aios-core 2.1.0

package/.aios-core/product/templates/tmpl-stored-proc.sql

@@ -0,0 +1,140 @@
+-- Stored Procedure Template
+-- Function: :function_name
+-- Created: :created_date
+-- Author: :author
+-- Description: :description
+--
+-- IMPORTANT: Consider security implications of SECURITY DEFINER vs SECURITY INVOKER
+
+-- =============================================================================
+-- BASIC FUNCTION TEMPLATE
+-- =============================================================================
+
+CREATE OR REPLACE FUNCTION :function_name(
+    -- Input parameters
+    p_param1 :param1_type,
+    p_param2 :param2_type DEFAULT NULL
+)
+RETURNS :return_type
+LANGUAGE plpgsql
+-- SECURITY DEFINER: Runs with function owner's privileges (use carefully)
+-- SECURITY INVOKER: Runs with caller's privileges (default, safer)
+SECURITY INVOKER
+-- STABLE: Doesn't modify database, same result for same inputs within transaction
+-- VOLATILE: May modify database or return different results (default)
+-- IMMUTABLE: Always returns same result for same inputs (for indexing)
+STABLE
+AS $$
+DECLARE
+    v_result :return_type;
+    v_variable :variable_type;
+BEGIN
+    -- Input validation
+    IF p_param1 IS NULL THEN
+        RAISE EXCEPTION 'p_param1 cannot be null';
+    END IF;
+
+    -- Main logic
+    SELECT column_name
+    INTO v_result
+    FROM :table_name
+    WHERE id = p_param1;
+
+    -- Return result
+    RETURN v_result;
+
+EXCEPTION
+    WHEN no_data_found THEN
+        RAISE EXCEPTION 'No data found for id: %', p_param1;
+    WHEN OTHERS THEN
+        RAISE EXCEPTION 'Error in :function_name: %', SQLERRM;
+END;
+$$;
+
+-- Grant execute permission
+GRANT EXECUTE ON FUNCTION :function_name(:param1_type, :param2_type) TO authenticated;
+
+-- Add function comment
+COMMENT ON FUNCTION :function_name IS ':description';
+
+-- =============================================================================
+-- FUNCTION RETURNING TABLE (for complex queries)
+-- =============================================================================
+
+CREATE OR REPLACE FUNCTION :function_name_table(
+    p_filter_param :filter_type DEFAULT NULL
+)
+RETURNS TABLE (
+    id UUID,
+    name TEXT,
+    created_at TIMESTAMPTZ
+)
+LANGUAGE plpgsql
+SECURITY INVOKER
+STABLE
+AS $$
+BEGIN
+    RETURN QUERY
+    SELECT
+        t.id,
+        t.name,
+        t.created_at
+    FROM :table_name t
+    WHERE
+        (p_filter_param IS NULL OR t.filter_column = p_filter_param)
+        AND t.user_id = auth.uid()  -- RLS-aware
+    ORDER BY t.created_at DESC;
+END;
+$$;
+
+-- =============================================================================
+-- FUNCTION WITH TRANSACTION (for mutations)
+-- =============================================================================
+
+CREATE OR REPLACE FUNCTION :function_name_mutation(
+    p_input_data JSONB
+)
+RETURNS UUID
+LANGUAGE plpgsql
+SECURITY INVOKER
+VOLATILE
+AS $$
+DECLARE
+    v_new_id UUID;
+BEGIN
+    -- Validate input
+    IF NOT (p_input_data ? 'required_field') THEN
+        RAISE EXCEPTION 'required_field is missing from input';
+    END IF;
+
+    -- Insert new record
+    INSERT INTO :table_name (
+        name,
+        data,
+        user_id,
+        created_at
+    ) VALUES (
+        p_input_data->>'name',
+        p_input_data->'data',
+        auth.uid(),
+        NOW()
+    )
+    RETURNING id INTO v_new_id;
+
+    -- Audit log (optional)
+    INSERT INTO audit_log (action, table_name, record_id, user_id)
+    VALUES ('INSERT', ':table_name', v_new_id, auth.uid());
+
+    RETURN v_new_id;
+END;
+$$;
+
+-- =============================================================================
+-- RPC ENDPOINT (Supabase-style)
+-- =============================================================================
+-- Call from client: supabase.rpc(':function_name', { p_param1: value })
