autopilot-core-sandbox 0.0.1

package/dist/dist/migrations/20260726010000_create_bing_ads_integration.sql

@@ -0,0 +1,1112 @@
+-- Bing Ads (Microsoft Advertising) mirrors the Facebook Ads integration: the
+-- OAuth refresh token is persisted before the customer selects an ad account,
+-- so the encrypted token and Microsoft user id are required while the
+-- selected-account metadata stays nullable during that staged connection.
+-- token_expires_at is null while authorization is believed valid; the web
+-- layer stamps it when Microsoft reports the grant was revoked. Values are
+-- exposed only to service-role routes by the companion RLS migration.
+create table if not exists "public"."bing_ads_connection" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "updated_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "microsoft_user_id" "text" not null,
+    "refresh_token" "text" not null,
+    -- Microsoft Advertising logins are bound to exactly one identity type, and
+    -- since December 2025 the Bing Ads API accepts Google OAuth tokens with an
+    -- IdentityProvider: Google request header. Track which provider issued the
+    -- stored refresh token so the web layer refreshes it at the right token
+    -- endpoint (Google tokens refresh at oauth2.googleapis.com and do not
+    -- rotate; Microsoft tokens refresh at login.microsoftonline.com and do).
+    "identity_provider" "text" default 'microsoft' not null,
+    "token_expires_at" timestamp with time zone,
+    "account_id" "text",
+    "account_number" "text",
+    "account_name" "text",
+    "parent_customer_id" "text",
+    "currency" "text",
+    "account_time_zone" "text",
+    "timezone_name" "text",
+    "last_synced_at" timestamp with time zone,
+    "backfill_completed_at" timestamp with time zone,
+    "last_sync_error" "text",
+    constraint "bing_ads_connection_pkey" primary key ("id"),
+    constraint "bing_ads_connection_company_id_key" unique ("company_id"),
+    constraint "bing_ads_connection_company_id_id_key" unique ("company_id", "id"),
+    constraint "bing_ads_connection_company_id_fkey"
+        foreign key ("company_id") references "public"."company"("id") on delete cascade,
+    constraint "bing_ads_connection_account_id_check"
+        check ("account_id" is null or "account_id" ~ '^[0-9]{1,20}$'),
+    constraint "bing_ads_connection_parent_customer_id_check"
+        check ("parent_customer_id" is null or "parent_customer_id" ~ '^[0-9]{1,20}$'),
+    constraint "bing_ads_connection_currency_check"
+        check ("currency" is null or "currency" ~ '^[A-Z]{3}$'),
+    constraint "bing_ads_connection_account_time_zone_check"
+        check ("account_time_zone" is null or "account_time_zone" ~ '^[A-Za-z]{1,64}$'),
+    constraint "bing_ads_connection_identity_provider_check"
+        check ("identity_provider" in ('microsoft', 'google'))
+);
+
+alter table "public"."bing_ads_connection" owner to "postgres";
+
+-- The selected Autopilot job source is configuration, not Microsoft-derived
+-- data, so it is kept separately from the connection and cached spend rows.
+-- Mirrors settings_facebook_ads / settings_google_lsa.
+create table if not exists "public"."settings_bing_ads" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "updated_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "source_id" "uuid",
+    "source_names" "text"[] default '{}'::"text"[] not null,
+    constraint "settings_bing_ads_pkey" primary key ("id"),
+    constraint "settings_bing_ads_company_id_key" unique ("company_id"),
+    constraint "settings_bing_ads_company_id_fkey"
+        foreign key ("company_id") references "public"."company"("id") on delete cascade,
+    constraint "settings_bing_ads_source_id_fkey"
+        foreign key ("source_id") references "public"."job_source"("id") on delete set null,
+    constraint "settings_bing_ads_source_names_no_nulls_check"
+        check (array_position("source_names", null::"text") is null),
+    constraint "settings_bing_ads_source_names_no_empty_check"
+        check (array_position("source_names", ''::"text") is null)
+);
+
+alter table "public"."settings_bing_ads" owner to "postgres";
+
+-- Account-level daily spend is sufficient for the ROAS report. The composite
+-- foreign key prevents a spend row from being assigned to a connection owned
+-- by a different company.
