@fayz-ai/plugin-marketing 0.8.1 → 0.8.2

package/src/migrations/index.ts

@@ -1,4 +1,4 @@
-// AUTO-GENERATED from 000_plg_rename.sql, 001_content_planner.sql, 002_multi_platform.sql, 003_recording_ops.sql, 004_ranklayer.sql — regenerate with scripts/embed-migrations.mjs
+// AUTO-GENERATED from 000_plg_rename.sql, 001_content_planner.sql, 002_multi_platform.sql, 003_recording_ops.sql, 004_ranklayer.sql, 005_analytics_base.sql, 006_analytics_views.sql, 007_agent_rpcs.sql — regenerate with scripts/embed-migrations.mjs
 // SQL files are the source of truth; this inline copy lets the manifest declare
 // migrations as data. Do not edit by hand — run the embed script instead.
 
@@ -221,10 +221,266 @@ CREATE POLICY plg_marketing_ranklayer_sync_log_insert ON public.plg_marketing_ra
 GRANT SELECT, INSERT ON public.plg_marketing_ranklayer_sync_log TO authenticated;
 `
 
+export const MIGRATION_005_ANALYTICS_BASE = `-- Marketing Plugin: analytics base tables (channels + campaigns).
+-- Prefix: plg_marketing_
+-- Channels are tenant-owned rows lazily seeded from the app's domain preset
+-- (channel_key = preset/config id). Campaign performance is DERIVED at read
+-- time from v_marketing_attribution (006); only spend is stored.
+-- Canonical RLS form: tenant_id IN (SELECT public.user_tenant_ids()).
+
+CREATE TABLE IF NOT EXISTS public.plg_marketing_channels (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  channel_key text NOT NULL,
+  label text NOT NULL,
+  icon text,
+  kind text NOT NULL DEFAULT 'organic'
+    CHECK (kind IN ('paid', 'organic', 'social', 'referral', 'direct', 'outbound')),
+  is_active boolean NOT NULL DEFAULT true,
+  monthly_spend numeric NOT NULL DEFAULT 0,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS idx_plg_marketing_channels_tenant ON public.plg_marketing_channels(tenant_id);
+CREATE UNIQUE INDEX IF NOT EXISTS u_plg_marketing_channels_tenant_key ON public.plg_marketing_channels(tenant_id, channel_key);
+
+CREATE TABLE IF NOT EXISTS public.plg_marketing_campaigns (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  name text NOT NULL,
+  channel_key text NOT NULL,
+  status text NOT NULL DEFAULT 'draft'
+    CHECK (status IN ('active', 'paused', 'ended', 'draft')),
+  starts_at timestamptz,
+  ends_at timestamptz,
+  spend numeric NOT NULL DEFAULT 0,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_tenant ON public.plg_marketing_campaigns(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_channel ON public.plg_marketing_campaigns(tenant_id, channel_key);
+
+DO $$
+DECLARE t text;
+BEGIN
+  FOR t IN SELECT unnest(ARRAY['plg_marketing_channels','plg_marketing_campaigns'])
+  LOOP
+    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', t);
+    EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO authenticated', t);
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_select') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_select', t);
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_insert') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_insert', t);
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_update') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_update', t);
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_delete') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_delete', t);
+    END IF;
+  END LOOP;
+END $$;
+`
+
+export const MIGRATION_006_ANALYTICS_VIEWS = `-- Marketing Plugin: analytics read views.
+-- v_marketing_channels / v_marketing_campaigns — bridge views for the surface
+-- and the agent's data primitives.
+-- v_marketing_attribution — GENERIC, spine-only attribution event stream
+-- (people/appointments/orders metadata). \`channel_raw\` is the unnormalized
+-- origin string; the provider matches it against the app's channel set
+-- (id or label, case/punctuation-insensitive).
+-- Apps whose origin lives in an app-local extension table (e.g. beauty's
+-- clients.origin) may CREATE OR REPLACE this view in their own incubator
+-- migration, KEEPING the column contract:
+--   (tenant_id uuid, kind text, source text, channel_raw text,
