@fayz-ai/plugin-tasks 0.1.7 → 0.8.0

package/src/data/capability.test.ts

@@ -2,7 +2,7 @@
 // Proves the data slice of the Plugin Capability Contract against the mock
 // provider: typed seed is present, writes persist and surface in queries and
 // the summary, and updates/deletes round-trip. This is the template other
-// plugins copy — see PLUGIN_PATTERNS.md → capability anatomy.
+// plugins copy — see docs/PLUGIN-PATTERNS.md → capability anatomy.
 import { describe, it, expect } from 'vitest'
 import { createMockTasksProvider } from './mock'
 

package/src/data/supabase.ts

@@ -2,6 +2,7 @@ import type { TasksDataProvider } from './types'
 import type { Task, TaskLabel, TasksSummary, TaskStatus } from '../types'
 import { getSupabaseClientOptional, getActiveTenantId } from '@fayz-ai/core'
 import { getTasksTenantId } from '../lib/tenant'
+import { T } from './tables'
 
 function getTenantId(): string | undefined {
   // Local override wins; else use the app's active tenant so writes pass RLS.
@@ -35,7 +36,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
       const tenantId = getTenantId()
       if (!tenantId) return []
       let q = getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .select('*')
         .eq('tenant_id', tenantId)
 
@@ -72,7 +73,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
 
     async getTaskById(id) {
       const { data } = await getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .select('*')
         .eq('id', id)
         .maybeSingle()
@@ -81,7 +82,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
 
     async getSubtasks(parentId) {
       const { data } = await getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .select('*')
         .eq('parent_id', parentId)
         .order('position', { ascending: true })
@@ -94,7 +95,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
 
       // Get max position for the status group
       const { data: maxData } = await getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .select('position')
         .eq('tenant_id', tenantId)
         .eq('status', input.status ?? 'todo')
@@ -104,7 +105,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
       const maxPos = maxData?.[0]?.position ?? -1
 
       const { data, error } = await getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .insert({
           tenant_id: tenantId,
           title: input.title,
@@ -135,7 +136,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
       if (input.position !== undefined) payload.position = input.position
 
       const { data, error } = await getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .update(payload)
         .eq('id', id)
         .select('*')
@@ -145,12 +146,12 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
     },
 
     async deleteTask(id) {
-      await getClient().from('tsk_tasks').delete().eq('id', id)
+      await getClient().from(T.tasks).delete().eq('id', id)
     },
 
     async reorderTask(id, newPosition, status) {
       await getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .update({ position: newPosition, status, updated_at: new Date().toISOString() })
         .eq('id', id)
     },
@@ -159,7 +160,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
       const tenantId = getTenantId()
       if (!tenantId) return []
       const { data } = await getClient()
-        .from('tsk_labels')
+        .from(T.labels)
         .select('*')
         .eq('tenant_id', tenantId)
         .eq('is_active', true)
@@ -172,7 +173,7 @@ export function createSupabaseTasksProvider(): TasksDataProvider {
       if (!tenantId) return { total: 0, todo: 0, inProgress: 0, done: 0, overdue: 0, dueToday: 0, highPriority: 0 }
 
       const { data } = await getClient()
-        .from('tsk_tasks')
+        .from(T.tasks)
         .select('status, priority, due_date')
         .eq('tenant_id', tenantId)
         .is('parent_id', null)

package/src/data/tables.ts

@@ -0,0 +1,6 @@
+// Physical table names for the tasks plugin (plg_tasks_* prefix). Import T and
+// reference T.<key> in the data provider so a rename lands in exactly one place.
+export const T = {
+  tasks: 'plg_tasks_tasks',
+  labels: 'plg_tasks_labels',
+} as const

package/src/index.ts

@@ -11,6 +11,7 @@ import { tasksLocales } from './locales'
 import { tasksRegistries } from './registries'
 import { TasksGeneralSettings } from './components/TasksGeneralSettings'
 import { TasksTopbarButton } from './components/TasksTopbarButton'
+import { MIGRATION_000_PLG_RENAME, MIGRATION_001_TASKS_BASE } from './migrations'
 
 // ---------------------------------------------------------------------------
 // Public types
@@ -49,60 +50,6 @@ function resolveConfig(options?: TasksPluginOptions): ResolvedTasksConfig {
   }
 }
 
