autopilot-core-sandbox 0.0.1

package/dist/dist/migrations/20260611174826_add_job_item_recurring_id_to_job_item.sql

@@ -0,0 +1,7 @@
+alter table public.job_item
+  add column job_item_recurring_id uuid
+  references public.job_item_recurring(id) on delete set null;
+
+create index job_item_job_item_recurring_id_idx
+  on public.job_item(job_item_recurring_id)
+  where job_item_recurring_id is not null;

package/dist/dist/migrations/20260625224612_add_dashboard_guided_tour_dismissed_to_settings_user.sql

@@ -0,0 +1,5 @@
+alter table "public"."settings_user"
+add column "dashboard_guided_tour_dismissed" boolean not null default false;
+
+comment on column "public"."settings_user"."dashboard_guided_tour_dismissed"
+is 'Tracks whether this user has dismissed the dashboard onboarding guided tour.';

package/dist/dist/migrations/20260627031433_support_chat_tables.sql

@@ -0,0 +1,115 @@
+create table if not exists "public"."support_chat_conversation" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "updated_at" timestamp with time zone default "now"() not null,
+    "last_message_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "user_id" "uuid" not null,
+    "assistant_name" "text" not null default 'Wally'::"text",
+    "status" "text" not null default 'open'::"text",
+    "handoff_summary" "text",
+    "metadata" "jsonb" not null default '{}'::"jsonb",
+    constraint "support_chat_conversation_pkey" primary key ("id"),
+    constraint "support_chat_conversation_status_check" check (
+        "status" in ('open', 'handed_off', 'closed')
+    )
+);
+
+alter table "public"."support_chat_conversation" owner to "postgres";
+
+alter table only "public"."support_chat_conversation"
+    add constraint "support_chat_conversation_company_id_fkey"
+    foreign key ("company_id") references "public"."company"("id") on delete cascade;
+
+alter table only "public"."support_chat_conversation"
+    add constraint "support_chat_conversation_user_id_fkey"
+    foreign key ("user_id") references "public"."user"("id") on delete cascade;
+
+create index if not exists "support_chat_conversation_company_id_idx"
+    on "public"."support_chat_conversation" using "btree" ("company_id");
+
+create index if not exists "support_chat_conversation_user_id_idx"
+    on "public"."support_chat_conversation" using "btree" ("user_id");
+
+create index if not exists "support_chat_conversation_last_message_at_idx"
+    on "public"."support_chat_conversation" using "btree" ("last_message_at" desc);
+
+create or replace function "public"."set_support_chat_conversation_updated_at"()
+returns "trigger"
+language "plpgsql"
+as $$
+begin
+    new."updated_at" = "now"();
+    return new;
+end;
+$$;
+
+alter function "public"."set_support_chat_conversation_updated_at"() owner to "postgres";
+
+create or replace trigger "set_support_chat_conversation_updated_at_trigger"
+before update on "public"."support_chat_conversation"
+for each row
+execute function "public"."set_support_chat_conversation_updated_at"();
+
+create table if not exists "public"."support_chat_message" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "conversation_id" "uuid" not null,
+    "company_id" "uuid" not null,
+    "user_id" "uuid" not null,
+    "role" "text" not null,
+    "content" "text" not null,
+    "model" "text",
+    "openai_response_id" "text",
+    "sources" "jsonb" not null default '[]'::"jsonb",
+    "metadata" "jsonb" not null default '{}'::"jsonb",
+    constraint "support_chat_message_pkey" primary key ("id"),
+    constraint "support_chat_message_role_check" check (
+        "role" in ('user', 'assistant', 'system')
+    )
+);
+
+alter table "public"."support_chat_message" owner to "postgres";
+
+alter table only "public"."support_chat_message"
+    add constraint "support_chat_message_conversation_id_fkey"
+    foreign key ("conversation_id")
+    references "public"."support_chat_conversation"("id")
+    on delete cascade;
+
+alter table only "public"."support_chat_message"
+    add constraint "support_chat_message_company_id_fkey"
+    foreign key ("company_id") references "public"."company"("id") on delete cascade;
+
+alter table only "public"."support_chat_message"
+    add constraint "support_chat_message_user_id_fkey"
+    foreign key ("user_id") references "public"."user"("id") on delete cascade;
+
+create index if not exists "support_chat_message_conversation_id_created_at_idx"
+    on "public"."support_chat_message" using "btree" ("conversation_id", "created_at");
+
+create index if not exists "support_chat_message_company_id_idx"
+    on "public"."support_chat_message" using "btree" ("company_id");
+
+create index if not exists "support_chat_message_user_id_idx"
+    on "public"."support_chat_message" using "btree" ("user_id");
+
+create or replace function "public"."touch_support_chat_conversation_last_message_at"()
+returns "trigger"
+language "plpgsql"
+as $$
+begin
+    update "public"."support_chat_conversation"
+    set "last_message_at" = greatest("support_chat_conversation"."last_message_at", new."created_at")
+    where "id" = new."conversation_id";
+
+    return new;
+end;
+$$;
+
+alter function "public"."touch_support_chat_conversation_last_message_at"() owner to "postgres";
+
+create or replace trigger "touch_support_chat_conversation_last_message_at_trigger"
+after insert on "public"."support_chat_message"
+for each row
+execute function "public"."touch_support_chat_conversation_last_message_at"();