+--    occurred_at timestamptz, value numeric)
+
+CREATE OR REPLACE VIEW public.v_marketing_channels WITH (security_invoker=true) AS
+SELECT c.id, c.tenant_id, c.channel_key, c.label, c.icon, c.kind,
+       c.is_active, c.monthly_spend, c.created_at, c.updated_at
+FROM public.plg_marketing_channels c;
+GRANT SELECT ON public.v_marketing_channels TO authenticated;
+
+CREATE OR REPLACE VIEW public.v_marketing_campaigns WITH (security_invoker=true) AS
+SELECT g.id, g.tenant_id, g.name, g.channel_key, ch.label AS channel_label,
+       g.status, g.starts_at, g.ends_at, g.spend, g.created_at, g.updated_at
+FROM public.plg_marketing_campaigns g
+LEFT JOIN public.plg_marketing_channels ch
+  ON ch.tenant_id = g.tenant_id AND ch.channel_key = g.channel_key;
+GRANT SELECT ON public.v_marketing_campaigns TO authenticated;
+
+CREATE OR REPLACE VIEW public.v_marketing_attribution WITH (security_invoker=true) AS
+-- lead events (CRM leads; sourceId aligns with lead-sources/channel ids)
+SELECT p.tenant_id,
+       'lead'::text AS kind,
+       'crm'::text AS source,
+       COALESCE(p.metadata->>'sourceId', p.metadata->>'sourceName', p.metadata->>'origin') AS channel_raw,
+       p.created_at AS occurred_at,
+       NULLIF(p.metadata->>'value', '')::numeric AS value
+FROM public.people p
+WHERE p.kind = 'lead'
+UNION ALL
+-- booking conversions (agenda verticals)
+SELECT b.tenant_id, 'conversion', 'agenda',
+       COALESCE(b.metadata->>'origin', pc.metadata->>'origin', pc.metadata->>'sourceId', pc.metadata->>'sourceName'),
+       b.starts_at,
+       o.total
+FROM public.appointments b
+LEFT JOIN public.people pc ON pc.id = b.party_id
+LEFT JOIN public.orders o ON o.id = b.order_id
+WHERE b.status NOT IN ('cancelled', 'no_show')
+UNION ALL
+-- order conversions (commerce verticals)
+SELECT o.tenant_id, 'conversion', 'orders',
+       COALESCE(o.metadata->>'origin', pp.metadata->>'origin', pp.metadata->>'sourceId'),
+       o.created_at,
+       o.total
+FROM public.orders o
+LEFT JOIN public.people pp ON pp.id = o.party_id
+WHERE o.kind NOT IN ('appointment', 'deal')
+  AND o.status NOT IN ('cancelled', 'draft')
+UNION ALL
+-- won-deal conversions (CRM verticals)
+SELECT o.tenant_id, 'conversion', 'crm',
+       COALESCE(pp.metadata->>'sourceId', pp.metadata->>'sourceName', o.metadata->>'origin'),
+       o.updated_at,
+       o.total
+FROM public.orders o
+LEFT JOIN public.people pp ON pp.id = o.party_id
+WHERE o.kind = 'deal' AND o.status = 'won';
+
+GRANT SELECT ON public.v_marketing_attribution TO authenticated;
+`
+
+export const MIGRATION_007_AGENT_RPCS = `-- ============================================================================
+-- plugin-marketing 007: server-plane agent write RPC.
+--
+-- public.agent_marketing_create_campaign — guarded campaign create for the
+-- assistant. Mirrors agent_agenda_create_appointment (agenda 005):
+--   * actor-authorized: public.agent_guard (spine 015) runs role→plan→limit
+--     BEFORE anything — denial comes back as structured jsonb;
+--   * channel is validated against the tenant's plg_marketing_channels rows
+--     (key or label, case/punctuation-insensitive); when the tenant has no
+--     channel rows yet (surface not opened → lazy seed not run) the raw key is
+--     accepted as-is;
+--   * audited: audit_logs row with the acting user.
+--
+-- Contract (all agent_* RPCs): (p_tenant_id, p_actor_user_id, p_payload jsonb)
+-- → jsonb {ok:true, id, record:{...}} | {ok:false, denial:{...}} | {ok:false,
+-- error text}. GRANT authenticated+service_role — NEVER anon.
+-- ============================================================================
+
+CREATE OR REPLACE FUNCTION public.agent_marketing_create_campaign(
+  p_tenant_id uuid,
+  p_actor_user_id uuid,
+  p_payload jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_denial jsonb;
+  v_used int;
+  v_name text;
+  v_channel_raw text;
+  v_channel_key text;
+  v_status text;
+  v_starts timestamptz;
+  v_ends timestamptz;
+  v_spend numeric;
+  v_has_channels boolean;
+  v_id uuid;
+BEGIN
+  -- ── payload ──────────────────────────────────────────────────────────────