+--
+-- For Supabase, ensure:
+-- 1. Function is in public schema
+-- 2. GRANT EXECUTE to appropriate roles
+-- 3. Consider using SECURITY DEFINER for bypassing RLS when needed

package/.aios-core/product/templates/tmpl-trigger.sql

@@ -0,0 +1,152 @@
+-- Trigger Template
+-- Table: :table_name
+-- Created: :created_date
+-- Author: :author
+-- Description: :description
+--
+-- IMPORTANT: Triggers run automatically - test thoroughly before deployment
+
+-- =============================================================================
+-- UPDATED_AT TRIGGER (Most Common)
+-- =============================================================================
+
+-- Trigger function: Updates updated_at column on row modification
+CREATE OR REPLACE FUNCTION update_updated_at_column()
+RETURNS TRIGGER AS $$
+BEGIN
+    NEW.updated_at = NOW();
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+-- Apply to table
+DROP TRIGGER IF EXISTS trigger_:table_name_updated_at ON :table_name;
+CREATE TRIGGER trigger_:table_name_updated_at
+    BEFORE UPDATE ON :table_name
+    FOR EACH ROW
+    EXECUTE FUNCTION update_updated_at_column();
+
+-- =============================================================================
+-- AUDIT LOG TRIGGER
+-- =============================================================================
+
+-- Audit log table (if not exists)
+CREATE TABLE IF NOT EXISTS audit_log (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    table_name TEXT NOT NULL,
+    record_id UUID NOT NULL,
+    action TEXT NOT NULL CHECK (action IN ('INSERT', 'UPDATE', 'DELETE')),
+    old_data JSONB,
+    new_data JSONB,
+    changed_by UUID REFERENCES auth.users(id),
+    changed_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_audit_log_table_record ON audit_log(table_name, record_id);
+CREATE INDEX IF NOT EXISTS idx_audit_log_changed_at ON audit_log(changed_at);
+
+-- Audit trigger function
+CREATE OR REPLACE FUNCTION audit_trigger_function()
+RETURNS TRIGGER AS $$
+BEGIN
+    IF TG_OP = 'INSERT' THEN
+        INSERT INTO audit_log (table_name, record_id, action, new_data, changed_by)
+        VALUES (TG_TABLE_NAME, NEW.id, 'INSERT', to_jsonb(NEW), auth.uid());
+        RETURN NEW;
+    ELSIF TG_OP = 'UPDATE' THEN
+        INSERT INTO audit_log (table_name, record_id, action, old_data, new_data, changed_by)
+        VALUES (TG_TABLE_NAME, NEW.id, 'UPDATE', to_jsonb(OLD), to_jsonb(NEW), auth.uid());
+        RETURN NEW;
+    ELSIF TG_OP = 'DELETE' THEN
+        INSERT INTO audit_log (table_name, record_id, action, old_data, changed_by)
+        VALUES (TG_TABLE_NAME, OLD.id, 'DELETE', to_jsonb(OLD), auth.uid());
+        RETURN OLD;
+    END IF;
+    RETURN NULL;
+END;
+$$ LANGUAGE plpgsql SECURITY DEFINER;
+
+-- Apply audit trigger to table
+DROP TRIGGER IF EXISTS trigger_:table_name_audit ON :table_name;
+CREATE TRIGGER trigger_:table_name_audit
+    AFTER INSERT OR UPDATE OR DELETE ON :table_name
+    FOR EACH ROW
+    EXECUTE FUNCTION audit_trigger_function();
+
+-- =============================================================================
+-- VALIDATION TRIGGER
+-- =============================================================================
+
+-- Custom validation trigger function
+CREATE OR REPLACE FUNCTION :table_name_validation_trigger()
+RETURNS TRIGGER AS $$
+BEGIN
+    -- Example: Validate email format
+    IF NEW.email IS NOT NULL AND NEW.email !~ '^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$' THEN
+        RAISE EXCEPTION 'Invalid email format: %', NEW.email;
+    END IF;
+
+    -- Example: Validate status transitions
+    IF TG_OP = 'UPDATE' AND OLD.status = 'completed' AND NEW.status != 'completed' THEN
+        RAISE EXCEPTION 'Cannot change status from completed';
+    END IF;
+
+    -- Example: Auto-set values
+    IF TG_OP = 'INSERT' THEN
