft'::text NOT NULL,\n    starts_at timestamp with time zone,\n    ends_at timestamp with time zone,\n    spend numeric DEFAULT 0 NOT NULL,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    updated_at timestamp with time zone DEFAULT now() NOT NULL,\n    unit_id uuid,\n    owner_id uuid,\n    kind text DEFAULT 'ad_spend'::text NOT NULL,\n    key text,\n    template_key text,\n    audience_query jsonb DEFAULT '{}'::jsonb NOT NULL,\n    purpose text DEFAULT 'promotion'::text NOT NULL,\n    schedule text,\n    last_run_at timestamp with time zone,\n    next_run_at timestamp with time zone,\n    metadata jsonb DEFAULT '{}'::jsonb NOT NULL,\n    CONSTRAINT plg_marketing_campaigns_kind_check CHECK ((kind = ANY (ARRAY['ad_spend'::text, 'outbound'::text]))),\n    CONSTRAINT plg_marketing_campaigns_outbound_shape CHECK (((kind <> 'outbound'::text) OR ((template_key IS NOT NULL) AND (key IS NOT NULL)))),\n    CONSTRAINT plg_marketing_campaigns_purpose_check CHECK ((purpose = ANY (ARRAY['promotion'::text, 'survey'::text, 'newsletter'::text, 'transactional'::text]))),\n    CONSTRAINT plg_marketing_campaigns_status_check CHECK ((status = ANY (ARRAY['active'::text, 'paused'::text, 'ended'::text, 'draft'::text])))\n);\n\nALTER TABLE ONLY public.plg_marketing_campaigns FORCE ROW LEVEL SECURITY;\n\nCREATE TABLE public.plg_marketing_channels (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    channel_key text NOT NULL,\n    label text NOT NULL,\n    icon text,\n    kind text DEFAULT 'organic'::text NOT NULL,\n    is_active boolean DEFAULT true NOT NULL,\n    monthly_spend numeric DEFAULT 0 NOT NULL,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    updated_at timestamp with time zone DEFAULT now() NOT NULL,\n    unit_id uuid,\n    owner_id uuid,\n    CONSTRAINT plg_marketing_channels_kind_check CHECK ((kind = ANY (ARRAY['paid'::text, 'organic'::text, 'social'::text, 'referral'::text, 'direct'::text, 'outbound'::text])))\n);\n\nALTER TABLE ONLY public.plg_marketing_channels FORCE ROW LEVEL SECURITY;\n\nCREATE TABLE public.plg_marketing_consents (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    unit_id uuid,\n    person_id uuid NOT NULL,\n    purpose text NOT NULL,\n    granted_at timestamp with time zone,\n    revoked_at timestamp with time zone,\n    source text,\n    evidence jsonb DEFAULT '{}'::jsonb NOT NULL,\n    owner_id uuid,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    updated_at timestamp with time zone DEFAULT now() NOT NULL,\n    CONSTRAINT plg_marketing_consents_purpose_check CHECK ((purpose = ANY (ARRAY['promotion'::text, 'survey'::text, 'newsletter'::text, 'transactional'::text])))\n);\n\nALTER TABLE ONLY public.plg_marketing_consents FORCE ROW LEVEL SECURITY;\n\nCREATE TABLE public.plg_marketing_content_plans (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    account_id uuid NOT NULL,\n    name text NOT NULL,\n    status text DEFAULT 'active'::text NOT NULL,\n    weeks_count integer DEFAULT 8 NOT NULL,\n    start_date date,\n    objective text,\n    tone text,\n    pillars jsonb DEFAULT '[]'::jsonb NOT NULL,\n    formats jsonb DEFAULT '[]'::jsonb NOT NULL,\n    weekly_frequency integer DEFAULT 3 NOT NULL,\n    brief_md text DEFAULT ''::text NOT NULL,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    updated_at timestamp with time zone DEFAULT now() NOT NULL,\n    CONSTRAINT plg_marketing_content_plans_status_check CHECK ((status = ANY (ARRAY['draft'::text, 'active'::text, 'archived'::text])))\n);\n\nCREATE TABLE public.plg_marketing_content_posts (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    plan_id uuid NOT NULL,\n    week_number integer DEFAULT 1 NOT NULL,\n    \"position\" integer DEFAULT 0 NOT NULL,\n    title text NOT NULL,\n    format text DEFAULT 'reel'::text NOT NULL,\n    status text DEFAULT 'idea'::text NOT NULL,\n    scheduled_date date,\n    hook text,\n    cta text,\n    content_md text DEFAULT ''::text NOT NULL,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    updated_at timestamp with time zone DEFAULT now() NOT NULL,\n    platforms text[] DEFAULT '{}'::text[] NOT NULL,\n    checklist jsonb DEFAULT '[]'::jsonb NOT NULL,\n    media_url text,\n    CONSTRAINT plg_marketing_content_posts_format_check CHECK ((format = ANY (ARRAY['reel'::text, 'static'::text, 'carousel'::text, 'story'::text]))),\n    CONSTRAINT plg_marketing_content_posts_status_check CHECK ((status = ANY (ARRAY['idea'::text, 'script'::text, 'recording'::text, 'editing'::text, 'scheduled'::text, 'published'::text])))\n);\n\nCREATE TABLE public.plg_marketing_landing_pages (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    site_id uuid NOT NULL,\n    name text NOT NULL,\n    route text NOT NULL,\n    lead_tags text[] DEFAULT '{}'::text[] NOT NULL,\n    status text DEFAULT 'live'::text NOT NULL,\n    prompt text,\n    is_active boolean DEFAULT true NOT NULL,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    updated_at timestamp with time zone DEFAULT now() NOT NULL,\n    unit_id uuid,\n    owner_id uuid,\n    CONSTRAINT plg_marketing_landing_pages_status_check CHECK ((status = ANY (ARRAY['live'::text, 'planned'::text])))\n);\n\nALTER TABLE ONLY public.plg_marketing_landing_pages FORCE ROW LEVEL SECURITY;\n\nCREATE TABLE public.plg_marketing_social_accounts (\n    id uuid DEFAULT gen_random_uuid() NOT NULL,\n    tenant_id uuid NOT NULL,\n    name text NOT NULL,\n    handle text,\n    is_active boolean DEFAULT true NOT NULL,\n    created_at timestamp with time zone DEFAULT now() NOT NULL,\n    platforms text[] DEFAULT '{instagram}'::text[] NOT NULL\n);\n\n\n-- \u2500\u2500 function \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) RETURNS jsonb\n    LANGUAGE plpgsql SECURITY DEFINER\n    SET search_path TO 'public'\n    AS $$\nDECLARE\n  v_denial jsonb;\n  v_used int;\n  v_name text;\n  v_channel_raw text;\n  v_channel_key text;\n  v_status text;\n  v_starts timestamptz;\n  v_ends timestamptz;\n  v_spend numeric;\n  v_has_channels boolean;\n  v_id uuid;\nBEGIN\n  -- \u2500\u2500 payload \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  v_name := left(trim(p_payload->>'name'), 200);\n  v_channel_raw := trim(p_payload->>'channel_key');\n  v_status := COALESCE(NULLIF(trim(p_payload->>'status'), ''), 'draft');\n  v_spend := COALESCE(NULLIF(p_payload->>'spend', '')::numeric, 0);\n  BEGIN\n    v_starts := NULLIF(p_payload->>'starts_at', '')::timestamptz;\n    v_ends := NULLIF(p_payload->>'ends_at', '')::timestamptz;\n  EXCEPTION WHEN OTHERS THEN\n    RETURN