+  v_name := left(trim(p_payload->>'name'), 200);
+  v_channel_raw := trim(p_payload->>'channel_key');
+  v_status := COALESCE(NULLIF(trim(p_payload->>'status'), ''), 'draft');
+  v_spend := COALESCE(NULLIF(p_payload->>'spend', '')::numeric, 0);
+  BEGIN
+    v_starts := NULLIF(p_payload->>'starts_at', '')::timestamptz;
+    v_ends := NULLIF(p_payload->>'ends_at', '')::timestamptz;
+  EXCEPTION WHEN OTHERS THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'invalid payload: ' || SQLERRM);
+  END;
+  IF v_name IS NULL OR v_name = '' OR v_channel_raw IS NULL OR v_channel_raw = '' THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'name and channel_key are required');
+  END IF;
+  IF v_status NOT IN ('active', 'paused', 'ended', 'draft') THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'status must be one of active|paused|ended|draft');
+  END IF;
+
+  -- ── authorization: role → plan → campaigns_active cap ────────────────────
+  SELECT count(*) INTO v_used FROM plg_marketing_campaigns c
+  WHERE c.tenant_id = p_tenant_id AND c.status = 'active';
+  v_denial := agent_guard(p_tenant_id, p_actor_user_id,
+                          'marketing', 'create', 'campaigns_active', v_used,
+                          CASE WHEN v_status = 'active' THEN 1 ELSE 0 END);
+  IF v_denial IS NOT NULL THEN
+    RETURN jsonb_build_object('ok', false, 'denial', v_denial);
+  END IF;
+
+  -- ── channel resolution (key or label, normalized) ────────────────────────
+  SELECT EXISTS (SELECT 1 FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id)
+    INTO v_has_channels;
+  IF v_has_channels THEN
+    SELECT ch.channel_key INTO v_channel_key
+    FROM plg_marketing_channels ch
+    WHERE ch.tenant_id = p_tenant_id
+      AND (
+        regexp_replace(lower(ch.channel_key), '[^a-z0-9]', '', 'g')
+          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')
+        OR regexp_replace(lower(ch.label), '[^a-z0-9]', '', 'g')
+          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')
+      )
+    LIMIT 1;
+    IF v_channel_key IS NULL THEN
+      RETURN jsonb_build_object('ok', false, 'error',
+        'unknown channel "' || v_channel_raw || '" — valid channels: ' ||
+        COALESCE((SELECT string_agg(ch.channel_key, ', ' ORDER BY ch.channel_key)
+                  FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id), ''));
+    END IF;
+  ELSE
+    v_channel_key := v_channel_raw;
+  END IF;
+
+  -- ── write + audit ────────────────────────────────────────────────────────
+  INSERT INTO plg_marketing_campaigns (tenant_id, name, channel_key, status, starts_at, ends_at, spend)
+  VALUES (p_tenant_id, v_name, v_channel_key, v_status, COALESCE(v_starts, now()), v_ends, v_spend)
+  RETURNING id INTO v_id;
+
+  INSERT INTO audit_logs (tenant_id, user_id, action, entity_type, entity_id, metadata)
+  VALUES (p_tenant_id, p_actor_user_id, 'agent.createCampaign', 'marketing_campaign', v_id::text,
+          jsonb_build_object('payload', p_payload));
+
+  RETURN jsonb_build_object(
+    'ok', true,
+    'id', v_id,
+    'record', jsonb_build_object(
+      'id', v_id,
+      'name', v_name,
+      'channel_key', v_channel_key,
+      'status', v_status,
+      'starts_at', COALESCE(v_starts, now()),
+      'spend', v_spend
+    )
+  );
+END;
+$$;
+
+REVOKE ALL ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM public;
+REVOKE EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM anon;
+GRANT EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb)
+  TO authenticated, service_role;
+`
+
 export const MIGRATIONS: Array<{ id: string; sql: string }> = [
   { id: "000_plg_rename", sql: MIGRATION_000_PLG_RENAME },
   { id: "001_content_planner", sql: MIGRATION_001_CONTENT_PLANNER },
   { id: "002_multi_platform", sql: MIGRATION_002_MULTI_PLATFORM },
   { id: "003_recording_ops", sql: MIGRATION_003_RECORDING_OPS },
   { id: "004_ranklayer", sql: MIGRATION_004_RANKLAYER },
+  { id: "005_analytics_base", sql: MIGRATION_005_ANALYTICS_BASE },
+  { id: "006_analytics_views", sql: MIGRATION_006_ANALYTICS_VIEWS },
+  { id: "007_agent_rpcs", sql: MIGRATION_007_AGENT_RPCS },
 ]