-// ---------------------------------------------------------------------------
-// Migration SQL
-// ---------------------------------------------------------------------------
-
-const MIGRATION_001 = `-- Tasks Plugin: Base Tables
-CREATE TABLE IF NOT EXISTS public.tsk_labels (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  color text NOT NULL DEFAULT '#6366f1',
-  is_active boolean NOT NULL DEFAULT true,
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-ALTER TABLE public.tsk_labels ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_tsk_labels_tenant ON public.tsk_labels(tenant_id);
-
-CREATE TABLE IF NOT EXISTS public.tsk_tasks (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
-  title text NOT NULL,
-  description text,
-  status text NOT NULL DEFAULT 'todo' CHECK (status IN ('todo','in_progress','done','cancelled')),
-  priority text NOT NULL DEFAULT 'medium' CHECK (priority IN ('low','medium','high','urgent')),
-  due_date date,
-  assigned_to_id uuid,
-  assigned_to_name text,
-  parent_id uuid REFERENCES public.tsk_tasks(id) ON DELETE CASCADE,
-  labels jsonb NOT NULL DEFAULT '[]'::jsonb,
-  position integer NOT NULL DEFAULT 0,
-  created_by_id uuid,
-  created_by_name text,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-ALTER TABLE public.tsk_tasks ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_tenant ON public.tsk_tasks(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_status ON public.tsk_tasks(tenant_id, status);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_parent ON public.tsk_tasks(parent_id);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_assigned ON public.tsk_tasks(assigned_to_id);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_due ON public.tsk_tasks(tenant_id, due_date) WHERE due_date IS NOT NULL;
-
--- RLS policies for tsk_tasks
-CREATE POLICY tsk_tasks_select ON public.tsk_tasks FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY tsk_tasks_insert ON public.tsk_tasks FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY tsk_tasks_update ON public.tsk_tasks FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY tsk_tasks_delete ON public.tsk_tasks FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.tsk_tasks TO authenticated;
-
--- RLS policies for tsk_labels
-CREATE POLICY tsk_labels_select ON public.tsk_labels FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY tsk_labels_insert ON public.tsk_labels FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY tsk_labels_update ON public.tsk_labels FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-CREATE POLICY tsk_labels_delete ON public.tsk_labels FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.tsk_labels TO authenticated;`
 
 // ---------------------------------------------------------------------------
 // Factory
@@ -193,11 +140,17 @@ export function createTasksPlugin(options?: TasksPluginOptions): PluginManifest
     ],
 
     migrations: [
+      {
+        id: 'tasks-000-plg-rename',
+        version: '1.0.0',
+        sql: MIGRATION_000_PLG_RENAME,
+        description: 'Rename legacy tsk_* tables to plg_tasks_* in-place for pools provisioned before the industry-pool rename (guarded no-op on fresh pools)',
+      },
       {
         id: 'tasks-001-base-tables',
         version: '1.0.0',
-        sql: MIGRATION_001,
-        description: 'Create tsk_tasks and tsk_labels tables',
+        sql: MIGRATION_001_TASKS_BASE,
+        description: 'Create plg_tasks_tasks and plg_tasks_labels',
       },
     ],
 

package/src/migrations/000_plg_rename.sql

@@ -0,0 +1,12 @@
+-- 000_plg_rename.sql — rename legacy tasks tables to plg_tasks_* for pools
+-- provisioned before the industry-pool rename. Guarded: fires only when legacy
+-- name exists and target does not, so fresh pools skip every branch.
+DO $$
+BEGIN
+  IF to_regclass('public.tsk_tasks') IS NOT NULL AND to_regclass('public.plg_tasks_tasks') IS NULL THEN
+    ALTER TABLE public.tsk_tasks RENAME TO plg_tasks_tasks;
+  END IF;
+  IF to_regclass('public.tsk_labels') IS NOT NULL AND to_regclass('public.plg_tasks_labels') IS NULL THEN
+    ALTER TABLE public.tsk_labels RENAME TO plg_tasks_labels;
+  END IF;
+END $$;

package/src/migrations/001_tasks_base.sql

@@ -1,22 +1,22 @@
 -- Tasks Plugin: Base Tables
--- Prefix: tsk_
+-- Prefix: plg_tasks_
 
 -- Label definitions for categorizing tasks
-CREATE TABLE IF NOT EXISTS public.tsk_labels (
+CREATE TABLE IF NOT EXISTS public.plg_tasks_labels (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   name text NOT NULL,
   color text NOT NULL DEFAULT '#6366f1',
   is_active boolean NOT NULL DEFAULT true,
   created_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.tsk_labels ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_tsk_labels_tenant ON public.tsk_labels(tenant_id);
+ALTER TABLE public.plg_tasks_labels ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_labels_tenant ON public.plg_tasks_labels(tenant_id);
 