jsonb_build_object('ok', false, 'error', 'invalid payload: ' || SQLERRM);\n  END;\n  IF v_name IS NULL OR v_name = '' OR v_channel_raw IS NULL OR v_channel_raw = '' THEN\n    RETURN jsonb_build_object('ok', false, 'error', 'name and channel_key are required');\n  END IF;\n  IF v_status NOT IN ('active', 'paused', 'ended', 'draft') THEN\n    RETURN jsonb_build_object('ok', false, 'error', 'status must be one of active|paused|ended|draft');\n  END IF;\n\n  -- \u2500\u2500 authorization: role \u2192 plan \u2192 campaigns_active cap \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  SELECT count(*) INTO v_used FROM plg_marketing_campaigns c\n  WHERE c.tenant_id = p_tenant_id AND c.status = 'active';\n  v_denial := agent_guard(p_tenant_id, p_actor_user_id,\n                          'marketing', 'create', 'campaigns_active', v_used,\n                          CASE WHEN v_status = 'active' THEN 1 ELSE 0 END);\n  IF v_denial IS NOT NULL THEN\n    RETURN jsonb_build_object('ok', false, 'denial', v_denial);\n  END IF;\n\n  -- \u2500\u2500 channel resolution (key or label, normalized) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  SELECT EXISTS (SELECT 1 FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id)\n    INTO v_has_channels;\n  IF v_has_channels THEN\n    SELECT ch.channel_key INTO v_channel_key\n    FROM plg_marketing_channels ch\n    WHERE ch.tenant_id = p_tenant_id\n      AND (\n        regexp_replace(lower(ch.channel_key), '[^a-z0-9]', '', 'g')\n          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')\n        OR regexp_replace(lower(ch.label), '[^a-z0-9]', '', 'g')\n          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')\n      )\n    LIMIT 1;\n    IF v_channel_key IS NULL THEN\n      RETURN jsonb_build_object('ok', false, 'error',\n        'unknown channel \"' || v_channel_raw || '\" \u2014 valid channels: ' ||\n        COALESCE((SELECT string_agg(ch.channel_key, ', ' ORDER BY ch.channel_key)\n                  FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id), ''));\n    END IF;\n  ELSE\n    v_channel_key := v_channel_raw;\n  END IF;\n\n  -- \u2500\u2500 write + audit \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  INSERT INTO plg_marketing_campaigns (tenant_id, name, channel_key, status, starts_at, ends_at, spend)\n  VALUES (p_tenant_id, v_name, v_channel_key, v_status, COALESCE(v_starts, now()), v_ends, v_spend)\n  RETURNING id INTO v_id;\n\n  INSERT INTO audit_logs (tenant_id, user_id, action, entity_type, entity_id, metadata)\n  VALUES (p_tenant_id, p_actor_user_id, 'agent.createCampaign', 'marketing_campaign', v_id::text,\n          jsonb_build_object('payload', p_payload));\n\n  RETURN jsonb_build_object(\n    'ok', true,\n    'id', v_id,\n    'record', jsonb_build_object(\n      'id', v_id,\n      'name', v_name,\n      'channel_key', v_channel_key,\n      'status', v_status,\n      'starts_at', COALESCE(v_starts, now()),\n      'spend', v_spend\n    )\n  );\nEND;\n$$;\n\nCREATE FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer DEFAULT 1000) RETURNS jsonb\n    LANGUAGE plpgsql SECURITY DEFINER\n    SET search_path TO ''\n    AS $$\nDECLARE\n  c         public.plg_marketing_campaigns%ROWTYPE;\n  v_person  uuid;\n  v_queue   uuid;\n  v_entered integer := 0;\n  v_queued  integer := 0;\n  v_left    integer := 0;\nBEGIN\n  SELECT * INTO c FROM public.plg_marketing_campaigns WHERE id = p_campaign_id;\n  IF c.id IS NULL THEN\n    RAISE EXCEPTION 'marketing_campaign_run: campaign % not found', p_campaign_id USING ERRCODE = 'P0002';\n  END IF;\n  IF c.kind <> 'outbound' THEN\n    RETURN jsonb_build_object('skipped', 'not an outbound campaign');\n  END IF;\n  IF to_regprocedure('public.notifications_enqueue(uuid, text, uuid, jsonb, text, timestamptz, text, text, uuid, uuid)') IS NULL THEN\n    RAISE EXCEPTION 'marketing_campaign_run: plugin-notifications is not installed' USING ERRCODE = '0A000';\n  END IF;\n\n  -- Whoever no longer qualifies LEAVES, and the moment is recorded. Revoking\n  -- consent has to show up as an act, not as an absence.\n  UPDATE public.plg_marketing_audiences a\n     SET state = 'left', left_at = now(), reason = 'no longer in the audience'\n   WHERE a.campaign_id = c.id\n     AND a.state IN ('entered', 'queued')\n     AND NOT EXISTS (SELECT 1 FROM public.marketing_resolve_audience(c.id) r WHERE r.person_id = a.person_id);\n  GET DIAGNOSTICS v_left = ROW_COUNT;\n\n  FOR v_person IN\n    SELECT r.person_id FROM public.marketing_resolve_audience(c.id) r\n     LIMIT greatest(p_limit, 0)\n  LOOP\n    INSERT INTO public.plg_marketing_audiences (tenant_id, unit_id, campaign_id, person_id, state)\n    VALUES (c.tenant_id, c.unit_id, c.id, v_person, 'entered')\n    ON CONFLICT (campaign_id, person_id) DO NOTHING;\n    IF FOUND THEN v_entered := v_entered + 1; END IF;\n\n    -- Enqueue once per (campaign, person). The dedupe key is what makes a second\n    -- run of the same campaign harmless, exactly as a redelivered event is.\n    IF EXISTS (SELECT 1 FROM public.plg_marketing_audiences a\n                WHERE a.campaign_id = c.id AND a.person_id = v_person AND a.state = 'entered') THEN\n      v_queue := public.notifications_enqueue(\n        p_tenant_id    => c.tenant_id,\n        p_template_key => c.template_key,\n        p_person_id    => v_person,\n        p_payload      => jsonb_build_object('campaign', c.name, 'campaign_key', c.key),\n        p_dedupe_key   => 'campaign:' || c.id::text || ':' || v_person::text,\n        p_unit_id      => c.unit_id);\n\n      UPDATE public.plg_marketing_audiences\n         SET state = 'queued', queued_at = now(), queue_id = v_queue\n       WHERE campaign_id = c.id AND person_id = v_person;\n      v_queued := v_queued + 1;\n    END IF;\n  END LOOP;\n\n  UPDATE public.plg_marketing_campaigns\n     SET last_run_at = now(), next_run_at = now() + interval '1 day'\n   WHERE id = c.id;\n\n  RETURN jsonb_build_object('campaign_id', c.id, 'entered', v_entered, 'queued', v_queued, 'left', v_left);\nEND $$;\n\nCREATE FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) RETURNS boolean\n    LANGUAGE sql STABLE SECURITY DEFINER\n    SET search_path TO ''\n    AS $$\n  SELECT CASE\n    -- The carve-out, named rather than assumed: a message about something the\n    -- person already bought is not marketing. It is still subject to the channel\n    -- opt-out, which the notification engine applies on its own.