@fayz-ai/plugin-marketing 0.8.1 → 0.8.2

package/dist/index.cjs

@@ -365,11 +365,11 @@ function CampaignsView() {
       /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-muted-foreground", children: t("marketing.campaigns.subtitle") }),
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-2", children: [
         /* @__PURE__ */ jsxRuntime.jsx(RangeTabs, {}),
-        /* @__PURE__ */ jsxRuntime.jsxs(ui.Button, { onClick: () => setComposerOpen(true), children: [
+        /* @__PURE__ */ jsxRuntime.jsx(saas.PermissionGate, { feature: "marketing", action: "create", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Button, { onClick: () => setComposerOpen(true), children: [
           /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Plus, { className: "mr-1.5 h-4 w-4" }),
           " ",
           t("marketing.campaigns.new")
-        ] })
+        ] }) })
       ] })
     ] }),
     /* @__PURE__ */ jsxRuntime.jsx(ui.DataTable, { columns, data: campaigns, emptyMessage: t("marketing.campaigns.empty") }),
@@ -1314,6 +1314,7 @@ function ContentView({ onOpenPost }) {
   const viewMode = useContentPlannerStore((s) => s.viewMode);
   const setViewMode = useContentPlannerStore((s) => s.setViewMode);
   const loadedTenantId = useContentPlannerStore((s) => s.loadedTenantId);
+  const guardContentPosts = saas.useLimitGuard("content_posts_month");
   const [briefOpen, setBriefOpen] = React8__default.default.useState(false);
   const [pendingDeleteId, setPendingDeleteId] = React8__default.default.useState(null);
   const tenantId = saas.useOrganizationStore((state) => state.currentOrg?.id);
@@ -1341,6 +1342,7 @@ function ContentView({ onOpenPost }) {
     });
   };
   const createPost = async (week) => {
+    if (await guardContentPosts() === "blocked") return;
     const targetPlan = await ensurePlan();
     if (!targetPlan) return;
     const start = targetPlan.startDate ? /* @__PURE__ */ new Date(`${targetPlan.startDate}T00:00:00`) : mondayOfCurrentWeek();
@@ -1353,6 +1355,7 @@ function ContentView({ onOpenPost }) {
       status: "idea",
       scheduledDate: toISODate(start)
     });
+    saas.invalidateLimit("content_posts_month");
     onOpenPost(post.id);
   };
   const movePost = async (postId, week) => {
@@ -1361,6 +1364,7 @@ function ContentView({ onOpenPost }) {
     await savePost({ id: postId, weekNumber: week });
   };
   const createPostAt = async (isoDate) => {
+    if (await guardContentPosts() === "blocked") return;
     const targetPlan = await ensurePlan();
     if (!targetPlan) return;
     let week = 1;
@@ -1378,6 +1382,7 @@ function ContentView({ onOpenPost }) {
       status: "idea",
       scheduledDate: isoDate
     });
+    saas.invalidateLimit("content_posts_month");
     onOpenPost(post.id);
   };
   const busy = !loaded || loading;
@@ -2352,6 +2357,8 @@ function BlogEntityForm({
 }) {
   const { getById, create, update, remove } = useEntityCrud(entity);
   const isEdit = !!editId;
+  const isPost = entity.data?.table === BLOG_POSTS_TABLE;
+  const guardBlogPosts = saas.useLimitGuard("blog_posts");
   const namePlural = entity.namePlural ?? entity.name + "s";
   const [initialData, setInitialData] = React8__default.default.useState(isEdit ? null : {});
   React8__default.default.useEffect(() => {
@@ -2366,9 +2373,13 @@ function BlogEntityForm({
     };
   }, [editId, getById]);
   async function save(values) {
+    if (!isEdit && isPost && await guardBlogPosts() === "blocked") return;
     try {
       if (isEdit) await update(editId, values);
-      else await create(values);
+      else {
+        await create(values);
+        if (isPost) saas.invalidateLimit("blog_posts");
+      }
       ui.toast.success(isEdit ? `${entity.name} updated` : `${entity.name} created`);
       onDone();
     } catch (err) {
@@ -2474,6 +2485,9 @@ function MarketingPage({ config, provider: provider2, store, contentProvider, co
   React8__default.default.useEffect(() => {
     void store.getState().load();
   }, [store]);
+  core.useDataChanged({ table: "plg_marketing_campaigns" }, () => {
+    void store.getState().refresh();
+  }, [store]);
   const isOverview = view === "overview";
   const nav = buildNav(config, view, navigate);
   const blogPostEntity = React8__default.default.useMemo(() => buildBlogPostEntity(), []);
@@ -2589,6 +2603,20 @@ function SettingsView() {
   ] });
 }
 
+// src/data/tables.ts
+var T = {
+  socialAccounts: "plg_marketing_social_accounts",
+  contentPlans: "plg_marketing_content_plans",
+  contentPosts: "plg_marketing_content_posts",
+  channels: "plg_marketing_channels",
+  campaigns: "plg_marketing_campaigns"
+};
+var V = {
+  channels: "v_marketing_channels",
+  campaigns: "v_marketing_campaigns",
+  attribution: "v_marketing_attribution"
+};
+
 // src/registries.ts
 var KIND_OPTIONS = [
   { value: "paid", label: "Paid" },
@@ -2606,10 +2634,18 @@ var channelEntity = {
   defaultSort: "label",
   fields: [
     { key: "label", label: "Channel", type: "text", required: true, showInTable: true, searchable: true },
+    { key: "channelKey", label: "Key", type: "text", required: true, showInTable: true },
     { key: "kind", label: "Type", type: "select", options: KIND_OPTIONS, showInTable: true },
-    { key: "icon", label: "Icon", type: "text", showInTable: true }
+    { key: "icon", label: "Icon", type: "text" },
+    { key: "monthlySpend", label: "Monthly spend", type: "number", showInTable: true, defaultValue: 0 },
+    { key: "isActive", label: "Active", type: "boolean", showInTable: true, defaultValue: true, inlineToggle: true }
   ],
-  facets: [{ field: "kind" }]
+  facets: [{ field: "kind" }],
+  data: {
+    table: T.channels,
+    tenantScoped: true,
+    searchColumns: ["label", "channel_key"]
+  }
 };
 function buildMarketingRegistries(channels) {
   return [