+create table if not exists "public"."bing_ads_daily_spend" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "updated_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "connection_id" "uuid" not null,
+    "date" date not null,
+    "spend" numeric(18, 6) not null,
+    "currency" "text" not null,
+    constraint "bing_ads_daily_spend_pkey" primary key ("id"),
+    constraint "bing_ads_daily_spend_connection_date_key"
+        unique ("connection_id", "date"),
+    constraint "bing_ads_daily_spend_company_connection_fkey"
+        foreign key ("company_id", "connection_id")
+        references "public"."bing_ads_connection"("company_id", "id")
+        on delete cascade,
+    constraint "bing_ads_daily_spend_nonnegative_check" check ("spend" >= 0)
+);
+
+alter table "public"."bing_ads_daily_spend" owner to "postgres";
+
+create index if not exists "bing_ads_daily_spend_company_date_idx"
+    on "public"."bing_ads_daily_spend" using "btree" ("company_id", "date");
+
+-- Selecting an account and invalidating data from the previous account must
+-- be one transaction so a concurrent sync cannot repopulate stale rows after
+-- an account switch. The connection row is created by the OAuth callback, so
+-- unlike Google LSA a missing connection is an error here. The advisory lock
+-- mirrors the LSA hardening pass: SELECT ... FOR UPDATE on zero rows locks
+-- nothing, and the OAuth upsert path must not race account selection.
+create or replace function "public"."set_bing_ads_selected_account"(
+    "p_company_id" "uuid",
+    "p_account_id" "text",
+    "p_account_number" "text",
+    "p_account_name" "text",
+    "p_parent_customer_id" "text",
+    "p_currency" "text",
+    "p_account_time_zone" "text",
+    "p_timezone_name" "text"
+)
+returns boolean
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+    "v_connection_id" "uuid";
+    "v_previous_account_id" "text";
+    "v_account_changed" boolean;
+begin
+    if "p_company_id" is null then
+        raise exception 'company_id is required' using errcode = '22023';
+    end if;
+
+    perform pg_advisory_xact_lock(
+        hashtextextended("p_company_id"::text || ':bing-ads-connection', 0)
+    );
+
+    if coalesce("p_account_id", '') !~ '^[0-9]{1,20}$'
+        or nullif(btrim("p_account_number"), '') is null
+        or nullif(btrim("p_account_name"), '') is null
+        or coalesce("p_parent_customer_id", '') !~ '^[0-9]{1,20}$'
+        or coalesce("p_currency", '') !~ '^[A-Z]{3}$'
+        or coalesce("p_account_time_zone", '') !~ '^[A-Za-z]{1,64}$'
+        or nullif(btrim("p_timezone_name"), '') is null
+    then
+        raise exception 'complete account metadata is required when selecting an account'
+            using errcode = '22023';
+    end if;
+
+    select "id", "account_id"
+    into "v_connection_id", "v_previous_account_id"
+    from "public"."bing_ads_connection"
+    where "company_id" = "p_company_id"
+    for update;
+
+    if not found then
+        raise exception 'Bing Ads connection does not exist'
+            using errcode = '23503';
+    end if;
+
+    "v_account_changed" :=
+        "v_previous_account_id" is distinct from "p_account_id";
+
+    update "public"."bing_ads_connection"
+    set
+        "account_id" = "p_account_id",
+        "account_number" = "p_account_number",
+        "account_name" = "p_account_name",
+        "parent_customer_id" = "p_parent_customer_id",
+        "currency" = "p_currency",
+        "account_time_zone" = "p_account_time_zone",
+        "timezone_name" = "p_timezone_name",
+        "last_synced_at" = case
+            when "v_account_changed" then null
+            else "last_synced_at"
+        end,
+        "backfill_completed_at" = case
+            when "v_account_changed" then null
+            else "backfill_completed_at"
+        end,
+        "last_sync_error" = null
+    where "id" = "v_connection_id";
+
+    if "v_account_changed" then
+        delete from "public"."bing_ads_daily_spend"
+        where "connection_id" = "v_connection_id";
+    end if;
+
+    return "v_account_changed";
+end;
+$$;
+
+alter function "public"."set_bing_ads_selected_account"(
+    "uuid",
+    "text",
+    "text",
+    "text",
+    "text",
+    "text",
+    "text",
+    "text"
+) owner to "postgres";
+
+-- Clears the selected account and cached spend while keeping the OAuth
+-- connection, so the customer can pick a different account without
+-- re-authorizing. Returns true when a connection row existed.
+create or replace function "public"."clear_bing_ads_selected_account"(
+    "p_company_id" "uuid"
+)
+returns boolean
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+    "v_connection_id" "uuid";
+begin
+    if "p_company_id" is null then
+        raise exception 'company_id is required' using errcode = '22023';
+    end if;
+
+    select "id"
+    into "v_connection_id"
+    from "public"."bing_ads_connection"
+    where "company_id" = "p_company_id"
+    for update;
+
+    if not found then
+        return false;
+    end if;
+
+    update "public"."bing_ads_connection"
+    set
+        "account_id" = null,
+        "account_number" = null,
+        "account_name" = null,
+        "parent_customer_id" = null,
+        "currency" = null,
+        "account_time_zone" = null,
+        "timezone_name" = null,
+        "last_synced_at" = null,
+        "backfill_completed_at" = null,
+        "last_sync_error" = null
+    where "id" = "v_connection_id";
+
+    delete from "public"."bing_ads_daily_spend"
+    where "connection_id" = "v_connection_id";
+
+    return true;
+end;
+$$;
+
+alter function "public"."clear_bing_ads_selected_account"("uuid")
+owner to "postgres";
+
+-- Microsoft reports spend as a decimal value; the web layer forwards it as a
+-- decimal string so the exact value reaches the numeric column without
+-- JavaScript float conversion (mirrors the Facebook Ads contract). The row
+-- lock on the matching account_id makes a stale sync (running across an
+-- account switch) return zero without writing.