\n    WHEN p_purpose = 'transactional' THEN true\n    ELSE EXISTS (\n      SELECT 1 FROM public.plg_marketing_consents c\n       WHERE c.tenant_id = p_tenant AND c.person_id = p_person AND c.purpose = p_purpose\n         AND c.granted_at IS NOT NULL AND c.revoked_at IS NULL)\n  END\n$$;\n\nCREATE FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) RETURNS TABLE(person_id uuid)\n    LANGUAGE plpgsql STABLE SECURITY DEFINER\n    SET search_path TO ''\n    AS $_$\nDECLARE\n  c        public.plg_marketing_campaigns%ROWTYPE;\n  v_source text;\n  v_where  text := '';\n  v_clause jsonb;\n  v_kind   char;\nBEGIN\n  SELECT * INTO c FROM public.plg_marketing_campaigns WHERE id = p_campaign_id;\n  IF c.id IS NULL THEN\n    RAISE EXCEPTION 'marketing_resolve_audience: campaign % not found', p_campaign_id USING ERRCODE = 'P0002';\n  END IF;\n\n  v_source := coalesce(c.audience_query ->> 'source_view', 'people');\n  IF v_source !~ '^[a-z_][a-z0-9_]*$' THEN\n    RAISE EXCEPTION 'marketing_resolve_audience: % is not a bare relation name', v_source USING ERRCODE = '22023';\n  END IF;\n  SELECT cl.relkind INTO v_kind FROM pg_class cl JOIN pg_namespace n ON n.oid = cl.relnamespace\n   WHERE n.nspname = 'public' AND cl.relname = v_source;\n  IF v_kind IS NULL THEN\n    RAISE EXCEPTION 'marketing_resolve_audience: public.% does not exist', v_source USING ERRCODE = '42P01';\n  END IF;\n\n  v_where := format('tenant_id = %L', c.tenant_id);\n\n  FOR v_clause IN SELECT * FROM jsonb_array_elements(coalesce(c.audience_query -> 'where', '[]'::jsonb)) LOOP\n    IF NOT EXISTS (SELECT 1 FROM information_schema.columns\n                    WHERE table_schema = 'public' AND table_name = v_source\n                      AND column_name = v_clause ->> 'column') THEN\n      RAISE EXCEPTION 'marketing_resolve_audience: public.% has no column %', v_source, v_clause ->> 'column'\n        USING ERRCODE = '42703';\n    END IF;\n    -- The operator comes from a fixed set and the value is quoted as a literal:\n    -- the audience is declarative on purpose, so a campaign can never become a\n    -- way to run arbitrary SQL.\n    v_where := v_where || format(' AND %I %s %L',\n      v_clause ->> 'column',\n      CASE v_clause ->> 'op' WHEN '>=' THEN '>=' WHEN '<=' THEN '<=' WHEN '>' THEN '>' WHEN '<' THEN '<'\n                             WHEN '<>' THEN '<>' WHEN 'ilike' THEN 'ILIKE' ELSE '=' END,\n      v_clause ->> 'value');\n  END LOOP;\n\n  RETURN QUERY EXECUTE format(\n    'SELECT s.id FROM public.%I s WHERE %s AND public.marketing_has_consent(%L, s.id, %L)',\n    v_source, v_where, c.tenant_id, c.purpose);\nEND $_$;\n\nCREATE FUNCTION public.marketing_run_due(p_limit integer DEFAULT 20) RETURNS jsonb\n    LANGUAGE plpgsql SECURITY DEFINER\n    SET search_path TO ''\n    AS $$\nDECLARE c record; v_n integer := 0; v_out jsonb := '[]'::jsonb;\nBEGIN\n  FOR c IN\n    SELECT id FROM public.plg_marketing_campaigns\n     WHERE kind = 'outbound' AND status = 'active'\n       AND (next_run_at IS NULL OR next_run_at <= now())\n       AND (starts_at IS NULL OR starts_at <= now())\n       AND (ends_at IS NULL OR ends_at >= now())\n     ORDER BY next_run_at NULLS FIRST\n     LIMIT greatest(p_limit, 0)\n     FOR UPDATE SKIP LOCKED\n  LOOP\n    v_out := v_out || public.marketing_campaign_run(c.id);\n    v_n := v_n + 1;\n  END LOOP;\n  RETURN jsonb_build_object('campaigns', v_n, 'results', v_out);\nEND $$;\n\n\n-- \u2500\u2500 constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_campaign_id_person_id_key UNIQUE (campaign_id, person_id);\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_pkey PRIMARY KEY (id);\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_tenant_id_id_key UNIQUE (tenant_id, id);\n\nALTER TABLE ONLY public.plg_marketing_campaigns\n    ADD CONSTRAINT plg_marketing_campaigns_pkey PRIMARY KEY (id);\n\nALTER TABLE ONLY public.plg_marketing_campaigns\n    ADD CONSTRAINT plg_marketing_campaigns_tenant_id_id_key UNIQUE (tenant_id, id);\n\nALTER TABLE ONLY public.plg_marketing_channels\n    ADD CONSTRAINT plg_marketing_channels_pkey PRIMARY KEY (id);\n\nALTER TABLE ONLY public.plg_marketing_channels\n    ADD CONSTRAINT plg_marketing_channels_tenant_id_id_key UNIQUE (tenant_id, id);\n\nALTER TABLE ONLY public.plg_marketing_consents\n    ADD CONSTRAINT plg_marketing_consents_pkey PRIMARY KEY (id);\n\nALTER TABLE ONLY public.plg_marketing_consents\n    ADD CONSTRAINT plg_marketing_consents_tenant_id_id_key UNIQUE (tenant_id, id);\n\nALTER TABLE ONLY public.plg_marketing_consents\n    ADD CONSTRAINT plg_marketing_consents_tenant_id_person_id_purpose_key UNIQUE (tenant_id, person_id, purpose);\n\nALTER TABLE ONLY public.plg_marketing_content_plans\n    ADD CONSTRAINT plg_marketing_content_plans_pkey PRIMARY KEY (id);\n\nALTER TABLE ONLY public.plg_marketing_content_posts\n    ADD CONSTRAINT plg_marketing_content_posts_pkey PRIMARY KEY (id);\n\nALTER TABLE ONLY public.plg_marketing_landing_pages\n    ADD CONSTRAINT plg_marketing_landing_pages_pkey PRIMARY KEY (id);\n\nALTER TABLE ONLY public.plg_marketing_landing_pages\n    ADD CONSTRAINT plg_marketing_landing_pages_tenant_id_id_key UNIQUE (tenant_id, id);\n\nALTER TABLE ONLY public.plg_marketing_social_accounts\n    ADD CONSTRAINT plg_marketing_social_accounts_pkey PRIMARY KEY (id);\n\n\n-- \u2500\u2500 view \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE VIEW public.v_marketing_attribution WITH (security_invoker='true') AS\n SELECT p.tenant_id,\n    'lead'::text AS kind,\n    'crm'::text AS source,\n    COALESCE((p.metadata ->> 'sourceId'::text), (p.metadata ->> 'sourceName'::text), (p.metadata ->> 'origin'::text)) AS channel_raw,\n    p.created_at AS occurred_at,\n    (NULLIF((p.metadata ->> 'value'::text), ''::text))::numeric AS value\n   FROM public.people p\n  WHERE (p.kind = 'lead'::text)\nUNION ALL\n SELECT b.tenant_id,\n    'conversion'::text AS kind,\n    'agenda'::text AS source,\n    COALESCE((b.metadata ->> 'origin'::text), (pc.metadata ->> 'origin'::text), (pc.metadata ->> 'sourceId'::text), (pc.metadata ->> 'sourceName'::text)) AS channel_raw,\n    b.starts_at AS occurred_at,\n    o.total AS value\n   FROM ((public.appointments b\n     LEFT JOIN public.people pc ON ((pc.id = b.party_id)))\n     LEFT JOIN public.orders o ON ((o.id = b.order_id)))\n  WHERE (b.status <> ALL (ARRAY['cancelled'::text, 'no_show'::text]))\nUNION ALL\n SELECT o.tenant_id,\n    'conversion'::text AS kind,\n    'orders'::text AS source,\n    COALESCE((o.metadata ->> 'origin'::text), (pp.metadata ->> 'origin'::text), (pp.metadata ->> 'sourceId'::text)) AS channel_raw,\n    o.created_at AS