package/src/registries.ts

@@ -1,5 +1,6 @@
 import type { PluginRegistryDef, EntityDef } from '@fayz-ai/core'
 import type { AcquisitionChannel } from './types'
+import { T } from './data/tables'
 
 // ---------------------------------------------------------------------------
 // Settings registries — surfaced as CRUD tabs in the central Settings area
@@ -24,15 +25,23 @@ const channelEntity: EntityDef = {
   defaultSort: 'label',
   fields: [
     { key: 'label', label: 'Channel', type: 'text', required: true, showInTable: true, searchable: true },
+    { key: 'channelKey', label: 'Key', type: 'text', required: true, showInTable: true },
     { key: 'kind', label: 'Type', type: 'select', options: KIND_OPTIONS, showInTable: true },
-    { key: 'icon', label: 'Icon', type: 'text', showInTable: true },
+    { key: 'icon', label: 'Icon', type: 'text' },
+    { key: 'monthlySpend', label: 'Monthly spend', type: 'number', showInTable: true, defaultValue: 0 },
+    { key: 'isActive', label: 'Active', type: 'boolean', showInTable: true, defaultValue: true, inlineToggle: true },
   ],
   facets: [{ field: 'kind' }],
+  data: {
+    table: T.channels,
+    tenantScoped: true,
+    searchColumns: ['label', 'channel_key'],
+  },
 }
 
-/** Build the marketing settings registries, seeding Channels from the resolved
- *  domain preset. Read-only today (channels come from the preset); flip
- *  readOnly + add a `data.table` to make them tenant-editable. */
+/** Build the marketing settings registries. Channels are tenant-editable rows
+ *  in plg_marketing_channels; the Supabase provider lazily seeds them from the
+ *  resolved domain preset (seedData doubles as walkable mock data). */
 export function buildMarketingRegistries(channels: AcquisitionChannel[]): PluginRegistryDef[] {
   return [
     {
@@ -41,8 +50,11 @@ export function buildMarketingRegistries(channels: AcquisitionChannel[]): Plugin
       icon: 'Radio',
       description: 'Acquisition channels tracked for this workspace',
       display: 'table',
-      readOnly: true,
-      seedData: channels.map((c) => ({ id: c.id, label: c.label, kind: c.kind, icon: c.icon })),
+      seedData: [
+        ...channels.map((c) => ({
+          id: c.id, channelKey: c.id, label: c.label, kind: c.kind, icon: c.icon, isActive: true, monthlySpend: 0,
+        })),
+      ],
     },
   ]
 }

package/src/schema/index.ts

@@ -1,7 +1,8 @@
 // Builders come from @fayz-ai/db (single drizzle-orm instance) — never import
 // pgTable/uuid directly from drizzle-orm/pg-core. See MIGRATION-ARCHITECTURE §6.
 import {
-  pgTable, uuid, text, boolean, integer, date, jsonb, index,
+  pgTable, uuid, text, boolean, integer, date, jsonb, index, uniqueIndex,
+  numeric, timestamp,
   tenantId, timestamps, createdAt,
 } from '@fayz-ai/db'
 
@@ -11,6 +12,42 @@ import {
 // see src/migrations/001_content_planner.sql.
 // ---------------------------------------------------------------------------
 