+create or replace function "public"."upsert_bing_ads_daily_spend"(
+    "p_company_id" "uuid",
+    "p_connection_id" "uuid",
+    "p_account_id" "text",
+    "p_currency" "text",
+    "p_rows" jsonb
+)
+returns integer
+language plpgsql
+set search_path = ''
+as $$
+declare
+    "v_row" jsonb;
+    "v_rows_upserted" integer;
+begin
+    if "p_company_id" is null
+        or "p_connection_id" is null
+        or nullif("p_account_id", '') is null
+    then
+        raise exception 'company_id, connection_id, and account_id are required'
+            using errcode = '22023';
+    end if;
+
+    if coalesce("p_currency", '') !~ '^[A-Z]{3}$' then
+        raise exception 'currency must be a three-letter uppercase code'
+            using errcode = '22023';
+    end if;
+
+    if "p_rows" is null or jsonb_typeof("p_rows") <> 'array' then
+        raise exception 'rows must be a JSON array'
+            using errcode = '22023';
+    end if;
+
+    perform 1
+    from "public"."bing_ads_connection"
+    where "company_id" = "p_company_id"
+      and "id" = "p_connection_id"
+      and "account_id" = "p_account_id"
+    for update;
+
+    if not found then
+        return 0;
+    end if;
+
+    for "v_row" in
+        select "row_value"
+        from jsonb_array_elements("p_rows") as "input"("row_value")
+    loop
+        if jsonb_typeof("v_row") <> 'object'
+            or coalesce(jsonb_typeof("v_row" -> 'date'), '') <> 'string'
+            or coalesce("v_row" ->> 'date', '') !~ '^[0-9]{4}-[0-9]{2}-[0-9]{2}$'
+            or coalesce(jsonb_typeof("v_row" -> 'spend'), '') <> 'string'
+            or coalesce("v_row" ->> 'spend', '') !~ '^[0-9]{1,12}([.][0-9]{1,6})?$'
+        then
+            raise exception 'each spend row must contain a valid date and decimal-string spend'
+                using errcode = '22023';
+        end if;
+
+        -- Force date validation before the insert so impossible calendar dates
+        -- fail the entire atomic batch.
+        perform ("v_row" ->> 'date')::date;
+    end loop;
+
+    insert into "public"."bing_ads_daily_spend" (
+        "company_id",
+        "connection_id",
+        "date",
+        "spend",
+        "currency"
+    )
+    select
+        "p_company_id",
+        "p_connection_id",
+        ("row_value" ->> 'date')::date,
+        ("row_value" ->> 'spend')::numeric(18, 6),
+        "p_currency"
+    from jsonb_array_elements("p_rows") as "input"("row_value")
+    on conflict ("connection_id", "date") do update
+    set
+        "company_id" = excluded."company_id",
+        "spend" = excluded."spend",
+        "currency" = excluded."currency";
+
+    get diagnostics "v_rows_upserted" = row_count;
+    return "v_rows_upserted";
+end;
+$$;
+
+alter function "public"."upsert_bing_ads_daily_spend"(
+    "uuid",
+    "uuid",
+    "text",
+    "text",
+    jsonb
+) owner to "postgres";
+
+-- Save the selected lead source and its initial attribution name together.
+-- Historical names are reset when the selected source changes so one source
+-- can never inherit aliases belonging to another source.