package/dist/dist/migrations/20260627031434_support_chat_rls.sql

@@ -0,0 +1,37 @@
+-- Support chat rows are written exclusively by the server through service_role
+-- (API routes in autopilot-web). Authenticated clients get read-only access to
+-- their own conversations and messages; status and handoff_summary on
+-- support_chat_conversation are server-managed.
+
+alter table "public"."support_chat_conversation" enable row level security;
+alter table "public"."support_chat_message" enable row level security;
+
+grant select on table "public"."support_chat_conversation" to "authenticated";
+grant all on table "public"."support_chat_conversation" to "service_role";
+
+grant select on table "public"."support_chat_message" to "authenticated";
+grant all on table "public"."support_chat_message" to "service_role";
+
+create policy "Users can view their own support chat conversations"
+on "public"."support_chat_conversation"
+for select
+to "authenticated"
+using (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+    and ("auth"."uid"() = "user_id")
+);
+
+create policy "Users can view messages in their own support chat conversations"
+on "public"."support_chat_message"
+for select
+to "authenticated"
+using (
+    exists (
+        select 1
+        from "public"."support_chat_conversation" "conversation"
+        where "conversation"."id" = "support_chat_message"."conversation_id"
+          and "conversation"."company_id" = "support_chat_message"."company_id"
+          and "conversation"."user_id" = "auth"."uid"()
+          and ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "support_chat_message"."company_id")
+    )
+);