 -- Main tasks table (subtasks via parent_id self-reference)
-CREATE TABLE IF NOT EXISTS public.tsk_tasks (
+CREATE TABLE IF NOT EXISTS public.plg_tasks_tasks (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES saas_core.tenants(id) ON DELETE CASCADE,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
   title text NOT NULL,
   description text,
   status text NOT NULL DEFAULT 'todo'
@@ -26,7 +26,7 @@ CREATE TABLE IF NOT EXISTS public.tsk_tasks (
   due_date date,
   assigned_to_id uuid,
   assigned_to_name text,
-  parent_id uuid REFERENCES public.tsk_tasks(id) ON DELETE CASCADE,
+  parent_id uuid REFERENCES public.plg_tasks_tasks(id) ON DELETE CASCADE,
   labels jsonb NOT NULL DEFAULT '[]'::jsonb,
   position integer NOT NULL DEFAULT 0,
   created_by_id uuid,
@@ -34,32 +34,32 @@ CREATE TABLE IF NOT EXISTS public.tsk_tasks (
   created_at timestamptz NOT NULL DEFAULT now(),
   updated_at timestamptz NOT NULL DEFAULT now()
 );
-ALTER TABLE public.tsk_tasks ENABLE ROW LEVEL SECURITY;
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_tenant ON public.tsk_tasks(tenant_id);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_status ON public.tsk_tasks(tenant_id, status);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_parent ON public.tsk_tasks(parent_id);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_assigned ON public.tsk_tasks(assigned_to_id);
-CREATE INDEX IF NOT EXISTS idx_tsk_tasks_due ON public.tsk_tasks(tenant_id, due_date)
+ALTER TABLE public.plg_tasks_tasks ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_tenant ON public.plg_tasks_tasks(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_status ON public.plg_tasks_tasks(tenant_id, status);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_parent ON public.plg_tasks_tasks(parent_id);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_assigned ON public.plg_tasks_tasks(assigned_to_id);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_due ON public.plg_tasks_tasks(tenant_id, due_date)
   WHERE due_date IS NOT NULL;
 
--- RLS policies for tsk_tasks (idempotent — DROP IF EXISTS before CREATE)
-DROP POLICY IF EXISTS tsk_tasks_select ON public.tsk_tasks;
-CREATE POLICY tsk_tasks_select ON public.tsk_tasks FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-DROP POLICY IF EXISTS tsk_tasks_insert ON public.tsk_tasks;
-CREATE POLICY tsk_tasks_insert ON public.tsk_tasks FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-DROP POLICY IF EXISTS tsk_tasks_update ON public.tsk_tasks;
-CREATE POLICY tsk_tasks_update ON public.tsk_tasks FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-DROP POLICY IF EXISTS tsk_tasks_delete ON public.tsk_tasks;
-CREATE POLICY tsk_tasks_delete ON public.tsk_tasks FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.tsk_tasks TO authenticated;
+-- RLS policies for plg_tasks_tasks (idempotent — DROP IF EXISTS before CREATE)
+DROP POLICY IF EXISTS plg_tasks_tasks_select ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_select ON public.plg_tasks_tasks FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_tasks_insert ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_insert ON public.plg_tasks_tasks FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_tasks_update ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_update ON public.plg_tasks_tasks FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_tasks_delete ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_delete ON public.plg_tasks_tasks FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_tasks_tasks TO authenticated;
 
--- RLS policies for tsk_labels (idempotent)
-DROP POLICY IF EXISTS tsk_labels_select ON public.tsk_labels;
-CREATE POLICY tsk_labels_select ON public.tsk_labels FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-DROP POLICY IF EXISTS tsk_labels_insert ON public.tsk_labels;
-CREATE POLICY tsk_labels_insert ON public.tsk_labels FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
-DROP POLICY IF EXISTS tsk_labels_update ON public.tsk_labels;
-CREATE POLICY tsk_labels_update ON public.tsk_labels FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-DROP POLICY IF EXISTS tsk_labels_delete ON public.tsk_labels;
-CREATE POLICY tsk_labels_delete ON public.tsk_labels FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
-GRANT SELECT, INSERT, UPDATE, DELETE ON public.tsk_labels TO authenticated;
+-- RLS policies for plg_tasks_labels (idempotent)
+DROP POLICY IF EXISTS plg_tasks_labels_select ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_select ON public.plg_tasks_labels FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_labels_insert ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_insert ON public.plg_tasks_labels FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_labels_update ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_update ON public.plg_tasks_labels FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_labels_delete ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_delete ON public.plg_tasks_labels FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_tasks_labels TO authenticated;