+// Acquisition channels — tenant-owned rows seeded from the domain preset.
+// `channel_key` is the stable preset/config id ('instagram', 'paid-search'…),
+// aligned with plugin-crm's lead-sources where they overlap.
+export const mktChannels = pgTable('plg_marketing_channels', {
+  id: uuid('id').primaryKey().defaultRandom(),
+  tenantId: tenantId(),
+  channelKey: text('channel_key').notNull(),
+  label: text('label').notNull(),
+  icon: text('icon'),
+  kind: text('kind').notNull().default('organic'),
+  isActive: boolean('is_active').notNull().default(true),
+  monthlySpend: numeric('monthly_spend').notNull().default('0'),
+  ...timestamps,
+}, (t) => [
+  index('idx_plg_marketing_channels_tenant').on(t.tenantId),
+  uniqueIndex('u_plg_marketing_channels_tenant_key').on(t.tenantId, t.channelKey),
+])
+
+// Acquisition campaigns — real CRUD; performance is DERIVED at read time from
+// v_marketing_attribution (channel match within the campaign window), only
+// spend is stored.
+export const mktCampaigns = pgTable('plg_marketing_campaigns', {
+  id: uuid('id').primaryKey().defaultRandom(),
+  tenantId: tenantId(),
+  name: text('name').notNull(),
+  channelKey: text('channel_key').notNull(),
+  status: text('status').notNull().default('draft'),
+  startsAt: timestamp('starts_at', { withTimezone: true }),
+  endsAt: timestamp('ends_at', { withTimezone: true }),
+  spend: numeric('spend').notNull().default('0'),
+  ...timestamps,
+}, (t) => [
+  index('idx_plg_marketing_campaigns_tenant').on(t.tenantId),
+  index('idx_plg_marketing_campaigns_channel').on(t.tenantId, t.channelKey),
+])
+
 export const mktSocialAccounts = pgTable('plg_marketing_social_accounts', {
   id: uuid('id').primaryKey().defaultRandom(),
   tenantId: tenantId(),

package/src/store.ts

@@ -19,6 +19,8 @@ export interface MarketingUIState {
   loading: boolean
 
   load(): Promise<void>
+  /** Invalidate the provider cache and reload (external writes, e.g. agent RPCs). */
+  refresh(): Promise<void>
   setRange(range: DateRangeKey): Promise<void>
   saveCampaign(input: SaveCampaignInput): Promise<Campaign>
   deleteCampaign(id: string): Promise<void>
@@ -37,14 +39,25 @@ export function createMarketingStore(provider: MarketingDataProvider): StoreApi<
     async load() {
       const range = get().range
       set({ loading: true })
-      const [overview, channels, campaigns, funnel, landingPages] = await Promise.all([
-        provider.overview({ range }),
-        provider.channelPerformance({ range }),
-        provider.listCampaigns({ range }),
-        provider.funnel({ range }),
-        provider.landingPages({ range }),
-      ])
-      set({ overview, channels, campaigns, funnel, landingPages, loading: false })
+      try {
+        const [overview, channels, campaigns, funnel, landingPages] = await Promise.all([
+          provider.overview({ range }),
+          provider.channelPerformance({ range }),
+          provider.listCampaigns({ range }),
+          provider.funnel({ range }),
+          provider.landingPages({ range }),
+        ])
+        set({ overview, channels, campaigns, funnel, landingPages, loading: false })
+      } catch (err) {
+        // A failed load must never wedge the surface in `loading` forever.
+        set({ loading: false })
+        throw err
+      }
+    },
+
+    async refresh() {
+      provider.invalidateCache?.()
+      await get().load()
     },
 
     async setRange(range) {

package/src/views/CampaignsView.tsx

@@ -2,6 +2,7 @@ import React from 'react'
 import { Plus, Trash2 } from 'lucide-react'
 import type { ColumnDef } from '@tanstack/react-table'
 import { Button, DataTable } from '@fayz-ai/ui'
+import { PermissionGate } from '@fayz-ai/saas'
 import { useTranslation } from '@fayz-ai/core'
 import { useMarketingConfig, useMarketingStore } from '../MarketingContext'
 import { formatCurrency, formatNumber, formatPercent } from '../format'
@@ -44,7 +45,9 @@ export function CampaignsView() {
         <p className="text-sm text-muted-foreground">{t('marketing.campaigns.subtitle')}</p>
         <div className="flex items-center gap-2">
           <RangeTabs />
-          <Button onClick={() => setComposerOpen(true)}><Plus className="mr-1.5 h-4 w-4" /> {t('marketing.campaigns.new')}</Button>
+          <PermissionGate feature="marketing" action="create">
+            <Button onClick={() => setComposerOpen(true)}><Plus className="mr-1.5 h-4 w-4" /> {t('marketing.campaigns.new')}</Button>
+          </PermissionGate>
         </div>
       </div>
 

package/src/views/blog/BlogEntityForm.tsx

@@ -1,8 +1,9 @@
 import React from 'react'
 import { SubpageHeader, Button, toast } from '@fayz-ai/ui'
-import { CrudFormPage } from '@fayz-ai/saas'
+import { CrudFormPage, useLimitGuard, invalidateLimit } from '@fayz-ai/saas'
 import type { EntityDef } from '@fayz-ai/core'
 import { useEntityCrud } from './useEntityCrud'
+import { BLOG_POSTS_TABLE } from '../../data/blogEntities'
 