package/dist/dist/migrations/20260704170209_add_estimate_scheduling.sql

@@ -0,0 +1,121 @@
+-- Estimates can optionally appear on the schedule and map like jobs.
+-- Adds schedule columns to estimate (single day only - no recurring/multiday,
+-- so no separate schedule table), an estimate_user join table for technician
+-- assignment (mirrors job_user minus the schedule id), a settings_estimate
+-- table for the company-level default of the "show on schedule" toggle, and
+-- estimate notification template/enable columns on settings_notification
+-- (mirroring the customer/contractor/employee job columns).
+
+-- 1) estimate schedule columns.
+-- schedule_status reuses job_status_enum; UI dropdowns offer only the five
+-- manually-selectable statuses, but any enum value (e.g. Pending Confirmation
+-- from a future estimate booking flow) is valid at the database level.
+alter table "public"."estimate"
+    add column if not exists "show_on_schedule" boolean default false not null,
+    add column if not exists "schedule_start" timestamp with time zone,
+    add column if not exists "schedule_end" timestamp with time zone,
+    add column if not exists "schedule_status" "public"."job_status_enum";
+
+create index if not exists "estimate_schedule_start_idx"
+    on "public"."estimate" using "btree" ("company_id", "schedule_start")
+    where "show_on_schedule" = true;
+
+-- 2) estimate_user: technician assignment (one row per estimate/user pair).
+create table if not exists "public"."estimate_user" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "estimate_id" "uuid" not null,
+    "user_id" "uuid" not null,
+    "company_id" "uuid" not null,
+    constraint "estimate_user_pkey" primary key ("id"),
+    constraint "estimate_user_estimate_id_user_id_key" unique ("estimate_id", "user_id")
+);
+
+alter table "public"."estimate_user" owner to "postgres";
+
+alter table only "public"."estimate_user"
+    add constraint "estimate_user_estimate_id_fkey"
+    foreign key ("estimate_id") references "public"."estimate"("id") on delete cascade;
+
+alter table only "public"."estimate_user"
+    add constraint "estimate_user_user_id_fkey"
+    foreign key ("user_id") references "public"."user"("id") on delete cascade;
+
+alter table only "public"."estimate_user"
+    add constraint "estimate_user_company_id_fkey"
+    foreign key ("company_id") references "public"."company"("id") on delete cascade;
+
+create index if not exists "estimate_user_estimate_id_idx"
+    on "public"."estimate_user" using "btree" ("estimate_id");
+
+create index if not exists "estimate_user_user_id_idx"
+    on "public"."estimate_user" using "btree" ("user_id");
+
+create index if not exists "estimate_user_company_id_idx"
+    on "public"."estimate_user" using "btree" ("company_id");
+
+grant all on table "public"."estimate_user" to "anon";
+grant all on table "public"."estimate_user" to "authenticated";
+grant all on table "public"."estimate_user" to "service_role";
+
+-- 3) settings_estimate: company-level defaults for estimates.
+create table if not exists "public"."settings_estimate" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "default_show_on_schedule" boolean default false not null,
+    constraint "settings_estimate_pkey" primary key ("id"),
+    constraint "settings_estimate_company_id_key" unique ("company_id")
+);
+
+alter table "public"."settings_estimate" owner to "postgres";
+
+alter table only "public"."settings_estimate"
+    add constraint "settings_estimate_company_id_fkey"
+    foreign key ("company_id") references "public"."company"("id") on delete cascade;
+
+grant all on table "public"."settings_estimate" to "anon";
+grant all on table "public"."settings_estimate" to "authenticated";
+grant all on table "public"."settings_estimate" to "service_role";
+
+-- 4) settings_notification: estimate SMS templates + enable toggles.
+-- Defaults mirror the job columns: customer/contractor enabled, employee
+-- disabled. Default texts stay in sync with the ESTIMATE_* constants in
+-- src/server-safe/constants.ts.
+alter table "public"."settings_notification"
+    add column if not exists "customer_estimate_open" "text" default 'This is a message from {{companyName}}. Your estimate appointment is scheduled for {{estimateDate}} at {{estimateTime}}. If you would like to opt out of future notifications like this, text STOP in reply to this message.'::"text" not null,
+    add column if not exists "customer_estimate_on_my_way" "text" default 'A team member is on their way for your estimate!'::"text" not null,
+    add column if not exists "customer_estimate_in_progress" "text" default 'We have begun your estimate.'::"text" not null,