+create or replace function "public"."set_bing_ads_source"(
+    "p_company_id" "uuid",
+    "p_source_id" "uuid"
+)
+returns void
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+    "v_source_name" "text";
+begin
+    if "p_company_id" is null then
+        raise exception 'company_id is required' using errcode = '22023';
+    end if;
+
+    perform pg_advisory_xact_lock(
+        hashtextextended("p_company_id"::text || ':bing-ads-source-name', 0)
+    );
+
+    if "p_source_id" is null then
+        insert into "public"."settings_bing_ads" (
+            "company_id",
+            "source_id",
+            "source_names"
+        )
+        values ("p_company_id", null, '{}'::"text"[])
+        on conflict ("company_id") do update
+        set
+            "source_id" = null,
+            "source_names" = '{}'::"text"[];
+        return;
+    end if;
+
+    select "name"
+    into "v_source_name"
+    from "public"."job_source"
+    where "company_id" = "p_company_id"
+      and "id" = "p_source_id";
+
+    if not found then
+        raise exception 'Lead source does not belong to this company'
+            using errcode = '23503';
+    end if;
+
+    if nullif(btrim("v_source_name"), '') is null then
+        raise exception 'Lead source name cannot be blank'
+            using errcode = '22023';
+    end if;
+
+    if exists (
+        select 1
+        from "public"."job_source" as "other_source"
+        where "other_source"."company_id" = "p_company_id"
+          and "other_source"."id" <> "p_source_id"
+          and "other_source"."name" = "v_source_name"
+    ) then
+        raise exception 'Lead source name is not unique within this company'
+            using
+                errcode = '23505',
+                constraint = 'bing_ads_source_name_unambiguous';
+    end if;
+
+    insert into "public"."settings_bing_ads" (
+        "company_id",
+        "source_id",
+        "source_names"
+    )
+    values ("p_company_id", "p_source_id", array["v_source_name"])
+    on conflict ("company_id") do update
+    set
+        "source_id" = excluded."source_id",
+        "source_names" = case
+            when "settings_bing_ads"."source_id" = excluded."source_id" then
+                array(
+                    select distinct "candidate"."value"
+                    from unnest(
+                        "settings_bing_ads"."source_names"
+                        || excluded."source_names"
+                    ) as "candidate"("value")
+                    where nullif(btrim("candidate"."value"), '') is not null
+                    order by "candidate"."value"
+                )
+            else excluded."source_names"
+        end;
+end;
+$$;
+
+alter function "public"."set_bing_ads_source"("uuid", "uuid")
+owner to "postgres";
+
+-- Supabase's generated TypeScript types cannot represent nullable RPC
+-- arguments. Expose an explicit clear operation so callers remain fully typed
+-- while the transactional lead-source logic is reused.
+create or replace function "public"."clear_bing_ads_source"(
+    "p_company_id" "uuid"
+)
+returns void
+language plpgsql
+security definer
+set search_path = ''
+as $$
+begin
+    perform "public"."set_bing_ads_source"(
+        "p_company_id",
+        null
+    );
+end;
+$$;
+
+alter function "public"."clear_bing_ads_source"("uuid")
+owner to "postgres";
+
+-- Protect historical source-name attribution at mutation time. The advisory
+-- lock matches the selector RPC so source selection and source creation or
+-- renaming cannot race one another.
+create or replace function "public"."prevent_bing_ads_source_name_collision"()
+returns trigger
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+    "v_selected_source_id" "uuid";
+    "v_selected_source_names" "text"[];
+    "v_selected_current_name" "text";
+begin
+    perform pg_advisory_xact_lock(
+        hashtextextended(new."company_id"::text || ':bing-ads-source-name', 0)
+    );
+
+    select
+        "settings"."source_id",
+        "settings"."source_names",
+        "selected_source"."name"
+    into
+        "v_selected_source_id",
+        "v_selected_source_names",
+        "v_selected_current_name"
+    from "public"."settings_bing_ads" as "settings"
+    left join "public"."job_source" as "selected_source"
+      on "selected_source"."company_id" = "settings"."company_id"
+     and "selected_source"."id" = "settings"."source_id"
+    where "settings"."company_id" = new."company_id";
+
+    if "v_selected_source_id" is null then
+        return new;
+    end if;
+
+    "v_selected_source_names" :=
+        coalesce("v_selected_source_names", '{}'::"text"[])
+        || array["v_selected_current_name"];
+
+    if new."id" = "v_selected_source_id" then
+        if nullif(btrim(new."name"), '') is null then
+            raise exception 'Selected Bing Ads lead source name cannot be blank'
+                using errcode = '22023';
+        end if;
+
+        if exists (
+            select 1
+            from "public"."job_source" as "other_source"
+            where "other_source"."company_id" = new."company_id"
+              and "other_source"."id" <> new."id"
+              and "other_source"."name" = new."name"
+        ) then
+            raise exception 'Lead source name conflicts with Bing Ads attribution'
+                using
+                    errcode = '23505',
+                    constraint = 'bing_ads_source_name_unambiguous';
+        end if;
+    elsif new."name" = any("v_selected_source_names") then
+        raise exception 'Lead source name conflicts with Bing Ads attribution'
+            using
+                errcode = '23505',
+                constraint = 'bing_ads_source_name_unambiguous';
+    end if;
+
+    return new;
+end;
+$$;
+
+alter function "public"."prevent_bing_ads_source_name_collision"()
+owner to "postgres";
+
+create or replace trigger "prevent_bing_ads_source_name_collision_trigger"
+before insert or update of "name" on "public"."job_source"
+for each row
+execute function "public"."prevent_bing_ads_source_name_collision"();
+
+-- Preserve exact historical names for the currently selected source. Jobs
+-- store the source name rather than source id, so this keeps older jobs
+-- attributable after a source rename.