@@ -2619,8 +2655,17 @@ function buildMarketingRegistries(channels) {
       icon: "Radio",
       description: "Acquisition channels tracked for this workspace",
       display: "table",
-      readOnly: true,
-      seedData: channels.map((c) => ({ id: c.id, label: c.label, kind: c.kind, icon: c.icon }))
+      seedData: [
+        ...channels.map((c) => ({
+          id: c.id,
+          channelKey: c.id,
+          label: c.label,
+          kind: c.kind,
+          icon: c.icon,
+          isActive: true,
+          monthlySpend: 0
+        }))
+      ]
     }
   ];
 }
@@ -3041,6 +3086,276 @@ function createMockMarketingProvider(cfg) {
     }
   };
 }
+var RANGE_DAYS = { "7d": 7, "30d": 30, "90d": 90 };
+function getClient() {
+  const supabase = core.getSupabaseClientOptional();
+  if (!supabase) throw new Error("Supabase not initialized");
+  return supabase;
+}
+function requireTenantId() {
+  const tenantId = core.getActiveTenantId();
+  if (!tenantId) throw new Error("No active tenant");
+  return tenantId;
+}
+function normKey(value) {
+  return (value ?? "").toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+function createSupabaseMarketingProvider(options) {
+  const { channels, conversion, attributionBridge, sitesBridge } = options;
+  const channelByNorm = /* @__PURE__ */ new Map();
+  for (const ch of channels) {
+    channelByNorm.set(normKey(ch.id), ch.id);
+    channelByNorm.set(normKey(ch.label), ch.id);
+  }
+  const resolveChannel = (raw) => channelByNorm.get(normKey(raw)) ?? null;
+  const seeded = /* @__PURE__ */ new Set();
+  async function ensureChannels(tenantId) {
+    if (seeded.has(tenantId)) return;
+    seeded.add(tenantId);
+    await getClient().from(T.channels).upsert(
+      channels.map((c) => ({
+        tenant_id: tenantId,
+        channel_key: c.id,
+        label: c.label,
+        icon: c.icon,
+        kind: c.kind
+      })),
+      { onConflict: "tenant_id,channel_key", ignoreDuplicates: true }
+    );
+  }
+  const CACHE_TTL_MS = 3e4;
+  const cache = /* @__PURE__ */ new Map();
+  function memo(key, fn) {
+    const hit = cache.get(key);
+    if (hit && Date.now() - hit.at < CACHE_TTL_MS) return hit.promise;
+    const promise = fn().catch((err) => {
+      cache.delete(key);
+      throw err;
+    });
+    cache.set(key, { at: Date.now(), promise });
+    return promise;
+  }
+  function windowFor(range) {
+    const days = RANGE_DAYS[range];
+    const now = Math.floor(Date.now() / 6e4) * 6e4;
+    return { since: new Date(now - days * 864e5), days };
+  }
+  function fetchAttribution(tenantId, since, until) {
+    const key = `attr:${tenantId}:${since.getTime()}:${until?.getTime() ?? ""}`;
+    return memo(key, async () => {
+      let q = getClient().from(V.attribution).select("kind, source, channel_raw, occurred_at, value").eq("tenant_id", tenantId).gte("occurred_at", since.toISOString()).or(`kind.eq.lead,and(kind.eq.conversion,source.eq.${conversion.source})`);
+      if (until) q = q.lt("occurred_at", until.toISOString());
+      const { data, error } = await q;
+      if (error) throw error;
+      return data ?? [];
+    });
+  }
+  function rollup(rows) {
+    const map = /* @__PURE__ */ new Map();
+    for (const row of rows) {
+      const channelId = resolveChannel(row.channel_raw);
+      if (!channelId) continue;
+      const agg = map.get(channelId) ?? { leads: 0, conversions: 0, value: 0 };
+      if (row.kind === "lead") agg.leads += 1;
+      else {
+        agg.conversions += 1;
+        agg.value += Number(row.value ?? conversion.avgValue);
+      }
+      map.set(channelId, agg);
+    }
+    return map;
+  }
+  function fetchSpend(tenantId, days, since) {
+    return memo(`spend:${tenantId}:${days}:${since.getTime()}`, () => fetchSpendRaw(tenantId, days, since));
+  }
+  async function fetchSpendRaw(tenantId, days, since) {
+    const client = getClient();
+    const [channelRows, campaignRows] = await Promise.all([
+      client.from(V.channels).select("channel_key, monthly_spend").eq("tenant_id", tenantId),
+      client.from(V.campaigns).select("channel_key, spend, status, starts_at, ends_at").eq("tenant_id", tenantId).neq("status", "draft")
+    ]);
+    const spend = /* @__PURE__ */ new Map();
+    for (const row of channelRows.data ?? []) {
+      const id = resolveChannel(row.channel_key);
+      if (!id) continue;
+      spend.set(id, (spend.get(id) ?? 0) + Number(row.monthly_spend) * days / 30);
+    }
+    for (const row of campaignRows.data ?? []) {
+      const id = resolveChannel(row.channel_key);
+      if (!id) continue;
+      const ended = row.ends_at ? new Date(row.ends_at) : null;
+      if (ended && ended < since) continue;
+      spend.set(id, (spend.get(id) ?? 0) + Number(row.spend));
+    }
+    return spend;
+  }
+  async function channelPerformance(query) {
+    const tenantId = requireTenantId();
+    await ensureChannels(tenantId);
+    const { since, days } = windowFor(query.range);
+    const [rows, spend] = await Promise.all([
+      fetchAttribution(tenantId, since),
+      fetchSpend(tenantId, days, since)
+    ]);
+    const byChannel = rollup(rows);
+    if (attributionBridge) {
+      const bridged = await attributionBridge.conversionsByChannel(query);
+      for (const b of bridged) {
+        const agg = byChannel.get(b.channelId) ?? { leads: 0, conversions: 0, value: 0 };
+        agg.conversions = b.conversions;
+        agg.value = b.value;
+        byChannel.set(b.channelId, agg);
+      }
+    }
+    const list = channels.map((ch) => {
+      const agg = byChannel.get(ch.id) ?? { leads: 0, conversions: 0, value: 0 };
+      const chSpend = spend.get(ch.id) ?? 0;
+      return {
+        channelId: ch.id,
+        reach: 0,
+        leads: agg.leads,
+        conversions: agg.conversions,
+        spend: Math.round(chSpend),
+        value: Math.round(agg.value),