+        NEW.created_by = COALESCE(NEW.created_by, auth.uid());
+    END IF;
+
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS trigger_:table_name_validation ON :table_name;
+CREATE TRIGGER trigger_:table_name_validation
+    BEFORE INSERT OR UPDATE ON :table_name
+    FOR EACH ROW
+    EXECUTE FUNCTION :table_name_validation_trigger();
+
+-- =============================================================================
+-- SOFT DELETE TRIGGER
+-- =============================================================================
+
+-- Instead of deleting, set deleted_at timestamp
+CREATE OR REPLACE FUNCTION soft_delete_trigger()
+RETURNS TRIGGER AS $$
+BEGIN
+    -- Instead of DELETE, UPDATE with deleted_at
+    UPDATE :table_name
+    SET deleted_at = NOW()
+    WHERE id = OLD.id;
+
+    -- Return NULL to cancel the actual DELETE
+    RETURN NULL;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS trigger_:table_name_soft_delete ON :table_name;
+CREATE TRIGGER trigger_:table_name_soft_delete
+    BEFORE DELETE ON :table_name
+    FOR EACH ROW
+    EXECUTE FUNCTION soft_delete_trigger();
+
+-- =============================================================================
+-- NOTIFICATION TRIGGER (for Supabase Realtime)
+-- =============================================================================
+
+-- Notify on changes (Supabase handles this automatically for enabled tables)
+-- Manual implementation if needed:
+
+CREATE OR REPLACE FUNCTION notify_changes()
+RETURNS TRIGGER AS $$
+BEGIN
+    PERFORM pg_notify(
+        TG_TABLE_NAME || '_changes',
+        json_build_object(
+            'operation', TG_OP,
+            'record', CASE WHEN TG_OP = 'DELETE' THEN to_jsonb(OLD) ELSE to_jsonb(NEW) END
+        )::TEXT
+    );
+    RETURN COALESCE(NEW, OLD);
+END;
+$$ LANGUAGE plpgsql;

package/.aios-core/product/templates/tmpl-view-materialized.sql

@@ -0,0 +1,133 @@
+-- Materialized View Template
+-- View: :view_name
+-- Created: :created_date
+-- Author: :author
+-- Description: :description
+--
+-- Materialized views cache query results for performance
+-- IMPORTANT: Data is not live - must be refreshed periodically
+
+-- =============================================================================
+-- BASIC MATERIALIZED VIEW
+-- =============================================================================
+
+-- Drop existing view if exists
+DROP MATERIALIZED VIEW IF EXISTS :view_name CASCADE;
+
+-- Create materialized view
+CREATE MATERIALIZED VIEW :view_name AS
+SELECT
+    t.id,
+    t.name,
+    t.category,
+    t.created_at,
+    -- Aggregations
+    COUNT(r.id) AS related_count,
+    SUM(r.amount) AS total_amount,
+    AVG(r.rating) AS avg_rating,
+    -- Computed columns
+    CASE
+        WHEN t.status = 'active' THEN true
+        ELSE false
+    END AS is_active
+FROM :base_table t
+LEFT JOIN :related_table r ON r.parent_id = t.id
+WHERE t.deleted_at IS NULL
+GROUP BY t.id, t.name, t.category, t.created_at, t.status
+-- Store data sorted for efficient access
+WITH DATA;
+
+-- =============================================================================
+-- INDEXES ON MATERIALIZED VIEW
+-- =============================================================================
+
+-- Unique index (required for CONCURRENT refresh)
+CREATE UNIQUE INDEX IF NOT EXISTS idx_:view_name_id
+ON :view_name (id);
+
+-- Additional indexes for common queries
+CREATE INDEX IF NOT EXISTS idx_:view_name_category
+ON :view_name (category);
+
+CREATE INDEX IF NOT EXISTS idx_:view_name_created_at
+ON :view_name (created_at DESC);
+
+-- =============================================================================
+-- REFRESH FUNCTION
+-- =============================================================================
+
+-- Function to refresh the materialized view
+CREATE OR REPLACE FUNCTION refresh_:view_name()