+    add column if not exists "customer_estimate_canceled" "text" default 'Your estimate appointment has been canceled.'::"text" not null,
+    add column if not exists "customer_estimate_completed" "text" default 'Your estimate has been completed. Thank you!'::"text" not null,
+    add column if not exists "customer_estimate_updated" "text" default 'Your estimate appointment has been updated. We will arrive on {{estimateDate}} at {{estimateTime}}.'::"text" not null,
+    add column if not exists "customer_estimate_open_enabled" boolean default true not null,
+    add column if not exists "customer_estimate_on_my_way_enabled" boolean default true not null,
+    add column if not exists "customer_estimate_in_progress_enabled" boolean default true not null,
+    add column if not exists "customer_estimate_canceled_enabled" boolean default true not null,
+    add column if not exists "customer_estimate_completed_enabled" boolean default true not null,
+    add column if not exists "customer_estimate_updated_enabled" boolean default true not null,
+    add column if not exists "contractor_estimate_open" "text" default 'Hey {{subcontractorFirstName}}, {{companyName}} has scheduled an estimate for you (estimate ID #{{estimateId}}):    {{estimateDate}} at {{estimateTime}}    {{customerName}} {{customerAddress}} {{customerPhone}}    Notes: {{estimateNotes}}'::"text" not null,
+    add column if not exists "contractor_estimate_on_my_way" "text" default 'We''ve notified the customer that you''re on your way.'::"text" not null,
+    add column if not exists "contractor_estimate_in_progress" "text" default 'An estimate you''re assigned to is now in progress.'::"text" not null,
+    add column if not exists "contractor_estimate_canceled" "text" default 'Hey {{subcontractorFirstName}}, estimate ID #{{estimateId}} has been canceled.'::"text" not null,
+    add column if not exists "contractor_estimate_completed" "text" default 'Hey {{subcontractorFirstName}}, estimate ID #{{estimateId}} has been completed.'::"text" not null,
+    add column if not exists "contractor_estimate_updated" "text" default 'Hey {{subcontractorFirstName}}, estimate ID #{{estimateId}} has been updated:    {{estimateDate}} at {{estimateTime}}    {{customerName}} {{customerAddress}} {{customerPhone}}    Notes: {{estimateNotes}}'::"text" not null,
+    add column if not exists "contractor_estimate_open_enabled" boolean default true not null,
+    add column if not exists "contractor_estimate_on_my_way_enabled" boolean default true not null,
+    add column if not exists "contractor_estimate_in_progress_enabled" boolean default true not null,
+    add column if not exists "contractor_estimate_canceled_enabled" boolean default true not null,
+    add column if not exists "contractor_estimate_completed_enabled" boolean default true not null,
+    add column if not exists "contractor_estimate_updated_enabled" boolean default true not null,
+    add column if not exists "employee_estimate_open" "text" default 'Hey {{employeeFirstName}}, {{companyName}} has scheduled an estimate for you (estimate ID #{{estimateId}}):    {{estimateDate}} at {{estimateTime}}    {{customerName}} {{customerAddress}} {{customerPhone}}    Notes: {{estimateNotes}}'::"text" not null,
+    add column if not exists "employee_estimate_on_my_way" "text" default 'We''ve notified the customer that you''re on your way.'::"text" not null,
+    add column if not exists "employee_estimate_in_progress" "text" default 'An estimate you''re assigned to is now in progress.'::"text" not null,
+    add column if not exists "employee_estimate_canceled" "text" default 'Hey {{employeeFirstName}}, estimate ID #{{estimateId}} has been canceled.'::"text" not null,
+    add column if not exists "employee_estimate_completed" "text" default 'Hey {{employeeFirstName}}, estimate ID #{{estimateId}} has been completed.'::"text" not null,
+    add column if not exists "employee_estimate_updated" "text" default 'Hey {{employeeFirstName}}, estimate ID #{{estimateId}} has been updated:    {{estimateDate}} at {{estimateTime}}    {{customerName}} {{customerAddress}} {{customerPhone}}    Notes: {{estimateNotes}}'::"text" not null,
+    add column if not exists "employee_estimate_open_enabled" boolean default false not null,
+    add column if not exists "employee_estimate_on_my_way_enabled" boolean default false not null,
+    add column if not exists "employee_estimate_in_progress_enabled" boolean default false not null,
+    add column if not exists "employee_estimate_canceled_enabled" boolean default false not null,
+    add column if not exists "employee_estimate_completed_enabled" boolean default false not null,
+    add column if not exists "employee_estimate_updated_enabled" boolean default false not null;