occurred_at,\n    o.total AS value\n   FROM (public.orders o\n     LEFT JOIN public.people pp ON ((pp.id = o.party_id)))\n  WHERE ((o.kind <> ALL (ARRAY['appointment'::text, 'deal'::text])) AND (o.status <> ALL (ARRAY['cancelled'::text, 'draft'::text])))\nUNION ALL\n SELECT o.tenant_id,\n    'conversion'::text AS kind,\n    'crm'::text AS source,\n    COALESCE((pp.metadata ->> 'sourceId'::text), (pp.metadata ->> 'sourceName'::text), (o.metadata ->> 'origin'::text)) AS channel_raw,\n    o.updated_at AS occurred_at,\n    o.total AS value\n   FROM (public.orders o\n     LEFT JOIN public.people pp ON ((pp.id = o.party_id)))\n  WHERE ((o.kind = 'deal'::text) AND (o.status = 'won'::text));\n\nCREATE VIEW public.v_marketing_campaign_metrics WITH (security_invoker='true') AS\n SELECT c.id AS campaign_id,\n    c.tenant_id,\n    c.unit_id,\n    c.key,\n    c.name,\n    c.status,\n    c.purpose,\n    c.template_key,\n    c.last_run_at,\n    count(a.id) AS audience,\n    count(a.id) FILTER (WHERE (a.state = 'queued'::text)) AS queued,\n    count(a.id) FILTER (WHERE (a.state = 'sent'::text)) AS sent,\n    count(a.id) FILTER (WHERE (a.state = 'converted'::text)) AS converted,\n    count(a.id) FILTER (WHERE (a.state = 'left'::text)) AS left_audience,\n    count(a.id) FILTER (WHERE (a.state = 'blocked'::text)) AS blocked,\n    count(q.id) FILTER (WHERE (q.status = 'sent'::text)) AS delivered,\n    count(q.id) FILTER (WHERE (q.status = 'blocked'::text)) AS refused\n   FROM ((public.plg_marketing_campaigns c\n     LEFT JOIN public.plg_marketing_audiences a ON ((a.campaign_id = c.id)))\n     LEFT JOIN public.plg_notifications_queue q ON ((q.id = a.queue_id)))\n  WHERE (c.kind = 'outbound'::text)\n  GROUP BY c.id, c.tenant_id, c.unit_id, c.key, c.name, c.status, c.purpose, c.template_key, c.last_run_at;\n\nCREATE VIEW public.v_marketing_campaigns WITH (security_invoker='true') AS\n SELECT g.id,\n    g.tenant_id,\n    g.name,\n    g.channel_key,\n    ch.label AS channel_label,\n    g.status,\n    g.starts_at,\n    g.ends_at,\n    g.spend,\n    g.created_at,\n    g.updated_at\n   FROM (public.plg_marketing_campaigns g\n     LEFT JOIN public.plg_marketing_channels ch ON (((ch.tenant_id = g.tenant_id) AND (ch.channel_key = g.channel_key))));\n\nCREATE VIEW public.v_marketing_channels WITH (security_invoker='true') AS\n SELECT id,\n    tenant_id,\n    channel_key,\n    label,\n    icon,\n    kind,\n    is_active,\n    monthly_spend,\n    created_at,\n    updated_at\n   FROM public.plg_marketing_channels c;\n\nCREATE VIEW public.v_marketing_landing_pages WITH (security_invoker='true') AS\n SELECT lp.id,\n    lp.tenant_id,\n    lp.site_id,\n    lp.name,\n    lp.route,\n    lp.lead_tags,\n    lp.status,\n    lp.prompt,\n    lp.is_active,\n    s.name AS site_name,\n    s.preview_url AS site_url,\n    s.app_id,\n    s.fayz_project_id,\n    s.editor_url,\n    lp.created_at,\n    lp.updated_at\n   FROM (public.plg_marketing_landing_pages lp\n     JOIN public.fayz_projects s ON ((s.id = lp.site_id)));\n\nCREATE VIEW public.v_marketing_lead_tag_events WITH (security_invoker='true') AS\n SELECT p.tenant_id,\n    tag.tag,\n    p.id AS person_id,\n    p.created_at AS occurred_at,\n    (NULLIF((p.metadata ->> 'value'::text), ''::text))::numeric AS value\n   FROM (public.people p\n     CROSS JOIN LATERAL unnest(COALESCE(p.tags, '{}'::text[])) tag(tag))\n  WHERE ((p.kind = 'lead'::text) AND COALESCE(p.is_active, true));\n\n\n-- \u2500\u2500 index \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE INDEX idx_plg_marketing_campaigns_channel ON public.plg_marketing_campaigns USING btree (tenant_id, channel_key);\n\nCREATE INDEX idx_plg_marketing_campaigns_tenant ON public.plg_marketing_campaigns USING btree (tenant_id);\n\nCREATE INDEX idx_plg_marketing_channels_tenant ON public.plg_marketing_channels USING btree (tenant_id);\n\nCREATE INDEX idx_plg_marketing_content_plans_account ON public.plg_marketing_content_plans USING btree (account_id);\n\nCREATE INDEX idx_plg_marketing_content_plans_tenant ON public.plg_marketing_content_plans USING btree (tenant_id);\n\nCREATE INDEX idx_plg_marketing_content_posts_plan ON public.plg_marketing_content_posts USING btree (plan_id, week_number, \"position\");\n\nCREATE INDEX idx_plg_marketing_content_posts_status ON public.plg_marketing_content_posts USING btree (tenant_id, status);\n\nCREATE INDEX idx_plg_marketing_content_posts_tenant ON public.plg_marketing_content_posts USING btree (tenant_id);\n\nCREATE INDEX idx_plg_marketing_landing_pages_site ON public.plg_marketing_landing_pages USING btree (site_id);\n\nCREATE INDEX idx_plg_marketing_landing_pages_tenant ON public.plg_marketing_landing_pages USING btree (tenant_id);\n\nCREATE INDEX idx_plg_marketing_social_accounts_tenant ON public.plg_marketing_social_accounts USING btree (tenant_id);\n\nCREATE INDEX plg_marketing_audiences_state_idx ON public.plg_marketing_audiences USING btree (campaign_id, state);\n\nCREATE INDEX plg_marketing_audiences_tenant_owner_idx ON public.plg_marketing_audiences USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);\n\nCREATE INDEX plg_marketing_audiences_tenant_unit_idx ON public.plg_marketing_audiences USING btree (tenant_id, unit_id);\n\nCREATE INDEX plg_marketing_campaigns_due_idx ON public.plg_marketing_campaigns USING btree (next_run_at) WHERE ((kind = 'outbound'::text) AND (status = 'active'::text));\n\nCREATE UNIQUE INDEX plg_marketing_campaigns_key_uq ON public.plg_marketing_campaigns USING btree (tenant_id, key) WHERE (key IS NOT NULL);\n\nCREATE INDEX plg_marketing_campaigns_tenant_owner_idx ON public.plg_marketing_campaigns USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);\n\nCREATE INDEX plg_marketing_campaigns_tenant_unit_idx ON public.plg_marketing_campaigns USING btree (tenant_id, unit_id);\n\nCREATE INDEX plg_marketing_channels_tenant_owner_idx ON public.plg_marketing_channels USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);\n\nCREATE INDEX plg_marketing_channels_tenant_unit_idx ON public.plg_marketing_channels USING btree (tenant_id, unit_id);\n\nCREATE INDEX plg_marketing_consents_person_idx ON public.plg_marketing_consents USING btree (tenant_id, person_id);\n\nCREATE INDEX plg_marketing_consents_tenant_owner_idx ON public.plg_marketing_consents USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);\n\nCREATE INDEX plg_marketing_consents_tenant_unit_idx ON public.plg_marketing_consents USING btree (tenant_id, unit_id);\n\nCREATE INDEX plg_marketing_landing_pages_tenant_owner_idx