+        cvr: 0,
+        cpa: agg.conversions > 0 && chSpend > 0 ? chSpend / agg.conversions : 0
+      };
+    });
+    return query.channelId ? list.filter((c) => c.channelId === query.channelId) : list;
+  }
+  function campaignFromRow(row) {
+    return {
+      id: row.id,
+      name: row.name,
+      channelId: row.channel_key,
+      status: row.status,
+      start: row.starts_at ?? row.created_at,
+      end: row.ends_at ?? void 0,
+      spend: Number(row.spend ?? 0),
+      reach: 0,
+      leads: 0,
+      conversions: 0,
+      value: 0
+    };
+  }
+  function withDerived(campaign, rows) {
+    const start = new Date(campaign.start).getTime();
+    const end = campaign.end ? new Date(campaign.end).getTime() : Number.POSITIVE_INFINITY;
+    let leads = 0;
+    let conversions = 0;
+    let value = 0;
+    for (const row of rows) {
+      if (resolveChannel(row.channel_raw) !== campaign.channelId) continue;
+      const at = new Date(row.occurred_at).getTime();
+      if (at < start || at > end) continue;
+      if (row.kind === "lead") leads += 1;
+      else {
+        conversions += 1;
+        value += Number(row.value ?? conversion.avgValue);
+      }
+    }
+    return { ...campaign, leads, conversions, value: Math.round(value) };
+  }
+  return {
+    channelPerformance,
+    async overview(query) {
+      const tenantId = requireTenantId();
+      const perf = await channelPerformance(query);
+      const { since, days } = windowFor(query.range);
+      const prevRows = await fetchAttribution(
+        tenantId,
+        new Date(since.getTime() - days * 864e5),
+        since
+      );
+      const conversions = perf.reduce((s, c) => s + c.conversions, 0);
+      const spend = perf.reduce((s, c) => s + c.spend, 0);
+      const value = perf.reduce((s, c) => s + c.value, 0);
+      const conversionsPrev = prevRows.filter(
+        (r) => r.kind === "conversion" && resolveChannel(r.channel_raw)
+      ).length;
+      const top = [...perf].sort((a, b) => b.conversions - a.conversions)[0];
+      return {
+        conversions,
+        conversionsPrev,
+        cvr: 0,
+        cvrPrev: 0,
+        spend,
+        cpa: conversions > 0 && spend > 0 ? spend / conversions : 0,
+        value,
+        topChannelId: top && top.conversions > 0 ? top.channelId : null,
+        channelMix: perf.map((c) => ({ channelId: c.channelId, conversions: c.conversions }))
+      };
+    },
+    async funnel(query) {
+      if (attributionBridge) return attributionBridge.funnel(query);
+      const tenantId = requireTenantId();
+      const { since } = windowFor(query.range);
+      const rows = await fetchAttribution(tenantId, since);
+      const leads = rows.filter((r) => r.kind === "lead").length;
+      const conversions = rows.filter((r) => r.kind === "conversion").length;
+      return [
+        { id: "leads", label: "Leads", count: leads, color: "#0ea5e9" },
+        { id: "converted", label: conversion.labelPlural, count: conversions, color: "#22c55e" }
+      ];
+    },
+    async listCampaigns(query) {
+      const tenantId = requireTenantId();
+      const fetchRows = () => memo(`campaigns:${tenantId}`, async () => {
+        const { data: data2, error } = await getClient().from(V.campaigns).select("*").eq("tenant_id", tenantId).order("created_at", { ascending: false });
+        if (error) throw error;
+        return data2 ?? [];
+      });
+      const [data, rows] = await Promise.all([
+        fetchRows(),
+        fetchAttribution(tenantId, windowFor(query.range).since)
+      ]);
+      const list = query.channelId ? data.filter((r) => r.channel_key === query.channelId) : data;
+      return list.map((row) => withDerived(campaignFromRow(row), rows));
+    },
+    async getCampaign(id) {
+      const tenantId = requireTenantId();
+      const { data, error } = await getClient().from(V.campaigns).select("*").eq("tenant_id", tenantId).eq("id", id).maybeSingle();
+      if (error) throw error;
+      if (!data) return null;
+      const campaign = campaignFromRow(data);
+      const rows = await fetchAttribution(tenantId, new Date(campaign.start));
+      return withDerived(campaign, rows);
+    },
+    async saveCampaign(input) {
+      const tenantId = requireTenantId();
+      const payload = {
+        name: input.name,
+        channel_key: input.channelId,
+        status: input.status,
+        starts_at: input.start || null,
+        ends_at: input.end || null,
+        spend: input.spend ?? 0
+      };
+      if (input.id) {
+        const { data: data2, error: error2 } = await getClient().from(T.campaigns).update(payload).eq("id", input.id).select("*").single();
+        if (error2) throw error2;
+        cache.clear();
+        return campaignFromRow(data2);
+      }
+      const { data, error } = await getClient().from(T.campaigns).insert({ tenant_id: tenantId, ...payload }).select("*").single();
+      if (error) throw error;
+      cache.clear();
+      return campaignFromRow(data);
+    },
+    async deleteCampaign(id) {
+      const { error } = await getClient().from(T.campaigns).delete().eq("id", id);
+      if (error) throw error;
+      cache.clear();
+    },
+    invalidateCache() {
+      cache.clear();
+    },
+    async landingPages(query) {
+      if (sitesBridge) return sitesBridge.landingPages(query);
+      return [];
+    }
+  };
+}
 
 // src/data/contentMock.ts
 var counter = 0;
@@ -3288,21 +3603,12 @@ function createMockContentPlannerProvider() {
     }
   };
 }
-
-// src/data/tables.ts
-var T = {
-  socialAccounts: "plg_marketing_social_accounts",
-  contentPlans: "plg_marketing_content_plans",
-  contentPosts: "plg_marketing_content_posts"
-};
-
-// src/data/contentSupabase.ts
-function getClient() {
+function getClient2() {
   const supabase = core.getSupabaseClientOptional();