package/dist/dist/migrations/20260704170210_add_estimate_scheduling_rls.sql

@@ -0,0 +1,42 @@
+-- RLS for the estimate scheduling tables.
+-- estimate_user gets the standard company-scoped CRUD policy (same as
+-- job_user). settings_estimate gets the settings-table pair (same as
+-- settings_job): owner/admin CRUD plus company-wide read-only SELECT so
+-- field techs can read the default toggle.
+-- The existing estimate and settings_notification policies already cover the
+-- columns added in the companion migration.
+
+alter table "public"."estimate_user" enable row level security;
+alter table "public"."settings_estimate" enable row level security;
+
+create policy "Anyone with matching company_id can CRUD"
+on "public"."estimate_user"
+to "authenticated"
+using (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+)
+with check (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+);
+
+create policy "Enable CRUD for owner and admin with matching company_id"
+on "public"."settings_estimate"
+to "authenticated"
+using (
+    ((coalesce(("public"."get_my_claim"('autopilot_role'::"text"))::"text", ''::"text") = '"owner"'::"text")
+        or (coalesce(("public"."get_my_claim"('autopilot_role'::"text"))::"text", ''::"text") = '"admin"'::"text"))
+    and ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+)
+with check (
+    ((coalesce(("public"."get_my_claim"('autopilot_role'::"text"))::"text", ''::"text") = '"owner"'::"text")
+        or (coalesce(("public"."get_my_claim"('autopilot_role'::"text"))::"text", ''::"text") = '"admin"'::"text"))
+    and ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+);
+
+create policy "Read-only for matching companyId"
+on "public"."settings_estimate"
+for select
+to "authenticated"
+using (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+);

package/dist/dist/migrations/20260704235034_add_estimate_reminder_settings.sql

@@ -0,0 +1,11 @@
+-- Estimate reminder SMS settings, mirroring the customer_job_reminder /
+-- _enabled / _time trio. Sent by a cron in autopilot-web the day before an
+-- estimate's schedule_start when show_on_schedule is true.
+-- Default text must stay in sync with
+-- DEFAULT_CUSTOMER_ESTIMATE_STATUS_SMS.estimate_reminder in
+-- src/server-safe/constants.ts.
+
+alter table "public"."settings_notification"
+    add column if not exists "customer_estimate_reminder" "text" default 'Hi {{firstName}}, this is a reminder from {{companyName}} about your estimate appointment tomorrow at {{estimateStartTime}}! We will arrive between {{estimateArrivalWindow}}. Thank you!'::"text" not null,
+    add column if not exists "customer_estimate_reminder_enabled" boolean default false not null,
+    add column if not exists "customer_estimate_reminder_time" "text" default '19:00'::"text" not null;

package/dist/dist/migrations/20260707003825_blocked_number_table.sql

@@ -0,0 +1,32 @@
+-- Blocked numbers: numbers a company has elected to block (never auto-detected).
+-- Blocks are company-wide. phone_number is the normalized 10-digit form, the
+-- same form used by message.client_number. Enforcement happens in
+-- autopilot-web's Twilio webhooks (inbound SMS stored read=true with
+-- notifications suppressed; incoming calls sent straight to voicemail).
+
+create table if not exists "public"."blocked_number" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "phone_number" "text" not null,
+    "blocked_by_user_id" "uuid",
+    constraint "blocked_number_pkey" primary key ("id"),
+    constraint "blocked_number_company_id_phone_number_key" unique ("company_id", "phone_number"),
+    constraint "blocked_number_phone_number_check" check (
+        "phone_number" ~ '^[0-9]{10}$'
+    )
+);
+
+alter table "public"."blocked_number" owner to "postgres";
+
+alter table only "public"."blocked_number"
+    add constraint "blocked_number_company_id_fkey"
+    foreign key ("company_id") references "public"."company"("id") on delete cascade;
+
+alter table only "public"."blocked_number"
+    add constraint "blocked_number_blocked_by_user_id_fkey"
+    foreign key ("blocked_by_user_id") references "public"."user"("id") on delete set null;
+
+-- the unique constraint on (company_id, phone_number) doubles as the lookup
+-- index for the webhook blocked checks, and its leading company_id column
+-- also covers company-wide fetches; no separate index needed