+create or replace function "public"."append_bing_ads_source_name_on_rename"()
+returns trigger
+language plpgsql
+security definer
+set search_path = ''
+as $$
+begin
+    update "public"."settings_bing_ads" as "settings"
+    set "source_names" = array(
+        select distinct "candidate"."value"
+        from unnest(
+            coalesce("settings"."source_names", '{}'::"text"[])
+            || array[old."name", new."name"]
+        ) as "candidate"("value")
+        where nullif(btrim("candidate"."value"), '') is not null
+        order by "candidate"."value"
+    )
+    where "settings"."company_id" = new."company_id"
+      and "settings"."source_id" = new."id";
+
+    return new;
+end;
+$$;
+
+alter function "public"."append_bing_ads_source_name_on_rename"()
+owner to "postgres";
+
+create or replace trigger "append_bing_ads_source_name_on_rename_trigger"
+after update of "name" on "public"."job_source"
+for each row
+when (old."name" is distinct from new."name")
+execute function "public"."append_bing_ads_source_name_on_rename"();
+
+-- Build all dashboard aggregates in PostgreSQL. This avoids PostgREST row
+-- limits and guarantees each job is counted once by its earliest non-canceled
+-- schedule in the company's local calendar range. Mirrors
+-- get_google_lsa_report / get_facebook_ads_report.
+create or replace function "public"."get_bing_ads_report"(
+    "p_company_id" "uuid",
+    "p_date_from" date,
+    "p_date_to" date
+)
+returns table(
+    "currency" "text",
+    "total_ad_spend" numeric,
+    "total_sales" numeric,
+    "client_count" bigint,
+    "source_attribution_ambiguous" boolean
+)
+language plpgsql
+stable
+security definer
+set search_path = ''
+as $$
+declare
+    "v_timezone_name" "text";
+    "v_date_from_utc" timestamp with time zone;
+    "v_date_to_utc" timestamp with time zone;
+    "v_source_id" "uuid";
+    "v_source_names" "text"[];
+    "v_current_source_name" "text";
+    "v_attribution_names" "text"[];
+begin
+    if "p_company_id" is null
+        or "p_date_from" is null
+        or "p_date_to" is null
+        or "p_date_from" > "p_date_to"
+    then
+        raise exception 'company_id and a valid date range are required'
+            using errcode = '22023';
+    end if;
+
+    select coalesce(nullif("company_row"."time_zone", ''), 'America/Chicago')
+    into "v_timezone_name"
+    from "public"."company" as "company_row"
+    where "company_row"."id" = "p_company_id";
+
+    if not found then
+        raise exception 'Company does not exist' using errcode = '23503';
+    end if;
+
+    "v_date_from_utc" := timezone(
+        "v_timezone_name",
+        "p_date_from"::timestamp without time zone
+    );
+    "v_date_to_utc" := timezone(
+        "v_timezone_name",
+        ("p_date_to" + 1)::timestamp without time zone
+    );
+
+    select "connection"."currency"
+    into "currency"
+    from "public"."bing_ads_connection" as "connection"
+    where "connection"."company_id" = "p_company_id"
+      and "connection"."backfill_completed_at" is not null
+      and upper("connection"."currency") = 'USD';
+
+    if not found then
+        raise exception 'Bing Ads connection is not report-ready'
+            using errcode = '55000';
+    end if;
+
+    select coalesce(sum("daily_spend"."spend"), 0::numeric)
+    into "total_ad_spend"
+    from "public"."bing_ads_daily_spend" as "daily_spend"
+    where "daily_spend"."company_id" = "p_company_id"
+      and "daily_spend"."date" between "p_date_from" and "p_date_to";
+
+    "total_sales" := 0::numeric;
+    "client_count" := 0::bigint;
+    "source_attribution_ambiguous" := false;
+
+    select
+        "settings"."source_id",
+        "settings"."source_names",
+        "source"."name"
+    into
+        "v_source_id",
+        "v_source_names",
+        "v_current_source_name"
+    from "public"."settings_bing_ads" as "settings"
+    left join "public"."job_source" as "source"
+      on "source"."company_id" = "settings"."company_id"
+     and "source"."id" = "settings"."source_id"
+    where "settings"."company_id" = "p_company_id";
+
+    if "v_source_id" is null then
+        return next;
+        return;
+    end if;
+
+    select coalesce(array_agg("alias_row"."name" order by "alias_row"."name"), '{}'::"text"[])
+    into "v_attribution_names"
+    from (
+        select distinct "candidate"."value" as "name"
+        from unnest(
+            coalesce("v_source_names", '{}'::"text"[])
+            || array["v_current_source_name"]
+        ) as "candidate"("value")
+        where nullif(btrim("candidate"."value"), '') is not null