 // ---------------------------------------------------------------------------
 // Generic create/edit for a blog entity (post or category), rendered through
@@ -24,6 +25,9 @@ export function BlogEntityForm<T extends { id: string }>({
 }) {
   const { getById, create, update, remove } = useEntityCrud(entity)
   const isEdit = !!editId
+  // Plan quantity guard applies to blog POSTS only (categories are unbounded).
+  const isPost = (entity as { data?: { table?: string } }).data?.table === BLOG_POSTS_TABLE
+  const guardBlogPosts = useLimitGuard('blog_posts')
   const namePlural = entity.namePlural ?? entity.name + 's'
   const [initialData, setInitialData] = React.useState<Record<string, any> | null>(isEdit ? null : {})
 
@@ -38,9 +42,14 @@ export function BlogEntityForm<T extends { id: string }>({
   }, [editId, getById])
 
   async function save(values: Record<string, any>) {
+    // Client-side plan guard before the provider create — posts only, on create.
+    if (!isEdit && isPost && (await guardBlogPosts()) === 'blocked') return
     try {
       if (isEdit) await update(editId!, values)
-      else await create(values)
+      else {
+        await create(values)
+        if (isPost) invalidateLimit('blog_posts')
+      }
       toast.success(isEdit ? `${entity.name} updated` : `${entity.name} created`)
       onDone()
     } catch (err) {

package/src/views/content/ContentView.tsx

@@ -10,7 +10,7 @@ import {
   Modal, ModalContent, ModalHeader, ModalTitle, ModalBody, ModalFooter,
 } from '@fayz-ai/ui'
 import { useTranslation } from '@fayz-ai/core'
-import { useOrganizationStore } from '@fayz-ai/saas'
+import { useOrganizationStore, useLimitGuard, invalidateLimit } from '@fayz-ai/saas'
 import { PlanBriefSheet } from './PlanBriefView'
 import type { ContentPost } from '../../data/contentTypes'
 import { useContentPlannerStore } from './ContentPlannerContext'
@@ -727,6 +727,7 @@ export function ContentView({ onOpenPost }: {
   const viewMode = useContentPlannerStore((s) => s.viewMode)
   const setViewMode = useContentPlannerStore((s) => s.setViewMode)
   const loadedTenantId = useContentPlannerStore((s) => s.loadedTenantId)
+  const guardContentPosts = useLimitGuard('content_posts_month')
 
   const [briefOpen, setBriefOpen] = React.useState(false)
   const [pendingDeleteId, setPendingDeleteId] = React.useState<string | null>(null)
@@ -765,6 +766,8 @@ export function ContentView({ onOpenPost }: {
   // default plan and drops the post straight into it. The scheduled date
   // prefills with the first day of the selected week so the post lands dated.
   const createPost = async (week: number) => {
+    // Client-side monthly-quota guard before the store create.
+    if ((await guardContentPosts()) === 'blocked') return
     const targetPlan = await ensurePlan()
     if (!targetPlan) return
     const start = targetPlan.startDate
@@ -779,6 +782,7 @@ export function ContentView({ onOpenPost }: {
       status: 'idea',
       scheduledDate: toISODate(start),
     })
+    invalidateLimit('content_posts_month')
     onOpenPost(post.id)
   }
 
@@ -790,6 +794,8 @@ export function ContentView({ onOpenPost }: {
 
   // Calendar day click → derive the plan week from startDate when available.
   const createPostAt = async (isoDate: string) => {
+    // Client-side monthly-quota guard before the store create.
+    if ((await guardContentPosts()) === 'blocked') return
     const targetPlan = await ensurePlan()
     if (!targetPlan) return
     let week = 1
@@ -807,6 +813,7 @@ export function ContentView({ onOpenPost }: {
       status: 'idea',
       scheduledDate: isoDate,
     })
+    invalidateLimit('content_posts_month')
     onOpenPost(post.id)
   }