   if (!supabase) throw new Error("Supabase not initialized");
   return supabase;
 }
-function requireTenantId() {
+function requireTenantId2() {
   const tenantId = core.getActiveTenantId();
   if (!tenantId) throw new Error("No active tenant");
   return tenantId;
@@ -3338,7 +3644,7 @@ function createSupabaseContentPlannerProvider() {
     async listAccounts() {
       const tenantId = core.getActiveTenantId();
       if (!tenantId) return [];
-      const { data } = await getClient().from(T.socialAccounts).select("*").eq("tenant_id", tenantId).eq("is_active", true).order("created_at", { ascending: true });
+      const { data } = await getClient2().from(T.socialAccounts).select("*").eq("tenant_id", tenantId).eq("is_active", true).order("created_at", { ascending: true });
       return (data ?? []).map(toAccount);
     },
     async saveAccount(input) {
@@ -3348,12 +3654,12 @@ function createSupabaseContentPlannerProvider() {
         if (input.handle !== void 0) payload.handle = input.handle;
         if (input.platforms !== void 0) payload.platforms = input.platforms;
         if (input.isActive !== void 0) payload.is_active = input.isActive;
-        const { data: data2, error: error2 } = await getClient().from(T.socialAccounts).update(payload).eq("id", input.id).select("*").single();
+        const { data: data2, error: error2 } = await getClient2().from(T.socialAccounts).update(payload).eq("id", input.id).select("*").single();
         if (error2) throw error2;
         return toAccount(data2);
       }
-      const { data, error } = await getClient().from(T.socialAccounts).insert({
-        tenant_id: requireTenantId(),
+      const { data, error } = await getClient2().from(T.socialAccounts).insert({
+        tenant_id: requireTenantId2(),
         name: input.name,
         handle: input.handle ?? null,
         platforms: input.platforms ?? ["instagram"],
@@ -3363,17 +3669,17 @@ function createSupabaseContentPlannerProvider() {
       return toAccount(data);
     },
     async deleteAccount(id) {
-      const { error } = await getClient().from(T.socialAccounts).delete().eq("id", id);
+      const { error } = await getClient2().from(T.socialAccounts).delete().eq("id", id);
       if (error) throw error;
     },
     async listPlans(accountId) {
       const tenantId = core.getActiveTenantId();
       if (!tenantId) return [];
-      const { data } = await getClient().from(T.contentPlans).select("*").eq("tenant_id", tenantId).eq("account_id", accountId).order("created_at", { ascending: false });
+      const { data } = await getClient2().from(T.contentPlans).select("*").eq("tenant_id", tenantId).eq("account_id", accountId).order("created_at", { ascending: false });
       return (data ?? []).map(toPlan);
     },
     async getPlan(id) {
-      const { data } = await getClient().from(T.contentPlans).select("*").eq("id", id).maybeSingle();
+      const { data } = await getClient2().from(T.contentPlans).select("*").eq("id", id).maybeSingle();
       return data ? toPlan(data) : null;
     },
     async savePlan(input) {
@@ -3389,13 +3695,13 @@ function createSupabaseContentPlannerProvider() {
         if (input.formats !== void 0) payload.formats = input.formats;
         if (input.weeklyFrequency !== void 0) payload.weekly_frequency = input.weeklyFrequency;
         if (input.briefMd !== void 0) payload.brief_md = input.briefMd;
-        const { data: data2, error: error2 } = await getClient().from(T.contentPlans).update(payload).eq("id", input.id).select("*").single();
+        const { data: data2, error: error2 } = await getClient2().from(T.contentPlans).update(payload).eq("id", input.id).select("*").single();
         if (error2) throw error2;
         return toPlan(data2);
       }
       if (!input.accountId) throw new Error("accountId is required");
-      const { data, error } = await getClient().from(T.contentPlans).insert({
-        tenant_id: requireTenantId(),
+      const { data, error } = await getClient2().from(T.contentPlans).insert({
+        tenant_id: requireTenantId2(),
         account_id: input.accountId,
         name: input.name ?? "Novo plano",
         status: input.status ?? "draft",
@@ -3412,14 +3718,14 @@ function createSupabaseContentPlannerProvider() {
       return toPlan(data);
     },
     async deletePlan(id) {
-      await getClient().from(T.contentPlans).delete().eq("id", id);
+      await getClient2().from(T.contentPlans).delete().eq("id", id);
     },
     async listPosts(planId) {
-      const { data } = await getClient().from(T.contentPosts).select("*").eq("plan_id", planId).order("week_number", { ascending: true }).order("position", { ascending: true });
+      const { data } = await getClient2().from(T.contentPosts).select("*").eq("plan_id", planId).order("week_number", { ascending: true }).order("position", { ascending: true });
       return (data ?? []).map(toPost);
     },
     async getPost(id) {
-      const { data } = await getClient().from(T.contentPosts).select("*").eq("id", id).maybeSingle();
+      const { data } = await getClient2().from(T.contentPosts).select("*").eq("id", id).maybeSingle();
       return data ? toPost(data) : null;
     },
     async savePost(input) {
@@ -3437,16 +3743,16 @@ function createSupabaseContentPlannerProvider() {
         if (input.hook !== void 0) payload.hook = input.hook;
         if (input.cta !== void 0) payload.cta = input.cta;
         if (input.contentMd !== void 0) payload.content_md = input.contentMd;
-        const { data: data2, error: error2 } = await getClient().from(T.contentPosts).update(payload).eq("id", input.id).select("*").single();
+        const { data: data2, error: error2 } = await getClient2().from(T.contentPosts).update(payload).eq("id", input.id).select("*").single();
         if (error2) throw error2;
         return toPost(data2);
       }