+RETURNS void
+LANGUAGE plpgsql
+SECURITY DEFINER
+AS $$
+BEGIN
+    -- CONCURRENTLY allows queries during refresh (requires unique index)
+    REFRESH MATERIALIZED VIEW CONCURRENTLY :view_name;
+
+    -- Log refresh
+    RAISE NOTICE 'Materialized view :view_name refreshed at %', NOW();
+END;
+$$;
+
+-- Grant execute to service role (for scheduled refresh)
+GRANT EXECUTE ON FUNCTION refresh_:view_name() TO service_role;
+
+-- =============================================================================
+-- SCHEDULED REFRESH (pg_cron)
+-- =============================================================================
+--
+-- If using pg_cron extension (available in Supabase):
+--
+-- Enable extension (one-time, requires superuser)
+-- CREATE EXTENSION IF NOT EXISTS pg_cron;
+--
+-- Schedule refresh every hour
+-- SELECT cron.schedule(
+--     'refresh-:view_name',
+--     '0 * * * *',  -- Every hour at minute 0
+--     $$SELECT refresh_:view_name()$$
+-- );
+--
+-- To remove schedule:
+-- SELECT cron.unschedule('refresh-:view_name');
+
+-- =============================================================================
+-- TRIGGER-BASED REFRESH (Alternative)
+-- =============================================================================
+
+-- Refresh when base table changes (use with caution - can be slow)
+-- CREATE OR REPLACE FUNCTION refresh_:view_name_trigger()
+-- RETURNS TRIGGER AS $$
+-- BEGIN
+--     REFRESH MATERIALIZED VIEW CONCURRENTLY :view_name;
+--     RETURN NULL;
+-- END;
+-- $$ LANGUAGE plpgsql;
+--
+-- CREATE TRIGGER trigger_refresh_:view_name
+-- AFTER INSERT OR UPDATE OR DELETE ON :base_table
+-- FOR EACH STATEMENT
+-- EXECUTE FUNCTION refresh_:view_name_trigger();
+
+-- =============================================================================
+-- VIEW METADATA
+-- =============================================================================
+
+COMMENT ON MATERIALIZED VIEW :view_name IS ':description. Refresh: hourly or on-demand.';
+
+-- =============================================================================
+-- USAGE
+-- =============================================================================
+--
+-- Query the view (cached data, very fast):
+-- SELECT * FROM :view_name WHERE category = 'example';
+--
+-- Manual refresh (use during low-traffic periods):
+-- REFRESH MATERIALIZED VIEW CONCURRENTLY :view_name;
+-- OR
+-- SELECT refresh_:view_name();
+--
+-- Check last refresh time (approximate):
+-- SELECT pg_stat_get_last_analyze_time(':view_name'::regclass);

package/.aios-core/product/templates/tmpl-view.sql

@@ -0,0 +1,177 @@
+-- View Template
+-- View: :view_name
+-- Created: :created_date
+-- Author: :author
+-- Description: :description
+--
+-- Views are virtual tables that provide a simplified interface
+-- Data is always live (not cached like materialized views)
+
+-- =============================================================================
+-- BASIC VIEW
+-- =============================================================================
+
+-- Drop existing view if exists
+DROP VIEW IF EXISTS :view_name CASCADE;
+
+-- Create view
+CREATE OR REPLACE VIEW :view_name AS
+SELECT
+    t.id,
+    t.name,
+    t.description,
+    t.status,
+    t.created_at,
+    t.updated_at,
+    -- Related data
+    u.email AS owner_email,
+    u.raw_user_meta_data->>'full_name' AS owner_name,
+    -- Computed columns
+    CASE
+        WHEN t.status = 'active' THEN 'Active'
+        WHEN t.status = 'pending' THEN 'Pending'
+        WHEN t.status = 'archived' THEN 'Archived'
+        ELSE 'Unknown'
+    END AS status_label,
+    -- Age calculation
+    EXTRACT(DAY FROM NOW() - t.created_at) AS days_old
+FROM :base_table t
+LEFT JOIN auth.users u ON u.id = t.user_id
+WHERE t.deleted_at IS NULL;
+
+-- =============================================================================