+    ) as "alias_row";
+
+    if cardinality("v_attribution_names") = 0 then
+        return next;
+        return;
+    end if;
+
+    select exists (
+        select 1
+        from "public"."job_source" as "other_source"
+        where "other_source"."company_id" = "p_company_id"
+          and "other_source"."id" <> "v_source_id"
+          and "other_source"."name" = any("v_attribution_names")
+    )
+    into "source_attribution_ambiguous";
+
+    if "source_attribution_ambiguous" then
+        return next;
+        return;
+    end if;
+
+    with "earliest_schedule" as (
+        select
+            "schedule"."job_id",
+            min("schedule"."start_time") as "start_time"
+        from "public"."job_schedule" as "schedule"
+        where "schedule"."company_id" = "p_company_id"
+          and "schedule"."status" <> 'Canceled'::"public"."job_status_enum"
+        group by "schedule"."job_id"
+    ),
+    "eligible_job" as (
+        select "job_row"."id"
+        from "public"."job" as "job_row"
+        inner join "earliest_schedule"
+          on "earliest_schedule"."job_id" = "job_row"."id"
+        where "job_row"."company_id" = "p_company_id"
+          and "earliest_schedule"."start_time" >= "v_date_from_utc"
+          and "earliest_schedule"."start_time" < "v_date_to_utc"
+          and "job_row"."job_source" = any("v_attribution_names")
+    )
+    select coalesce(sum("job_item"."item_price" * "job_item"."quantity"), 0::numeric)
+    into "total_sales"
+    from "eligible_job"
+    inner join "public"."job_item" as "job_item"
+      on "job_item"."company_id" = "p_company_id"
+     and "job_item"."job_id" = "eligible_job"."id";
+
+    select count(*)
+    into "client_count"
+    from "public"."client" as "client_row"
+    where "client_row"."company_id" = "p_company_id"
+      and "client_row"."source_id" = "v_source_id"
+      and "client_row"."client_or_lead" = 'client'::"public"."client_or_lead_enum"
+      and "client_row"."created_at" >= "v_date_from_utc"
+      and "client_row"."created_at" < "v_date_to_utc";
+
+    return next;
+end;
+$$;
+
+alter function "public"."get_bing_ads_report"("uuid", date, date)
+owner to "postgres";
+
+-- Paginated list of jobs attributed to the Bing Ads lead source for the
+-- breakdown view. Mirrors get_google_lsa_job_sales_breakdown.
+create or replace function "public"."get_bing_ads_job_sales_breakdown"(
+    "p_company_id" "uuid",
+    "p_date_from" date,
+    "p_date_to" date,
+    "p_limit" integer default 25,
+    "p_offset" integer default 0
+)
+returns table (
+    "job_id" "uuid",
+    "job_number" integer,
+    "scheduled_at" timestamp with time zone,
+    "client_id" "uuid",
+    "client_name" "text",
+    "lead_source" "text",
+    "sales" numeric,
+    "total_count" bigint
+)
+language plpgsql
+stable
+security definer
+set search_path = ''
+as $$
+declare
+    "v_timezone_name" "text";
+    "v_date_from_utc" timestamp with time zone;
+    "v_date_to_utc" timestamp with time zone;
+    "v_source_id" "uuid";
+    "v_source_names" "text"[];
+    "v_current_source_name" "text";
+    "v_attribution_names" "text"[];
+begin
+    if "p_company_id" is null
+        or "p_date_from" is null
+        or "p_date_to" is null
+        or "p_date_from" > "p_date_to"
+        or "p_limit" not between 1 and 100
+        or "p_offset" < 0
+    then
+        raise exception 'company, date range, and pagination are invalid'
+            using errcode = '22023';
+    end if;
+
+    select coalesce(nullif("company_row"."time_zone", ''), 'America/Chicago')
+    into "v_timezone_name"
+    from "public"."company" as "company_row"
+    where "company_row"."id" = "p_company_id";
+
+    if not found then
+        raise exception 'Company does not exist' using errcode = '23503';
+    end if;
+
+    "v_date_from_utc" := timezone(
+        "v_timezone_name",
+        "p_date_from"::timestamp without time zone
+    );
+    "v_date_to_utc" := timezone(
+        "v_timezone_name",
+        ("p_date_to" + 1)::timestamp without time zone
+    );
+
+    select
+        "settings"."source_id",
+        "settings"."source_names",
+        "source"."name"
+    into
+        "v_source_id",
+        "v_source_names",
+        "v_current_source_name"
+    from "public"."settings_bing_ads" as "settings"
+    left join "public"."job_source" as "source"
+      on "source"."company_id" = "settings"."company_id"
+     and "source"."id" = "settings"."source_id"
+    where "settings"."company_id" = "p_company_id";
+
+    if "v_source_id" is null then