       if (!input.planId) throw new Error("planId is required");
       const week = input.weekNumber ?? 1;
-      const { data: maxData } = await getClient().from(T.contentPosts).select("position").eq("plan_id", input.planId).eq("week_number", week).order("position", { ascending: false }).limit(1);
+      const { data: maxData } = await getClient2().from(T.contentPosts).select("position").eq("plan_id", input.planId).eq("week_number", week).order("position", { ascending: false }).limit(1);
       const maxPos = maxData?.[0]?.position ?? -1;
-      const { data, error } = await getClient().from(T.contentPosts).insert({
-        tenant_id: requireTenantId(),
+      const { data, error } = await getClient2().from(T.contentPosts).insert({
+        tenant_id: requireTenantId2(),
         plan_id: input.planId,
         week_number: week,
         position: input.position ?? maxPos + 1,
@@ -3465,7 +3771,7 @@ function createSupabaseContentPlannerProvider() {
       return toPost(data);
     },
     async deletePost(id) {
-      await getClient().from(T.contentPosts).delete().eq("id", id);
+      await getClient2().from(T.contentPosts).delete().eq("id", id);
     }
   };
 }
@@ -3481,14 +3787,23 @@ function createMarketingStore(provider2) {
     async load() {
       const range = get().range;
       set({ loading: true });
-      const [overview, channels, campaigns, funnel, landingPages] = await Promise.all([
-        provider2.overview({ range }),
-        provider2.channelPerformance({ range }),
-        provider2.listCampaigns({ range }),
-        provider2.funnel({ range }),
-        provider2.landingPages({ range })
-      ]);
-      set({ overview, channels, campaigns, funnel, landingPages, loading: false });
+      try {
+        const [overview, channels, campaigns, funnel, landingPages] = await Promise.all([
+          provider2.overview({ range }),
+          provider2.channelPerformance({ range }),
+          provider2.listCampaigns({ range }),
+          provider2.funnel({ range }),
+          provider2.landingPages({ range })
+        ]);
+        set({ overview, channels, campaigns, funnel, landingPages, loading: false });
+      } catch (err) {
+        set({ loading: false });
+        throw err;
+      }
+    },
+    async refresh() {
+      provider2.invalidateCache?.();
+      await get().load();
     },
     async setRange(range) {
       set({ range });
@@ -3830,14 +4145,264 @@ CREATE POLICY plg_marketing_ranklayer_sync_log_select ON public.plg_marketing_ra
 CREATE POLICY plg_marketing_ranklayer_sync_log_insert ON public.plg_marketing_ranklayer_sync_log FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
 GRANT SELECT, INSERT ON public.plg_marketing_ranklayer_sync_log TO authenticated;
 `;
+var MIGRATION_005_ANALYTICS_BASE = `-- Marketing Plugin: analytics base tables (channels + campaigns).
+-- Prefix: plg_marketing_
+-- Channels are tenant-owned rows lazily seeded from the app's domain preset
+-- (channel_key = preset/config id). Campaign performance is DERIVED at read
+-- time from v_marketing_attribution (006); only spend is stored.
+-- Canonical RLS form: tenant_id IN (SELECT public.user_tenant_ids()).
+
+CREATE TABLE IF NOT EXISTS public.plg_marketing_channels (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  channel_key text NOT NULL,
+  label text NOT NULL,
+  icon text,
+  kind text NOT NULL DEFAULT 'organic'
+    CHECK (kind IN ('paid', 'organic', 'social', 'referral', 'direct', 'outbound')),
+  is_active boolean NOT NULL DEFAULT true,
+  monthly_spend numeric NOT NULL DEFAULT 0,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS idx_plg_marketing_channels_tenant ON public.plg_marketing_channels(tenant_id);
+CREATE UNIQUE INDEX IF NOT EXISTS u_plg_marketing_channels_tenant_key ON public.plg_marketing_channels(tenant_id, channel_key);
+
+CREATE TABLE IF NOT EXISTS public.plg_marketing_campaigns (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  name text NOT NULL,
+  channel_key text NOT NULL,
+  status text NOT NULL DEFAULT 'draft'
+    CHECK (status IN ('active', 'paused', 'ended', 'draft')),
+  starts_at timestamptz,
+  ends_at timestamptz,
+  spend numeric NOT NULL DEFAULT 0,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_tenant ON public.plg_marketing_campaigns(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_marketing_campaigns_channel ON public.plg_marketing_campaigns(tenant_id, channel_key);
+
+DO $$
+DECLARE t text;
+BEGIN
+  FOR t IN SELECT unnest(ARRAY['plg_marketing_channels','plg_marketing_campaigns'])
+  LOOP
+    EXECUTE format('ALTER TABLE public.%I ENABLE ROW LEVEL SECURITY', t);
+    EXECUTE format('GRANT SELECT, INSERT, UPDATE, DELETE ON public.%I TO authenticated', t);
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_select') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_select', t);
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_insert') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_insert', t);
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_update') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_update', t);
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename=t AND policyname=t||'_delete') THEN
+      EXECUTE format('CREATE POLICY %I ON public.%I FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()))', t||'_delete', t);
+    END IF;
+  END LOOP;
+END $$;
+`;
+var MIGRATION_006_ANALYTICS_VIEWS = `-- Marketing Plugin: analytics read views.
+-- v_marketing_channels / v_marketing_campaigns \u2014 bridge views for the surface
+-- and the agent's data primitives.
+-- v_marketing_attribution \u2014 GENERIC, spine-only attribution event stream
+-- (people/appointments/orders metadata). \`channel_raw\` is the unnormalized
+-- origin string; the provider matches it against the app's channel set
+-- (id or label, case/punctuation-insensitive).