package/dist/dist/migrations/20260707003826_blocked_number_rls.sql

@@ -0,0 +1,22 @@
+-- RLS for blocked_number.
+-- Standard company-scoped CRUD policy: any authenticated user in the company
+-- can block/unblock (matches the gating on deleting a chat). service_role
+-- gets full access so autopilot-web's Twilio webhooks (supabaseAdmin) can
+-- check blocks when routing inbound SMS and calls.
+
+alter table "public"."blocked_number" enable row level security;
+
+-- no anon grant: this table has no anonymous use case, so unauthenticated
+-- callers are stopped at the grant layer as well as by RLS default-deny
+grant all on table "public"."blocked_number" to "authenticated";
+grant all on table "public"."blocked_number" to "service_role";
+
+create policy "Anyone with matching company_id can CRUD"
+on "public"."blocked_number"
+to "authenticated"
+using (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+)
+with check (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+);

package/dist/dist/migrations/20260709191055_sms_opt_out_table.sql

@@ -0,0 +1,38 @@
+-- SMS opt-outs: numbers that have revoked SMS consent, either by replying with
+-- an opt-out keyword (STOP etc., recorded by autopilot-web's inbound SMS
+-- webhook) or discovered when Twilio rejects a send with error 21610
+-- (unsubscribed recipient). Opt-outs are company-wide and consumer-elected.
+-- phone_number is the normalized 10-digit form, the same form used by
+-- message.client_number. Enforcement happens in autopilot-web's shared send
+-- helper (pre-send check + 21610 persistence). Rows are cleared only when the
+-- consumer texts an opt-in keyword (START/UNSTOP/YES).
+
+create table if not exists "public"."sms_opt_out" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "phone_number" "text" not null,
+    "source" "text" default 'stop_reply' not null,
+    constraint "sms_opt_out_pkey" primary key ("id"),
+    constraint "sms_opt_out_company_id_phone_number_key" unique ("company_id", "phone_number"),
+    constraint "sms_opt_out_phone_number_check" check (
+        "phone_number" ~ '^[0-9]{10}$'
+    ),
+    constraint "sms_opt_out_source_check" check (
+        "source" in ('stop_reply', 'twilio_21610')
+    )
+);
+
+alter table "public"."sms_opt_out" owner to "postgres";
+
+alter table only "public"."sms_opt_out"
+    add constraint "sms_opt_out_company_id_fkey"
+    foreign key ("company_id") references "public"."company"("id") on delete cascade;
+
+-- source is an audit column distinguishing a customer-initiated STOP reply
+-- from an opt-out discovered via a Twilio 21610 rejection; useful when
+-- debugging why a message was not sent
+
+-- the unique constraint on (company_id, phone_number) doubles as the lookup
+-- index for the pre-send opt-out checks, and its leading company_id column
+-- also covers company-wide fetches; no separate index needed

package/dist/dist/migrations/20260709191056_sms_opt_out_rls.sql

@@ -0,0 +1,21 @@
+-- RLS for sms_opt_out.
+-- Deliberately stricter than blocked_number: opt-outs are consumer-elected,
+-- so a business must never be able to insert or delete rows and override a
+-- consumer's consent. authenticated users get read-only, company-scoped
+-- access (for any future UI surfacing); only service_role (autopilot-web's
+-- inbound webhook and send paths via supabaseAdmin) may write.
+
+alter table "public"."sms_opt_out" enable row level security;
+
+-- no anon grant: this table has no anonymous use case, so unauthenticated
+-- callers are stopped at the grant layer as well as by RLS default-deny
+grant select on table "public"."sms_opt_out" to "authenticated";
+grant all on table "public"."sms_opt_out" to "service_role";
+
+create policy "Anyone with matching company_id can read"
+on "public"."sms_opt_out"
+for select
+to "authenticated"
+using (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+);