+        return;
+    end if;
+
+    select coalesce(array_agg("alias_row"."name" order by "alias_row"."name"), '{}'::"text"[])
+    into "v_attribution_names"
+    from (
+        select distinct "candidate"."value" as "name"
+        from unnest(
+            coalesce("v_source_names", '{}'::"text"[])
+            || array["v_current_source_name"]
+        ) as "candidate"("value")
+        where nullif(btrim("candidate"."value"), '') is not null
+    ) as "alias_row";
+
+    return query
+    with "earliest_schedule" as (
+        select
+            "schedule"."job_id",
+            min("schedule"."start_time") as "start_time"
+        from "public"."job_schedule" as "schedule"
+        where "schedule"."company_id" = "p_company_id"
+          and "schedule"."status" <> 'Canceled'::"public"."job_status_enum"
+        group by "schedule"."job_id"
+    ),
+    "job_sales" as (
+        select
+            "job_row"."id" as "job_id",
+            "job_row"."job_number",
+            "earliest_schedule"."start_time" as "scheduled_at",
+            "client_row"."id" as "client_id",
+            coalesce(
+                nullif(btrim("client_row"."client_company_name"), ''),
+                nullif(btrim(concat_ws(
+                    ' ',
+                    "client_row"."first_name",
+                    "client_row"."last_name"
+                )), ''),
+                'Unknown client'
+            ) as "client_name",
+            "job_row"."job_source" as "lead_source",
+            coalesce(sum(
+                "job_item"."item_price" * "job_item"."quantity"
+            ), 0::numeric) as "sales"
+        from "public"."job" as "job_row"
+        inner join "earliest_schedule"
+          on "earliest_schedule"."job_id" = "job_row"."id"
+        inner join "public"."client" as "client_row"
+          on "client_row"."company_id" = "p_company_id"
+         and "client_row"."id" = "job_row"."client_id"
+        left join "public"."job_item" as "job_item"
+          on "job_item"."company_id" = "p_company_id"
+         and "job_item"."job_id" = "job_row"."id"
+        where "job_row"."company_id" = "p_company_id"
+          and "earliest_schedule"."start_time" >= "v_date_from_utc"
+          and "earliest_schedule"."start_time" < "v_date_to_utc"
+          and "job_row"."job_source" = any("v_attribution_names")
+        group by
+            "job_row"."id",
+            "job_row"."job_number",
+            "earliest_schedule"."start_time",
+            "client_row"."id",
+            "client_row"."client_company_name",
+            "client_row"."first_name",
+            "client_row"."last_name",
+            "job_row"."job_source"
+    )
+    select
+        "job_sales"."job_id",
+        "job_sales"."job_number",
+        "job_sales"."scheduled_at",
+        "job_sales"."client_id",
+        "job_sales"."client_name",
+        "job_sales"."lead_source",
+        "job_sales"."sales",
+        count(*) over() as "total_count"
+    from "job_sales"
+    order by "job_sales"."scheduled_at" desc, "job_sales"."job_number" desc
+    limit "p_limit"
+    offset "p_offset";
+end;
+$$;
+
+alter function "public"."get_bing_ads_job_sales_breakdown"(
+    "uuid",
+    date,
+    date,
+    integer,
+    integer
+) owner to "postgres";
+
+-- These indexes support the report's company-scoped earliest-schedule, item,
+-- and client attribution scans. They reuse the exact names and definitions
+-- introduced by the earlier facebook-ads / google-lsa migrations, so they are
+-- no-ops here and exist only to document the dependency.
+create index if not exists "facebook_ads_job_schedule_report_idx"
+    on "public"."job_schedule" ("company_id", "job_id", "start_time")
+    where "status" <> 'Canceled'::"public"."job_status_enum";
+
+create index if not exists "facebook_ads_job_item_report_idx"
+    on "public"."job_item" ("company_id", "job_id");
+
+create index if not exists "facebook_ads_client_report_idx"
+    on "public"."client" (
+        "company_id",
+        "source_id",
+        "client_or_lead",
+        "created_at"
+    );
+
+create index if not exists "job_source_company_name_idx"
+    on "public"."job_source" ("company_id", "name");
+
+-- A lead source can represent one ad platform at a time. The advisory lock
+-- closes the cross-table race where two platforms' settings are updated
+-- concurrently for the same company and source. This function is
+-- Bing-Ads-specific and checks settings_facebook_ads and settings_google_lsa
+-- dynamically so it works whether or not those branches have been applied.