+-- Apps whose origin lives in an app-local extension table (e.g. beauty's
+-- clients.origin) may CREATE OR REPLACE this view in their own incubator
+-- migration, KEEPING the column contract:
+--   (tenant_id uuid, kind text, source text, channel_raw text,
+--    occurred_at timestamptz, value numeric)
+
+CREATE OR REPLACE VIEW public.v_marketing_channels WITH (security_invoker=true) AS
+SELECT c.id, c.tenant_id, c.channel_key, c.label, c.icon, c.kind,
+       c.is_active, c.monthly_spend, c.created_at, c.updated_at
+FROM public.plg_marketing_channels c;
+GRANT SELECT ON public.v_marketing_channels TO authenticated;
+
+CREATE OR REPLACE VIEW public.v_marketing_campaigns WITH (security_invoker=true) AS
+SELECT g.id, g.tenant_id, g.name, g.channel_key, ch.label AS channel_label,
+       g.status, g.starts_at, g.ends_at, g.spend, g.created_at, g.updated_at
+FROM public.plg_marketing_campaigns g
+LEFT JOIN public.plg_marketing_channels ch
+  ON ch.tenant_id = g.tenant_id AND ch.channel_key = g.channel_key;
+GRANT SELECT ON public.v_marketing_campaigns TO authenticated;
+
+CREATE OR REPLACE VIEW public.v_marketing_attribution WITH (security_invoker=true) AS
+-- lead events (CRM leads; sourceId aligns with lead-sources/channel ids)
+SELECT p.tenant_id,
+       'lead'::text AS kind,
+       'crm'::text AS source,
+       COALESCE(p.metadata->>'sourceId', p.metadata->>'sourceName', p.metadata->>'origin') AS channel_raw,
+       p.created_at AS occurred_at,
+       NULLIF(p.metadata->>'value', '')::numeric AS value
+FROM public.people p
+WHERE p.kind = 'lead'
+UNION ALL
+-- booking conversions (agenda verticals)
+SELECT b.tenant_id, 'conversion', 'agenda',
+       COALESCE(b.metadata->>'origin', pc.metadata->>'origin', pc.metadata->>'sourceId', pc.metadata->>'sourceName'),
+       b.starts_at,
+       o.total
+FROM public.appointments b
+LEFT JOIN public.people pc ON pc.id = b.party_id
+LEFT JOIN public.orders o ON o.id = b.order_id
+WHERE b.status NOT IN ('cancelled', 'no_show')
+UNION ALL
+-- order conversions (commerce verticals)
+SELECT o.tenant_id, 'conversion', 'orders',
+       COALESCE(o.metadata->>'origin', pp.metadata->>'origin', pp.metadata->>'sourceId'),
+       o.created_at,
+       o.total
+FROM public.orders o
+LEFT JOIN public.people pp ON pp.id = o.party_id
+WHERE o.kind NOT IN ('appointment', 'deal')
+  AND o.status NOT IN ('cancelled', 'draft')
+UNION ALL
+-- won-deal conversions (CRM verticals)
+SELECT o.tenant_id, 'conversion', 'crm',
+       COALESCE(pp.metadata->>'sourceId', pp.metadata->>'sourceName', o.metadata->>'origin'),
+       o.updated_at,
+       o.total
+FROM public.orders o
+LEFT JOIN public.people pp ON pp.id = o.party_id
+WHERE o.kind = 'deal' AND o.status = 'won';
+
+GRANT SELECT ON public.v_marketing_attribution TO authenticated;
+`;
+var MIGRATION_007_AGENT_RPCS = `-- ============================================================================
+-- plugin-marketing 007: server-plane agent write RPC.
+--
+-- public.agent_marketing_create_campaign \u2014 guarded campaign create for the
+-- assistant. Mirrors agent_agenda_create_appointment (agenda 005):
+--   * actor-authorized: public.agent_guard (spine 015) runs role\u2192plan\u2192limit
+--     BEFORE anything \u2014 denial comes back as structured jsonb;
+--   * channel is validated against the tenant's plg_marketing_channels rows
+--     (key or label, case/punctuation-insensitive); when the tenant has no
+--     channel rows yet (surface not opened \u2192 lazy seed not run) the raw key is
+--     accepted as-is;
+--   * audited: audit_logs row with the acting user.
+--
+-- Contract (all agent_* RPCs): (p_tenant_id, p_actor_user_id, p_payload jsonb)
+-- \u2192 jsonb {ok:true, id, record:{...}} | {ok:false, denial:{...}} | {ok:false,
+-- error text}. GRANT authenticated+service_role \u2014 NEVER anon.
+-- ============================================================================
+
+CREATE OR REPLACE FUNCTION public.agent_marketing_create_campaign(
+  p_tenant_id uuid,
+  p_actor_user_id uuid,
+  p_payload jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_denial jsonb;
+  v_used int;
+  v_name text;
+  v_channel_raw text;
+  v_channel_key text;
+  v_status text;
+  v_starts timestamptz;
+  v_ends timestamptz;
+  v_spend numeric;
+  v_has_channels boolean;
+  v_id uuid;
+BEGIN
+  -- \u2500\u2500 payload \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+  v_name := left(trim(p_payload->>'name'), 200);
+  v_channel_raw := trim(p_payload->>'channel_key');
+  v_status := COALESCE(NULLIF(trim(p_payload->>'status'), ''), 'draft');
+  v_spend := COALESCE(NULLIF(p_payload->>'spend', '')::numeric, 0);
+  BEGIN
+    v_starts := NULLIF(p_payload->>'starts_at', '')::timestamptz;
+    v_ends := NULLIF(p_payload->>'ends_at', '')::timestamptz;
+  EXCEPTION WHEN OTHERS THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'invalid payload: ' || SQLERRM);
+  END;
+  IF v_name IS NULL OR v_name = '' OR v_channel_raw IS NULL OR v_channel_raw = '' THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'name and channel_key are required');
+  END IF;
+  IF v_status NOT IN ('active', 'paused', 'ended', 'draft') THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'status must be one of active|paused|ended|draft');
+  END IF;
+
+  -- \u2500\u2500 authorization: role \u2192 plan \u2192 campaigns_active cap \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+  SELECT count(*) INTO v_used FROM plg_marketing_campaigns c
+  WHERE c.tenant_id = p_tenant_id AND c.status = 'active';
+  v_denial := agent_guard(p_tenant_id, p_actor_user_id,
+                          'marketing', 'create', 'campaigns_active', v_used,
+                          CASE WHEN v_status = 'active' THEN 1 ELSE 0 END);
+  IF v_denial IS NOT NULL THEN
+    RETURN jsonb_build_object('ok', false, 'denial', v_denial);
+  END IF;
+
+  -- \u2500\u2500 channel resolution (key or label, normalized) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+  SELECT EXISTS (SELECT 1 FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id)
+    INTO v_has_channels;
+  IF v_has_channels THEN
+    SELECT ch.channel_key INTO v_channel_key
+    FROM plg_marketing_channels ch
+    WHERE ch.tenant_id = p_tenant_id
+      AND (
+        regexp_replace(lower(ch.channel_key), '[^a-z0-9]', '', 'g')
+          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')
+        OR regexp_replace(lower(ch.label), '[^a-z0-9]', '', 'g')
+          = regexp_replace(lower(v_channel_raw), '[^a-z0-9]', '', 'g')
+      )
+    LIMIT 1;