+-- VIEW WITH AGGREGATIONS
+-- =============================================================================
+
+CREATE OR REPLACE VIEW :view_name_summary AS
+SELECT
+    t.category,
+    COUNT(*) AS total_count,
+    COUNT(*) FILTER (WHERE t.status = 'active') AS active_count,
+    COUNT(*) FILTER (WHERE t.status = 'pending') AS pending_count,
+    MIN(t.created_at) AS earliest,
+    MAX(t.created_at) AS latest,
+    AVG(t.value)::NUMERIC(10,2) AS avg_value
+FROM :base_table t
+WHERE t.deleted_at IS NULL
+GROUP BY t.category;
+
+-- =============================================================================
+-- VIEW WITH RLS CONSIDERATION
+-- =============================================================================
+
+-- Views inherit RLS from underlying tables
+-- If base table has RLS, view will respect it
+--
+-- For views that need custom RLS-like behavior,
+-- wrap in a SECURITY DEFINER function:
+
+CREATE OR REPLACE FUNCTION get_:view_name_for_user()
+RETURNS TABLE (
+    id UUID,
+    name TEXT,
+    status TEXT,
+    created_at TIMESTAMPTZ
+)
+LANGUAGE plpgsql
+SECURITY INVOKER
+STABLE
+AS $$
+BEGIN
+    RETURN QUERY
+    SELECT
+        v.id,
+        v.name,
+        v.status,
+        v.created_at
+    FROM :view_name v
+    WHERE v.user_id = auth.uid()
+    ORDER BY v.created_at DESC;
+END;
+$$;
+
+-- =============================================================================
+-- VIEW WITH JOINED DATA
+-- =============================================================================
+
+CREATE OR REPLACE VIEW :view_name_detailed AS
+SELECT
+    t.id,
+    t.name,
+    t.status,
+    -- One-to-one relationship
+    d.detail_field,
+    -- One-to-many aggregation
+    (
+        SELECT json_agg(json_build_object(
+            'id', c.id,
+            'name', c.name,
+            'created_at', c.created_at
+        ))
+        FROM :child_table c
+        WHERE c.parent_id = t.id
+    ) AS children,
+    -- Count
+    (
+        SELECT COUNT(*)
+        FROM :child_table c
+        WHERE c.parent_id = t.id
+    ) AS children_count,
+    t.created_at,
+    t.updated_at
+FROM :base_table t
+LEFT JOIN :detail_table d ON d.id = t.detail_id
+WHERE t.deleted_at IS NULL;
+
+-- =============================================================================
+-- UPDATEABLE VIEW (with INSTEAD OF triggers)
+-- =============================================================================
+
+-- Simple updateable view (for basic cases)
+CREATE OR REPLACE VIEW :view_name_editable AS
+SELECT
+    id,
+    name,
+    description,
+    status,
+    updated_at
+FROM :base_table
+WHERE deleted_at IS NULL;
+
+-- Make it updateable via trigger
+CREATE OR REPLACE FUNCTION :view_name_editable_update()
+RETURNS TRIGGER AS $$
+BEGIN
+    UPDATE :base_table
+    SET
+        name = NEW.name,
+        description = NEW.description,
+        status = NEW.status,
+        updated_at = NOW()
+    WHERE id = NEW.id
+    AND user_id = auth.uid();  -- RLS check
+
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql SECURITY DEFINER;
+
+CREATE TRIGGER trigger_:view_name_editable_update
+INSTEAD OF UPDATE ON :view_name_editable
+FOR EACH ROW
+EXECUTE FUNCTION :view_name_editable_update();
+
+-- =============================================================================
+-- VIEW METADATA
+-- =============================================================================
+
+COMMENT ON VIEW :view_name IS ':description';
+
+-- =============================================================================
+-- PERMISSIONS
+-- =============================================================================
+
+-- Grant SELECT on view (inherits base table RLS)
+GRANT SELECT ON :view_name TO authenticated;
+
+-- For updateable views, also grant UPDATE
+-- GRANT UPDATE ON :view_name_editable TO authenticated;