ON public.plg_marketing_landing_pages USING btree (tenant_id, owner_id) WHERE (owner_id IS NOT NULL);\n\nCREATE INDEX plg_marketing_landing_pages_tenant_unit_idx ON public.plg_marketing_landing_pages USING btree (tenant_id, unit_id);\n\nCREATE UNIQUE INDEX u_plg_marketing_channels_tenant_key ON public.plg_marketing_channels USING btree (tenant_id, channel_key);\n\nCREATE UNIQUE INDEX u_plg_marketing_landing_pages_site_route ON public.plg_marketing_landing_pages USING btree (site_id, route);\n\n\n-- \u2500\u2500 fk constraint \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_campaign_id_fkey FOREIGN KEY (campaign_id) REFERENCES public.plg_marketing_campaigns(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_person_id_fkey FOREIGN KEY (person_id) REFERENCES public.people(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_audiences\n    ADD CONSTRAINT plg_marketing_audiences_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_campaigns\n    ADD CONSTRAINT plg_marketing_campaigns_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_campaigns\n    ADD CONSTRAINT plg_marketing_campaigns_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_campaigns\n    ADD CONSTRAINT plg_marketing_campaigns_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_channels\n    ADD CONSTRAINT plg_marketing_channels_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_channels\n    ADD CONSTRAINT plg_marketing_channels_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_channels\n    ADD CONSTRAINT plg_marketing_channels_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_consents\n    ADD CONSTRAINT plg_marketing_consents_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_consents\n    ADD CONSTRAINT plg_marketing_consents_person_id_fkey FOREIGN KEY (person_id) REFERENCES public.people(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_consents\n    ADD CONSTRAINT plg_marketing_consents_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_consents\n    ADD CONSTRAINT plg_marketing_consents_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_content_plans\n    ADD CONSTRAINT plg_marketing_content_plans_account_id_fkey FOREIGN KEY (account_id) REFERENCES public.plg_marketing_social_accounts(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_content_plans\n    ADD CONSTRAINT plg_marketing_content_plans_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_content_posts\n    ADD CONSTRAINT plg_marketing_content_posts_plan_id_fkey FOREIGN KEY (plan_id) REFERENCES public.plg_marketing_content_plans(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_content_posts\n    ADD CONSTRAINT plg_marketing_content_posts_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_landing_pages\n    ADD CONSTRAINT plg_marketing_landing_pages_owner_fk FOREIGN KEY (tenant_id, owner_id) REFERENCES app.memberships(tenant_id, user_id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_landing_pages\n    ADD CONSTRAINT plg_marketing_landing_pages_site_fk FOREIGN KEY (site_id) REFERENCES public.published_sites(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_landing_pages\n    ADD CONSTRAINT plg_marketing_landing_pages_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\nALTER TABLE ONLY public.plg_marketing_landing_pages\n    ADD CONSTRAINT plg_marketing_landing_pages_unit_fk FOREIGN KEY (tenant_id, unit_id) REFERENCES app.units(tenant_id, id) ON DELETE SET NULL;\n\nALTER TABLE ONLY public.plg_marketing_social_accounts\n    ADD CONSTRAINT plg_marketing_social_accounts_tenant_id_fkey FOREIGN KEY (tenant_id) REFERENCES public.tenants(id) ON DELETE CASCADE;\n\n\n-- \u2500\u2500 trigger \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE TRIGGER plg_marketing_audiences_updated_at BEFORE UPDATE ON public.plg_marketing_audiences FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();\n\nCREATE TRIGGER plg_marketing_campaigns_updated_at BEFORE UPDATE ON public.plg_marketing_campaigns FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();\n\nCREATE TRIGGER plg_marketing_channels_updated_at BEFORE UPDATE ON public.plg_marketing_channels FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();\n\nCREATE TRIGGER plg_marketing_consents_updated_at BEFORE UPDATE ON public.plg_marketing_consents FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();\n\nCREATE TRIGGER plg_marketing_landing_pages_updated_at BEFORE UPDATE ON public.plg_marketing_landing_pages FOR EACH ROW EXECUTE FUNCTION public.handle_updated_at();\n\n\n-- \u2500\u2500 row security \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nALTER TABLE public.plg_marketing_audiences ENABLE ROW LEVEL SECURITY;\n\nALTER TABLE public.plg_marketing_campaigns ENABLE ROW LEVEL SECURITY;\n\nALTER TABLE public.plg_marketing_channels ENABLE ROW LEVEL SECURITY;\n\nALTER TABLE public.plg_marketing_consents ENABLE ROW LEVEL SECURITY;\n\nALTER TABLE public.plg_marketing_content_plans ENABLE ROW LEVEL SECURITY;\n\nALTER TABLE public.plg_marketing_content_posts ENABLE ROW LEVEL SECURITY;\n\nALTER TABLE public.plg_marketing_landing_pages ENABLE ROW LEVEL SECURITY;\n\nALTER TABLE public.plg_marketing_social_accounts ENABLE ROW LEVEL SECURITY;\n\n\n-- \u2500\u2500 policy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE POLICY plg_marketing_audiences_authz_delete ON public.plg_marketing_audiences FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.audience'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.audience'::text, plg_marketing_audiences.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_audiences.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_audiences.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_audiences_authz_insert ON public.plg_marketing_audiences FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_audiences.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_audiences_authz_select ON public.plg_marketing_audiences FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.audience'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.audience'::text, plg_marketing_audiences.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_audiences.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_audiences.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_audiences_authz_update ON public.plg_marketing_audiences FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.audience'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.audience'::text, plg_marketing_audiences.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_audiences.