+    IF v_channel_key IS NULL THEN
+      RETURN jsonb_build_object('ok', false, 'error',
+        'unknown channel "' || v_channel_raw || '" \u2014 valid channels: ' ||
+        COALESCE((SELECT string_agg(ch.channel_key, ', ' ORDER BY ch.channel_key)
+                  FROM plg_marketing_channels ch WHERE ch.tenant_id = p_tenant_id), ''));
+    END IF;
+  ELSE
+    v_channel_key := v_channel_raw;
+  END IF;
+
+  -- \u2500\u2500 write + audit \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+  INSERT INTO plg_marketing_campaigns (tenant_id, name, channel_key, status, starts_at, ends_at, spend)
+  VALUES (p_tenant_id, v_name, v_channel_key, v_status, COALESCE(v_starts, now()), v_ends, v_spend)
+  RETURNING id INTO v_id;
+
+  INSERT INTO audit_logs (tenant_id, user_id, action, entity_type, entity_id, metadata)
+  VALUES (p_tenant_id, p_actor_user_id, 'agent.createCampaign', 'marketing_campaign', v_id::text,
+          jsonb_build_object('payload', p_payload));
+
+  RETURN jsonb_build_object(
+    'ok', true,
+    'id', v_id,
+    'record', jsonb_build_object(
+      'id', v_id,
+      'name', v_name,
+      'channel_key', v_channel_key,
+      'status', v_status,
+      'starts_at', COALESCE(v_starts, now()),
+      'spend', v_spend
+    )
+  );
+END;
+$$;
+
+REVOKE ALL ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM public;
+REVOKE EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb) FROM anon;
+GRANT EXECUTE ON FUNCTION public.agent_marketing_create_campaign(uuid, uuid, jsonb)
+  TO authenticated, service_role;
+`;
 var INTEGRATIONS = "plg_marketing_ranklayer_integrations";
 var SYNC_LOG = "plg_marketing_ranklayer_sync_log";
-function getClient2() {
+function getClient3() {
   const supabase = core.getSupabaseClientOptional();
   if (!supabase) throw new Error("[ranklayer] Supabase not initialized");
   return supabase;
 }
-function requireTenantId2() {
+function requireTenantId3() {
   const tenantId = core.getActiveTenantId();
   if (!tenantId) throw new Error("[ranklayer] No active tenant");
   return tenantId;
@@ -3856,11 +4421,11 @@ function createRankLayerProvider() {
     async getIntegration() {
       const tenantId = core.getActiveTenantId();
       if (!tenantId) return null;
-      const { data } = await getClient2().from(INTEGRATIONS).select("*").eq("tenant_id", tenantId).maybeSingle();
+      const { data } = await getClient3().from(INTEGRATIONS).select("*").eq("tenant_id", tenantId).maybeSingle();
       return data ? toIntegration(data) : null;
     },
     async saveIntegration(values) {
-      const tenantId = requireTenantId2();
+      const tenantId = requireTenantId3();
       const payload = {
         tenant_id: tenantId,
         api_key: values.apiKey,
@@ -3868,14 +4433,14 @@ function createRankLayerProvider() {
         active: true,
         updated_at: (/* @__PURE__ */ new Date()).toISOString()
       };
-      const { data, error } = await getClient2().from(INTEGRATIONS).upsert(payload, { onConflict: "tenant_id" }).select("*").single();
+      const { data, error } = await getClient3().from(INTEGRATIONS).upsert(payload, { onConflict: "tenant_id" }).select("*").single();
       if (error) throw error;
       return toIntegration(data);
     },
     async disconnect() {
       const tenantId = core.getActiveTenantId();
       if (!tenantId) return;
-      await getClient2().from(INTEGRATIONS).delete().eq("tenant_id", tenantId);
+      await getClient3().from(INTEGRATIONS).delete().eq("tenant_id", tenantId);
     },
     // SCAFFOLD: no RankLayer API yet — accept any non-empty key so the connect
     // flow can be exercised. Replace with a real credential check in the PR.
@@ -3886,7 +4451,7 @@ function createRankLayerProvider() {
       return { ok: true, message: "Chave aceita (valida\xE7\xE3o real pendente \u2014 integra\xE7\xE3o em prepara\xE7\xE3o)." };
     },
     async getSyncLog(integrationId) {
-      const { data } = await getClient2().from(SYNC_LOG).select("*").eq("integration_id", integrationId).order("created_at", { ascending: false }).limit(20);
+      const { data } = await getClient3().from(SYNC_LOG).select("*").eq("integration_id", integrationId).order("created_at", { ascending: false }).limit(20);
       return (data ?? []).map((r) => ({
         id: r.id,
         createdAt: r.created_at,
@@ -4352,14 +4917,21 @@ function resolveConfig(options) {
   };
   return { config, domain };
 }
-function createSafeProvider(config, domain) {
-  void core.getSupabaseClientOptional();
-  return createMockMarketingProvider({ channels: config.channels, conversion: config.conversion, domain });
+function createSafeProvider(config, domain, options) {
+  return core.createSafeDataProvider(
+    () => createSupabaseMarketingProvider({
+      channels: config.channels,
+      conversion: config.conversion,
+      attributionBridge: options?.attributionBridge,
+      sitesBridge: options?.sitesBridge
+    }),
+    () => createMockMarketingProvider({ channels: config.channels, conversion: config.conversion, domain })
+  );
 }
 function createMarketingPlugin(options) {
   core.registerTranslations(marketingLocales);
   const { config, domain } = resolveConfig(options);
-  const provider2 = options?.dataProvider ?? createSafeProvider(config, domain);
+  const provider2 = options?.dataProvider ?? createSafeProvider(config, domain, options);
   const store = createMarketingStore(provider2);
   const dashboardWidgets = createMarketingDashboardWidgets({ config, provider: provider2, store });
   const contentProvider = options?.contentPlanner?.dataProvider ?? core.createSafeDataProvider(
@@ -4409,6 +4981,94 @@ function createMarketingPlugin(options) {
       ...config.modules.contentPlanner ? [{ id: "marketing.content", label: config.labels.content, group: "Engage" }] : [],
       ...config.modules.blog ? [{ id: "marketing.blog", label: config.labels.blog, group: "Engage" }] : []
     ],
+    declaredLimits: [
+      ...config.modules.campaigns ? [{ key: "campaigns_active", label: "Active campaigns", table: T.campaigns }] : [],
+      ...config.modules.contentPlanner ? [{ key: "content_posts_month", label: "Content posts / month", table: "plg_marketing_content_posts", period: "month" }] : [],
+      ...config.modules.blog ? [{ key: "blog_posts", label: "Blog posts", table: "plg_blog_posts" }] : []
+    ],
+    // Read-models for the agent's data primitives (searchRecords/queryData) —
+    // mirrors agenda's `agenda:appointments`. Keys are stable ASCII; fields are
+    // the provider's camelCase output shape.