+create or replace function "public"."prevent_bing_ads_duplicate_ads_source_assignment"()
+returns trigger
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+    "v_conflicting" boolean := false;
+begin
+    if new."source_id" is null then
+        return new;
+    end if;
+
+    perform pg_advisory_xact_lock(
+        hashtextextended(
+            new."company_id"::text || ':' || new."source_id"::text,
+            0
+        )
+    );
+
+    if exists (
+        select 1
+        from "public"."settings_google_ads"
+        where "company_id" = new."company_id"
+          and "source_id" = new."source_id"
+    ) then
+        raise exception 'Lead source is already assigned to Google Ads'
+            using
+                errcode = '23505',
+                constraint = 'ads_source_platform_unique';
+    end if;
+
+    if to_regclass('public.settings_facebook_ads') is not null then
+        execute
+            'select exists ('
+            || 'select 1 from "public"."settings_facebook_ads" '
+            || 'where "company_id" = $1 and "source_id" = $2'
+            || ')'
+        into "v_conflicting"
+        using new."company_id", new."source_id";
+
+        if "v_conflicting" then
+            raise exception 'Lead source is already assigned to Facebook Ads'
+                using
+                    errcode = '23505',
+                    constraint = 'ads_source_platform_unique';
+        end if;
+    end if;
+
+    if to_regclass('public.settings_google_lsa') is not null then
+        execute
+            'select exists ('
+            || 'select 1 from "public"."settings_google_lsa" '
+            || 'where "company_id" = $1 and "source_id" = $2'
+            || ')'
+        into "v_conflicting"
+        using new."company_id", new."source_id";
+
+        if "v_conflicting" then
+            raise exception 'Lead source is already assigned to Local Services Ads'
+                using
+                    errcode = '23505',
+                    constraint = 'ads_source_platform_unique';
+        end if;
+    end if;
+
+    return new;
+end;
+$$;
+
+alter function "public"."prevent_bing_ads_duplicate_ads_source_assignment"()
+owner to "postgres";
+
+create or replace trigger "prevent_duplicate_bing_ads_source_trigger"
+before insert or update of "source_id" on "public"."settings_bing_ads"
+for each row
+execute function "public"."prevent_bing_ads_duplicate_ads_source_assignment"();
+
+-- Reverse direction of the exclusivity invariant: the other platforms'
+-- settings tables must refuse a source already assigned to Bing Ads. Uses the
+-- same company:source advisory lock key so concurrent cross-table assignments
+-- serialize. Trigger names are Bing-specific so they coexist with the guards
+-- those branches install themselves.
+create or replace function "public"."prevent_other_ads_source_conflicts_with_bing_ads"()
+returns trigger
+language plpgsql
+security definer
+set search_path = ''
+as $$
+begin
+    if new."source_id" is null then
+        return new;
+    end if;
+
+    perform pg_advisory_xact_lock(
+        hashtextextended(
+            new."company_id"::text || ':' || new."source_id"::text,
+            0
+        )
+    );
+
+    if exists (
+        select 1
+        from "public"."settings_bing_ads"
+        where "company_id" = new."company_id"
+          and "source_id" = new."source_id"
+    ) then
+        raise exception 'Lead source is already assigned to Bing Ads'
+            using
+                errcode = '23505',
+                constraint = 'ads_source_platform_unique';
+    end if;
+
+    return new;
+end;
+$$;
+
+alter function "public"."prevent_other_ads_source_conflicts_with_bing_ads"()
+owner to "postgres";
+
+create or replace trigger "prevent_google_ads_source_conflicts_with_bing_ads_trigger"
+before insert or update of "source_id" on "public"."settings_google_ads"
+for each row
+execute function "public"."prevent_other_ads_source_conflicts_with_bing_ads"();
+
+-- settings_facebook_ads and settings_google_lsa are created by earlier
+-- migrations (their reciprocal guards attach dynamically and no-op until the
+-- bing function above exists, so these are the attachments that count).
+create or replace trigger "prevent_facebook_ads_source_conflicts_with_bing_ads_trigger"
+before insert or update of "source_id" on "public"."settings_facebook_ads"
+for each row
+execute function "public"."prevent_other_ads_source_conflicts_with_bing_ads"();
+
+create or replace trigger "prevent_google_lsa_source_conflicts_with_bing_ads_trigger"
+before insert or update of "source_id" on "public"."settings_google_lsa"
+for each row
+execute function "public"."prevent_other_ads_source_conflicts_with_bing_ads"();
+
+create or replace function "public"."set_bing_ads_updated_at"()
+returns trigger
+language plpgsql
+as $$
+begin
+    new."updated_at" = "now"();
+    return new;
+end;
+$$;
+
+alter function "public"."set_bing_ads_updated_at"() owner to "postgres";
+
+create or replace trigger "set_bing_ads_connection_updated_at_trigger"
+before update on "public"."bing_ads_connection"
+for each row
+execute function "public"."set_bing_ads_updated_at"();
+
+create or replace trigger "set_settings_bing_ads_updated_at_trigger"
+before update on "public"."settings_bing_ads"
+for each row
+execute function "public"."set_bing_ads_updated_at"();
+
+create or replace trigger "set_bing_ads_daily_spend_updated_at_trigger"
+before update on "public"."bing_ads_daily_spend"
+for each row
+execute function "public"."set_bing_ads_updated_at"();