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_audiences.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_audiences.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_audiences.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_campaigns_authz_delete ON public.plg_marketing_campaigns FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.campaign'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.campaign'::text, plg_marketing_campaigns.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_campaigns.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_campaigns.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_campaigns_authz_insert ON public.plg_marketing_campaigns FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_campaigns.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_campaigns_authz_select ON public.plg_marketing_campaigns FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.campaign'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.campaign'::text, plg_marketing_campaigns.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_campaigns.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_campaigns.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_campaigns_authz_update ON public.plg_marketing_campaigns FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.campaign'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.campaign'::text, plg_marketing_campaigns.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_campaigns.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_campaigns.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_campaigns.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_campaigns.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_channels_authz_delete ON public.plg_marketing_channels FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.channel'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.channel'::text, plg_marketing_channels.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_channels.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_channels.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_channels_authz_insert ON public.plg_marketing_channels FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_channels.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_channels_authz_select ON public.plg_marketing_channels FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.channel'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.channel'::text, plg_marketing_channels.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_channels.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_channels.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_channels_authz_update ON public.plg_marketing_channels FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.channel'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.channel'::text, plg_marketing_channels.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_channels.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_channels.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_channels.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_channels.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_consents_authz_delete ON public.plg_marketing_consents FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.consent'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.consent'::text, plg_marketing_consents.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_consents.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_consents.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_consents_authz_insert ON public.plg_marketing_consents FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_consents.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_consents_authz_select ON public.plg_marketing_consents FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.consent'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.consent'::text, plg_marketing_consents.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_consents.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_consents.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_consents_authz_update ON public.plg_marketing_consents FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.consent'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.consent'::text, plg_marketing_consents.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_consents.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_consents.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_consents.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_consents.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_content_plans_delete ON public.plg_marketing_content_plans FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_content_plans_insert ON public.plg_marketing_content_plans FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_content_plans_select ON public.plg_marketing_content_plans FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_content_plans_update ON public.plg_marketing_content_plans FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_content_posts_delete ON public.plg_marketing_content_posts FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_content_posts_insert ON public.plg_marketing_content_posts FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_content_posts_select ON public.plg_marketing_content_posts FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_content_posts_update ON public.plg_marketing_content_posts FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_landing_pages_authz_delete ON public.plg_marketing_landing_pages FOR DELETE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.landing_page'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.landing_page'::text, plg_marketing_landing_pages.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_landing_pages.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.delete'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_landing_pages_authz_insert ON public.plg_marketing_landing_pages FOR INSERT TO authenticated WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.create'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_landing_pages_authz_select ON public.plg_marketing_landing_pages FOR SELECT TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.landing_page'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.landing_page'::text, plg_marketing_landing_pages.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_landing_pages.