+    queryEntities: [
+      ...config.modules.campaigns ? [{
+        key: "marketing:campaigns",
+        writable: false,
+        entity: {
+          name: "Campaign",
+          namePlural: "Campaigns",
+          icon: "Megaphone",
+          permission: { feature: "marketing", action: "read" },
+          fields: [
+            { key: "name", label: "Name", type: "text", searchable: true },
+            { key: "channelKey", label: "Channel", type: "text", searchable: true },
+            { key: "channelLabel", label: "Channel label", type: "text" },
+            { key: "status", label: "Status", type: "text" },
+            { key: "startsAt", label: "Starts at", type: "text" },
+            { key: "endsAt", label: "Ends at", type: "text" },
+            { key: "spend", label: "Spend", type: "number" },
+            { key: "createdAt", label: "Created at", type: "text" }
+          ],
+          data: {
+            table: "v_marketing_campaigns",
+            tenantScoped: true,
+            searchColumns: ["name", "channel_key"]
+          }
+        }
+      }] : [],
+      ...config.modules.channels ? [{
+        key: "marketing:channels",
+        writable: false,
+        entity: {
+          name: "Marketing channel",
+          namePlural: "Marketing channels",
+          icon: "Radio",
+          permission: { feature: "marketing", action: "read" },
+          fields: [
+            { key: "channelKey", label: "Key", type: "text", searchable: true },
+            { key: "label", label: "Channel", type: "text", searchable: true },
+            { key: "kind", label: "Type", type: "text" },
+            { key: "isActive", label: "Active", type: "boolean" },
+            { key: "monthlySpend", label: "Monthly spend", type: "number" }
+          ],
+          data: {
+            table: "v_marketing_channels",
+            tenantScoped: true,
+            searchColumns: ["label", "channel_key"]
+          }
+        }
+      }] : [],
+      ...config.modules.contentPlanner ? [{
+        key: "marketing:contentPosts",
+        writable: false,
+        entity: {
+          name: "Content post",
+          namePlural: "Content posts",
+          icon: "FileText",
+          permission: { feature: "marketing.content", action: "read" },
+          fields: [
+            { key: "title", label: "Title", type: "text", searchable: true },
+            { key: "format", label: "Format", type: "text" },
+            { key: "status", label: "Status", type: "text" },
+            { key: "weekNumber", label: "Week", type: "number" },
+            { key: "scheduledDate", label: "Scheduled date", type: "text" },
+            { key: "hook", label: "Hook", type: "text", searchable: true }
+          ],
+          data: {
+            table: T.contentPosts,
+            tenantScoped: true,
+            searchColumns: ["title", "hook"]
+          }
+        }
+      }] : []
+    ],
+    declaredRpcs: [
+      ...config.modules.campaigns ? [{
+        name: "agent_marketing_create_campaign",
+        kind: "write",
+        description: "Guarded campaign create: agent_guard (role\u2192plan\u2192campaigns_active cap), channel validated against the tenant channel set, audited.",
+        audits: true
+      }] : []
+    ],
     navigation: [
       {
         section: options?.navSection ?? "main",
@@ -4467,6 +5127,24 @@ function createMarketingPlugin(options) {
         version: "1.3.0",
         sql: MIGRATION_004_RANKLAYER,
         description: "RankLayer connector state: plg_marketing_ranklayer_integrations + _sync_log (tenant RLS)"
+      },
+      {
+        id: "marketing-005-analytics-base",
+        version: "1.4.0",
+        sql: MIGRATION_005_ANALYTICS_BASE,
+        description: "Analytics base: plg_marketing_channels + plg_marketing_campaigns with canonical tenant RLS"
+      },
+      {
+        id: "marketing-006-analytics-views",
+        version: "1.4.0",
+        sql: MIGRATION_006_ANALYTICS_VIEWS,
+        description: "Read views v_marketing_channels/_campaigns + generic spine-only v_marketing_attribution"
+      },
+      {
+        id: "marketing-007-agent-rpcs",
+        version: "1.4.0",
+        sql: MIGRATION_007_AGENT_RPCS,
+        description: "agent_marketing_create_campaign \u2014 guarded, audited server-plane campaign create"
       }
     ],
     // RankLayer SEO connector — renders in the Integrações settings tab. Scaffold
@@ -4512,18 +5190,25 @@ function createMarketingPlugin(options) {
       {
         id: "marketing.create-campaign",
         name: "createCampaign",
-        description: "Creates an acquisition campaign on a channel.",
+        description: "Creates an acquisition campaign on a channel. Resolve the channel first via queryData/searchRecords on marketing channels (use its channel key). The user confirms before creating.",
         icon: "Plus",
         mode: "persist",
+        limitKey: "campaigns_active",
+        execution: { plane: "server", kind: "rpc", rpc: "agent_marketing_create_campaign" },
         category: "Marketing",
         parameters: {
           type: "object",
           properties: {
             name: { type: "string", description: "Campaign name" },
-            channelId: { type: "string", description: "Acquisition channel id" }
+            channel_key: { type: "string", description: "Acquisition channel key (e.g. 'instagram') or its label" },
+            status: { type: "string", enum: ["draft", "active", "paused"], description: "Defaults to draft" },
+            starts_at: { type: "string", description: "ISO start date-time (defaults to now)" },
+            ends_at: { type: "string", description: "ISO end date-time (optional)" },
+            spend: { type: "number", description: "Planned/committed spend (optional)" }
           },
-          required: ["name", "channelId"]
+          required: ["name", "channel_key"]
         },
+        suggestions: [{ label: "Create an Instagram campaign for this month" }],
         permission: { feature: "marketing", action: "create" }
       }
     ],
@@ -4547,5 +5232,6 @@ exports.createMarketingPlugin = createMarketingPlugin;
 exports.createMockContentPlannerProvider = createMockContentPlannerProvider;
 exports.createMockMarketingProvider = createMockMarketingProvider;
 exports.createSupabaseContentPlannerProvider = createSupabaseContentPlannerProvider;
+exports.createSupabaseMarketingProvider = createSupabaseMarketingProvider;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map