package/src/migrations/index.ts

@@ -0,0 +1,89 @@
+// AUTO-GENERATED from 000_plg_rename.sql, 001_tasks_base.sql — regenerate with scripts/embed-migrations.mjs
+// SQL files are the source of truth; this inline copy lets the manifest declare
+// migrations as data. Do not edit by hand — run the embed script instead.
+
+export const MIGRATION_000_PLG_RENAME = `-- 000_plg_rename.sql — rename legacy tasks tables to plg_tasks_* for pools
+-- provisioned before the industry-pool rename. Guarded: fires only when legacy
+-- name exists and target does not, so fresh pools skip every branch.
+DO $$
+BEGIN
+  IF to_regclass('public.tsk_tasks') IS NOT NULL AND to_regclass('public.plg_tasks_tasks') IS NULL THEN
+    ALTER TABLE public.tsk_tasks RENAME TO plg_tasks_tasks;
+  END IF;
+  IF to_regclass('public.tsk_labels') IS NOT NULL AND to_regclass('public.plg_tasks_labels') IS NULL THEN
+    ALTER TABLE public.tsk_labels RENAME TO plg_tasks_labels;
+  END IF;
+END $$;
+`
+
+export const MIGRATION_001_TASKS_BASE = `-- Tasks Plugin: Base Tables
+-- Prefix: plg_tasks_
+
+-- Label definitions for categorizing tasks
+CREATE TABLE IF NOT EXISTS public.plg_tasks_labels (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  name text NOT NULL,
+  color text NOT NULL DEFAULT '#6366f1',
+  is_active boolean NOT NULL DEFAULT true,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_tasks_labels ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_labels_tenant ON public.plg_tasks_labels(tenant_id);
+
+-- Main tasks table (subtasks via parent_id self-reference)
+CREATE TABLE IF NOT EXISTS public.plg_tasks_tasks (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  title text NOT NULL,
+  description text,
+  status text NOT NULL DEFAULT 'todo'
+    CHECK (status IN ('todo', 'in_progress', 'done', 'cancelled')),
+  priority text NOT NULL DEFAULT 'medium'
+    CHECK (priority IN ('low', 'medium', 'high', 'urgent')),
+  due_date date,
+  assigned_to_id uuid,
+  assigned_to_name text,
+  parent_id uuid REFERENCES public.plg_tasks_tasks(id) ON DELETE CASCADE,
+  labels jsonb NOT NULL DEFAULT '[]'::jsonb,
+  position integer NOT NULL DEFAULT 0,
+  created_by_id uuid,
+  created_by_name text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+ALTER TABLE public.plg_tasks_tasks ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_tenant ON public.plg_tasks_tasks(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_status ON public.plg_tasks_tasks(tenant_id, status);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_parent ON public.plg_tasks_tasks(parent_id);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_assigned ON public.plg_tasks_tasks(assigned_to_id);
+CREATE INDEX IF NOT EXISTS idx_plg_tasks_tasks_due ON public.plg_tasks_tasks(tenant_id, due_date)
+  WHERE due_date IS NOT NULL;
+
+-- RLS policies for plg_tasks_tasks (idempotent — DROP IF EXISTS before CREATE)
+DROP POLICY IF EXISTS plg_tasks_tasks_select ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_select ON public.plg_tasks_tasks FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_tasks_insert ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_insert ON public.plg_tasks_tasks FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_tasks_update ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_update ON public.plg_tasks_tasks FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_tasks_delete ON public.plg_tasks_tasks;
+CREATE POLICY plg_tasks_tasks_delete ON public.plg_tasks_tasks FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_tasks_tasks TO authenticated;
+
+-- RLS policies for plg_tasks_labels (idempotent)
+DROP POLICY IF EXISTS plg_tasks_labels_select ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_select ON public.plg_tasks_labels FOR SELECT TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_labels_insert ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_insert ON public.plg_tasks_labels FOR INSERT TO authenticated WITH CHECK (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_labels_update ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_update ON public.plg_tasks_labels FOR UPDATE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+DROP POLICY IF EXISTS plg_tasks_labels_delete ON public.plg_tasks_labels;
+CREATE POLICY plg_tasks_labels_delete ON public.plg_tasks_labels FOR DELETE TO authenticated USING (tenant_id IN (SELECT public.user_tenant_ids()));
+GRANT SELECT, INSERT, UPDATE, DELETE ON public.plg_tasks_labels TO authenticated;
+`
+
+export const MIGRATIONS: Array<{ id: string; sql: string }> = [
+  { id: "000_plg_rename", sql: MIGRATION_000_PLG_RENAME },
+  { id: "001_tasks_base", sql: MIGRATION_001_TASKS_BASE },
+]

package/src/registries.ts

@@ -1,5 +1,6 @@
 import type { PluginRegistryDef } from '@fayz-ai/core'
 import type { EntityDef } from '@fayz-ai/core'
+import { T } from './data/tables'
 
 const taskLabelEntity: EntityDef = {
   name: 'Task Label',
@@ -12,7 +13,7 @@ const taskLabelEntity: EntityDef = {
     { key: 'color', label: 'Color', type: 'text', showInTable: true, defaultValue: '#6366f1' },
     { key: 'isActive', label: 'Active', type: 'boolean', showInTable: true, defaultValue: true },
   ],
-  data: { table: 'tsk_labels', tenantScoped: true },
+  data: { table: T.labels, tenantScoped: true },
 }
 
 export const tasksRegistries: PluginRegistryDef[] = [