package/dist/dist/migrations/20260709214507_job_time_entry_table.sql

@@ -0,0 +1,70 @@
+-- Task time tracking: start/stop timer entries per job_schedule (the "task"/day
+-- on a schedule card). One shared timer per task — anyone can start/stop it —
+-- with multiple start/stop cycles accumulating; total tracked time is the sum
+-- of an entry set. A running timer is a row with end_time null (same
+-- open-row model as time_card.clock_out). Separate from the employee
+-- clock in/out feature (time_card), which tracks shifts, not tasks.
+
+create table if not exists "public"."job_time_entry" (
+    "id" "uuid" default "gen_random_uuid"() not null,
+    "created_at" timestamp with time zone default "now"() not null,
+    "company_id" "uuid" not null,
+    "job_id" "uuid" not null,
+    "job_schedule_id" "uuid" not null,
+    "start_time" timestamp with time zone not null,
+    "end_time" timestamp with time zone,
+    "started_by_user_id" "uuid",
+    "stopped_by_user_id" "uuid",
+    constraint "job_time_entry_pkey" primary key ("id"),
+    constraint "job_time_entry_end_after_start_check" check (
+        "end_time" is null or "end_time" > "start_time"
+    )
+);
+
+alter table "public"."job_time_entry" owner to "postgres";
+
+-- job_id is denormalized alongside job_schedule_id (mirroring job_user) so
+-- per-job totals and the time report can query without joining job_schedule
+alter table only "public"."job_time_entry"
+    add constraint "job_time_entry_company_id_fkey"
+    foreign key ("company_id") references "public"."company"("id") on delete cascade;
+
+alter table only "public"."job_time_entry"
+    add constraint "job_time_entry_job_id_fkey"
+    foreign key ("job_id") references "public"."job"("id") on delete cascade;
+
+alter table only "public"."job_time_entry"
+    add constraint "job_time_entry_job_schedule_id_fkey"
+    foreign key ("job_schedule_id") references "public"."job_schedule"("id") on delete cascade;
+
+-- attribution is audit metadata only (who pressed start/stop); the timer
+-- itself is task-level, not per-user
+alter table only "public"."job_time_entry"
+    add constraint "job_time_entry_started_by_user_id_fkey"
+    foreign key ("started_by_user_id") references "public"."user"("id") on delete set null;
+
+alter table only "public"."job_time_entry"
+    add constraint "job_time_entry_stopped_by_user_id_fkey"
+    foreign key ("stopped_by_user_id") references "public"."user"("id") on delete set null;
+
+-- at most one running timer per task: a second concurrent "start" insert
+-- fails with unique_violation (23505), which clients treat as "timer already
+-- running" and refetch. Scoped by company_id so a crafted row referencing
+-- another company's schedule can't block that company's timer (the FK alone
+-- doesn't guarantee the schedule belongs to the row's company); legitimate
+-- rows for a task all share a company_id, so the per-task guarantee holds.
+create unique index "job_time_entry_one_running_per_schedule"
+    on "public"."job_time_entry" ("company_id", "job_schedule_id")
+    where "end_time" is null;
+
+-- entries list for a task, ordered by start
+create index "job_time_entry_job_schedule_id_start_time_idx"
+    on "public"."job_time_entry" ("job_schedule_id", "start_time");
+
+-- date-range scan for the task time report
+create index "job_time_entry_company_id_start_time_idx"
+    on "public"."job_time_entry" ("company_id", "start_time");
+
+-- per-job totals (billing)
+create index "job_time_entry_job_id_idx"
+    on "public"."job_time_entry" ("job_id");

package/dist/dist/migrations/20260709214508_job_time_entry_rls.sql

@@ -0,0 +1,21 @@
+-- RLS for job_time_entry.
+-- Standard company-scoped CRUD policy: any authenticated user in the company
+-- can start/stop timers and manage entries — field techs need start/stop from
+-- mobile, office staff need manual add/edit on web. No role gating in v1.
+
+alter table "public"."job_time_entry" enable row level security;
+
+-- no anon grant: no anonymous use case, so unauthenticated callers are
+-- stopped at the grant layer as well as by RLS default-deny
+grant all on table "public"."job_time_entry" to "authenticated";
+grant all on table "public"."job_time_entry" to "service_role";
+
+create policy "Anyone with matching company_id can CRUD"
+on "public"."job_time_entry"
+to "authenticated"
+using (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+)
+with check (
+    ((nullif(trim(both '"'::"text" from ("public"."get_my_claim"('autopilot_company_id'::"text"))::"text"), ''::"text"))::"uuid" = "company_id")
+);