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.read'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_landing_pages_authz_update ON public.plg_marketing_landing_pages FOR UPDATE TO authenticated USING (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ((NOT ( SELECT app.owner_scoped('marketing.landing_page'::text) AS owner_scoped)) OR (owner_id IS NULL) OR (owner_id = ( SELECT auth.uid() AS uid)) OR ( SELECT app.has_grant('marketing.landing_page'::text, plg_marketing_landing_pages.id, ARRAY['shared_with'::text]) AS has_grant) OR ( SELECT app.has_permission('marketing.read_all'::text, plg_marketing_landing_pages.unit_id) AS has_permission)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_landing_pages.unit_id) AS has_permission))) WITH CHECK (((tenant_id = ( SELECT app.current_tenant_id() AS current_tenant_id)) AND ((unit_id IS NULL) OR ( SELECT app.has_unit(plg_marketing_landing_pages.unit_id) AS has_unit)) AND ( SELECT app.has_permission('marketing.edit'::text, plg_marketing_landing_pages.unit_id) AS has_permission)));\n\nCREATE POLICY plg_marketing_social_accounts_delete ON public.plg_marketing_social_accounts FOR DELETE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_social_accounts_insert ON public.plg_marketing_social_accounts FOR INSERT TO authenticated WITH CHECK ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_social_accounts_select ON public.plg_marketing_social_accounts FOR SELECT TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\nCREATE POLICY plg_marketing_social_accounts_update ON public.plg_marketing_social_accounts FOR UPDATE TO authenticated USING ((tenant_id IN ( SELECT public.user_tenant_ids() AS user_tenant_ids)));\n\n\n-- \u2500\u2500 acl \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nREVOKE ALL ON FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) FROM PUBLIC;\nGRANT ALL ON FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) TO authenticated;\nGRANT ALL ON FUNCTION public.agent_marketing_create_campaign(p_tenant_id uuid, p_actor_user_id uuid, p_payload jsonb) TO service_role;\n\nREVOKE ALL ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) FROM PUBLIC;\nGRANT ALL ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) TO authenticated;\nGRANT ALL ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) TO service_role;\n\nREVOKE ALL ON FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) FROM PUBLIC;\nGRANT ALL ON FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) TO authenticated;\nGRANT ALL ON FUNCTION public.marketing_has_consent(p_tenant uuid, p_person uuid, p_purpose text) TO service_role;\n\nREVOKE ALL ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) FROM PUBLIC;\nGRANT ALL ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) TO authenticated;\nGRANT ALL ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) TO service_role;\n\nREVOKE ALL ON FUNCTION public.marketing_run_due(p_limit integer) FROM PUBLIC;\nGRANT ALL ON FUNCTION public.marketing_run_due(p_limit integer) TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_audiences TO anon;\nGRANT ALL ON TABLE public.plg_marketing_audiences TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_audiences TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_campaigns TO anon;\nGRANT ALL ON TABLE public.plg_marketing_campaigns TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_campaigns TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_channels TO anon;\nGRANT ALL ON TABLE public.plg_marketing_channels TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_channels TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_consents TO anon;\nGRANT ALL ON TABLE public.plg_marketing_consents TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_consents TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_content_plans TO anon;\nGRANT ALL ON TABLE public.plg_marketing_content_plans TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_content_plans TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_content_posts TO anon;\nGRANT ALL ON TABLE public.plg_marketing_content_posts TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_content_posts TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_landing_pages TO anon;\nGRANT ALL ON TABLE public.plg_marketing_landing_pages TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_landing_pages TO service_role;\n\nGRANT MAINTAIN ON TABLE public.plg_marketing_social_accounts TO anon;\nGRANT ALL ON TABLE public.plg_marketing_social_accounts TO authenticated;\nGRANT ALL ON TABLE public.plg_marketing_social_accounts TO service_role;\n\nGRANT MAINTAIN ON TABLE public.v_marketing_attribution TO anon;\nGRANT ALL ON TABLE public.v_marketing_attribution TO authenticated;\nGRANT ALL ON TABLE public.v_marketing_attribution TO service_role;\n\nGRANT MAINTAIN ON TABLE public.v_marketing_campaign_metrics TO anon;\nGRANT ALL ON TABLE public.v_marketing_campaign_metrics TO authenticated;\nGRANT ALL ON TABLE public.v_marketing_campaign_metrics TO service_role;\n\nGRANT MAINTAIN ON TABLE public.v_marketing_campaigns TO anon;\nGRANT ALL ON TABLE public.v_marketing_campaigns TO authenticated;\nGRANT ALL ON TABLE public.v_marketing_campaigns TO service_role;\n\nGRANT MAINTAIN ON TABLE public.v_marketing_channels TO anon;\nGRANT ALL ON TABLE public.v_marketing_channels TO authenticated;\nGRANT ALL ON TABLE public.v_marketing_channels TO service_role;\n\nGRANT MAINTAIN ON TABLE public.v_marketing_landing_pages TO anon;\nGRANT ALL ON TABLE public.v_marketing_landing_pages TO authenticated;\nGRANT ALL ON TABLE public.v_marketing_landing_pages TO service_role;\n\nGRANT MAINTAIN ON TABLE public.v_marketing_lead_tag_events TO anon;\nGRANT ALL ON TABLE public.v_marketing_lead_tag_events TO authenticated;\nGRANT ALL ON TABLE public.v_marketing_lead_tag_events TO service_role;\n\n\n-- \u2500\u2500 comment \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCOMMENT ON FUNCTION public.marketing_campaign_run(p_campaign_id uuid, p_limit integer) IS 'Run a campaign (PRD 09): re-resolve the audience, drop whoever no longer qualifies, and ENQUEUE the rest through the notification engine. It never sends \u2014 that is what makes a promotion and a dunning reminder the same machine.';\n\nCOMMENT ON FUNCTION public.marketing_resolve_audience(p_campaign_id uuid) IS 'Who is in a campaign''s audience right now (PRD 09). Declarative filters over a read model, with consent for the campaign''s purpose applied AT THE SOURCE \u2014 someone who revoked never appears here, rather than appearing and being dropped later.';\n\nCOMMENT ON TABLE public.plg_marketing_audiences IS 'Who a campaign reached and what happened (PRD 09). The audience is a QUERY re-evaluated on every run, not a frozen list: whoever qualifies later enters later, and whoever revokes consent leaves on the next run. This table is the record of that, not its definition.';\n\nCOMMENT ON COLUMN public.plg_marketing_campaigns.kind IS 'ad_spend (the imported numbers of an external campaign) or outbound (a campaign this system fires). Same noun, two animals \u2014 a species rather than a second table called almost the same thing.';\n\nCOMMENT ON COLUMN public.plg_marketing_campaigns.audience_query IS 'A DECLARATIVE audience: {\"source_view\": \"...\", \"where\": [{\"column\",\"op\",\"value\"}]}. Not SQL \u2014 a stored query string would make every campaign an injection surface, and a frozen list would answer yesterday''s question.';\n\nCOMMENT ON TABLE public.plg_marketing_consents IS 'Consent per PURPOSE (PRD 09), separate from the channel opt-out: a customer may accept a payment reminder and refuse a promotion. Revoking is a timestamp, never a delete \u2014 the record that consent once existed is itself the evidence LGPD asks for.';\n\nCOMMENT ON VIEW public.v_marketing_campaign_metrics IS 'Reach, delivery and conversion per campaign (PRD 09), computed from the audience and the notification queue. The campaign keeps no counter of its own \u2014 two tallies of the same fact is how a dashboard starts disagreeing with the queue.';\n\n\n-- \u2500\u2500 default privileges: restore \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n-- Put back, so the NEXT thing installed inherits what the chain had.\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO postgres$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO anon$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO authenticated$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON SEQUENCES TO service_role$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO postgres$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO anon$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO authenticated$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON FUNCTIONS TO service_role$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT MAINTAIN ON TABLES TO anon$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE postgres IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO postgres$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO anon$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO authenticated$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$ALTER DEFAULT PRIVILEGES FOR ROLE supabase_admin IN SCHEMA public GRANT ALL ON TABLES TO service_role$stmt$;\nEND $dp$;\n\nDO $dp$ BEGIN\n  EXECUTE $stmt$--\n-- PostgreSQL database dump complete\n--$stmt$;\nEXCEPTION WHEN insufficient_privilege OR undefined_object THEN\n  RAISE NOTICE 'baseline: not ours to set \u2014 %', $stmt$--\n-- PostgreSQL database dump complete\n--$stmt$;\nEND $dp$;\n";
+export declare const MIGRATION_001_THE_LANDING_PAGE_NAMES_THE_SITE = "-- ============================================================================\n-- 001_the_landing_page_names_the_site \u2014 the last caller of fayz_projects, and\n-- then the name itself (#352).\n--\n-- 137 renamed the vendor out of the spine: `fayz_projects` became\n-- `published_sites`, because a table should say what it holds and not who\n-- built it. 141 left the old name answering as a view until callers moved.\n-- This view is the last one that did not, and it is the reason the name could\n-- not be dropped by the spine: a CREATE VIEW is a HARD dependency, so the\n-- spine \u2014 which runs first \u2014 would be dropping a name this file then joins.\n--\n-- So the drop lives here, with the last reader. The view body is\n-- 000_baseline's with one name changed.\n-- ============================================================================\n\n-- DROP, not CREATE OR REPLACE: this renames a COLUMN (fayz_project_id ->\n-- provider_site_id) and Postgres refuses that in a replace, which is the same\n-- wall 0084 and 0086 hit. Dropping takes the grants with it, so they are\n-- restored below exactly as 000_baseline set them.\nDROP VIEW IF EXISTS public.v_marketing_landing_pages;\n\nCREATE VIEW public.v_marketing_landing_pages WITH (security_invoker='true') AS\n SELECT lp.id,\n    lp.tenant_id,\n    lp.site_id,\n    lp.name,\n    lp.route,\n    lp.lead_tags,\n    lp.status,\n    lp.prompt,\n    lp.is_active,\n    s.name AS site_name,\n    s.preview_url AS site_url,\n    s.app_id,\n    s.provider_site_id,\n    s.editor_url,\n    lp.created_at,\n    lp.updated_at\n   FROM (public.plg_marketing_landing_pages lp\n     JOIN public.published_sites s ON ((s.id = lp.site_id)));\nGRANT MAINTAIN ON TABLE public.v_marketing_landing_pages TO anon;\nGRANT ALL ON TABLE public.v_marketing_landing_pages TO authenticated;\nGRANT ALL ON TABLE public.v_marketing_landing_pages TO service_role;\n\nDROP VIEW IF EXISTS public.fayz_projects;\n";
 export declare const MIGRATIONS: Array<{
     id: string;
     sql: string;

package/dist/migrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,wBAAwB,i6BAepC,CAAA;AAED,eAAO,MAAM,6BAA6B,ivNA8FzC,CAAA;AAED,eAAO,MAAM,4BAA4B,inCAyBxC,CAAA;AAED,eAAO,MAAM,2BAA2B,8/CAyBvC,CAAA;AAED,eAAO,MAAM,4BAA4B,k4GA4DxC,CAAA;AAED,eAAO,MAAM,6BAA6B,6rGAoEzC,CAAA;AAED,eAAO,MAAM,wBAAwB,qgMAuHpC,CAAA;AAED,eAAO,MAAM,2BAA2B,yuOAyIvC,CAAA;AAED,eAAO,MAAM,wCAAwC,wxEAqCpD,CAAA;AAED,eAAO,MAAM,oDAAoD,4oFAiDhE,CAAA;AAED,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAWzD,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,sBAAsB,wo3EAwmClC,CAAA;AAED,eAAO,MAAM,6CAA6C,w6DA6CzD,CAAA;AAED,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAGzD,CAAA"}

package/package.json

@@ -4,7 +4,7 @@
     "status": "beta",
     "dependencies": []
   },
-  "version": "0.11.2",
+  "version": "0.12.0",
   "description": "Fayz SDK — marketing campaigns & broadcasts plugin",
   "type": "module",
   "sideEffects": false,
@@ -33,10 +33,10 @@
   },
   "dependencies": {
     "@tanstack/react-table": "^8.20.0",
-    "@fayz-ai/core": "^0.17.0",
-    "@fayz-ai/admin": "^0.17.0",
-    "@fayz-ai/ui": "^0.17.0",
-    "@fayz-ai/db": "^0.13.0"
+    "@fayz-ai/core": "^0.19.0",
+    "@fayz-ai/admin": "^0.19.0",
+    "@fayz-ai/ui": "^0.19.0",
+    "@fayz-ai/db": "^0.14.0"
   },
   "devDependencies": {
     "@types/react": "^18.3.0",