biz-a-cli 2.3.80-15419 → 2.3.80

package/engine/fina/template.js

@@ -1,118 +0,0 @@
-/*
- * Doc 8 — FINA form templates (appendix T-08 §3.1) and the extended fields mapped onto a document (T-12–T-16).
- *
- * TEMPLATE: TEMPLATEID, TEMPLATETYPE (14 JV, 15 Other Payment, 16 Other Deposit, 0 Sales Invoice…), NAME, ISDEFTEMPLATE.
- * TEMPLDET: one row per element (SECTION, SEQ): CAPTION is its fixed internal name, DEFAULTCAPTION the user's caption
- * (with the `&` accelerator), SCREEN 1 = shown, ENABLESCREEN 0 = locked by the designer, ORDERNUMBER = a detail
- * column's place, FIELDDATA = the print expression (`[<table><field>]` for an extended field).
- * EXTENDEDMAPPING: which extended field of which table is in use (managed in FINA desktop, read only here, T-13).
- *
- * M1 needed only the template list a console picks the JV default from; M4 reads the rest for the template engine.
- */
-import { finaError } from "./errors.js";
-import { sqlString } from "./sql.js";
-
-export const TEMPLATE_TYPE = Object.freeze({ JV: 14 });
-
-const integer = (v) => {
-	const n = Number(v);
-	return v !== null && v !== undefined && v !== "" && Number.isInteger(n) ? n : null;
-};
-const on = (v) => v === true || v === 1 || String(v ?? "").trim() === "1";
-
-export const listTemplates = async (client, type) => {
-	const t = Number(type);
-	if (!Number.isInteger(t)) return [];
-	const rows = (await client.executeSql(`SELECT TEMPLATEID, NAME, ISDEFTEMPLATE FROM TEMPLATE WHERE TEMPLATETYPE = ${t} ORDER BY NAME`)) ?? [];
-	return rows.map((r) => ({ id: Number(r.templateid), name: String(r.name ?? ""), isDefault: String(r.isdeftemplate ?? "") === "1" }));
-};
-
-/* The user's caption: the Windows accelerator `&` goes, `&&` stays one `&`. */
-export const stripAccelerator = (caption) =>
-	String(caption ?? "")
-		.replace(/&&/g, "\u0000")
-		.replace(/&/g, "")
-		.replace(/\u0000/g, "&")
-		.trim();
-
-/*
- * Which template a form shows (T-22, T-23): the one asked for → the document's own → the console's default (there is no
- * default per user) → FINA's own default → the first. Each must be one of the type's templates.
- */
-export const chooseTemplateId = ({ templates = [], requested, documentTemplateId, settingDefault } = {}) => {
-	const ids = new Set(templates.map((t) => t.id));
-	for (const candidate of [requested, documentTemplateId, settingDefault]) {
-		const id = integer(candidate);
-		if (id !== null && ids.has(id)) return id;
-	}
-	return templates.find((t) => t.isDefault)?.id ?? templates[0]?.id ?? null;
-};
-
-/* A requested template must belong to the document's type: FINA would render any template id for any document. */
-export const assertTemplateOfType = (templates, templateId) => {
-	const id = integer(templateId);
-	if (id === null || !templates.some((t) => t.id === id)) {
-		throw finaError("TEMPLATE_NOT_FOUND", `Template ${templateId} is not a template of this document.`);
-	}
-	return id;
-};
-
-export const readTemplateElements = async (client, templateId) => {
-	const id = integer(templateId);
-	if (id === null) return [];
-	const rows =
-		(await client.executeSql(
-			`SELECT SECTION, SEQ, CAPTION, DEFAULTCAPTION, SCREEN, ENABLESCREEN, ORDERNUMBER, FIELDDATA FROM TEMPLDET WHERE TEMPLATEID = ${id} ORDER BY SECTION, SEQ`,
-		)) ?? [];
-	return rows.map((r) => {
-		const caption = String(r.caption ?? "").trim();
-		return {
-			section: Number(r.section),
-			seq: Number(r.seq),
-			caption,
-			label: stripAccelerator(r.defaultcaption) || stripAccelerator(caption),
-			screen: on(r.screen),
-			enableScreen: on(r.enablescreen),
-			orderNumber: integer(r.ordernumber),
-			fieldData: String(r.fielddata ?? "").trim(),
-		};
-	});
-};
-
-/*
- * The extended fields mapped onto a document's tables (`{ master: 'JV', detail: 'JVDET' }`). A lookup field picks an
- * EXTENDEDDET row of its EXTENDEDTYPE (the value is its EXTENDEDDETID); a custom field holds its own value, of
- * CUSTOMFIELDTYPE 1–4.
- */
-export const readMappings = async (client, tables) => {
-	const parts = Object.entries(tables ?? {}).filter(([, table]) => /^[A-Z0-9_$]+$/.test(String(table ?? "")));
-	if (parts.length === 0) return [];
-	const partOf = Object.fromEntries(parts.map(([part, table]) => [table, part]));
-	const rows =
-		(await client.executeSql(
-			"SELECT M.MAPTABLENAME, M.MAPFIELDNAME, M.CAPTION, M.EXTENDEDTYPEID, M.CUSTOMFIELDTYPE, T.EXTENDEDNAME, T.INFOCAPTION1, T.INFOCAPTION2 " +
-				"FROM EXTENDEDMAPPING M LEFT JOIN EXTENDEDTYPE T ON T.EXTENDEDTYPEID = M.EXTENDEDTYPEID " +
-				`WHERE M.MAPTABLENAME IN (${parts.map(([, table]) => sqlString(table)).join(", ")}) ORDER BY M.MAPTABLENAME, M.MAPFIELDNAME`,
-		)) ?? [];
-	const order = parts.map(([, table]) => table);
-	return rows
-		.map((r) => {
-			const table = String(r.maptablename ?? "").trim().toUpperCase();
-			const field = String(r.mapfieldname ?? "").trim().toUpperCase();
-			const lookup = /^LOOKUP\d+$/.test(field);
-			return {
-				part: partOf[table],
-				table,
-				field,
-				key: `ext_${field.toLowerCase()}`,
-				caption: String(r.caption ?? "").trim() || field,
-				kind: lookup ? "lookup" : "custom",
-				typeId: lookup ? integer(r.extendedtypeid) : null,
-				typeName: lookup && r.extendedname != null ? String(r.extendedname).trim() : null,
-				infoCaptions: lookup ? [r.infocaption1, r.infocaption2].map((c) => String(c ?? "").trim()).filter(Boolean) : [],
-				customType: lookup ? null : integer(r.customfieldtype),
-			};
-		})
-		.filter((m) => m.part && /^(LOOKUP|CUSTOMFIELD)\d+$/.test(m.field))
-		.sort((a, b) => order.indexOf(a.table) - order.indexOf(b.table));
-};

package/engine/fina/userMap.js

@@ -1,79 +0,0 @@
-/*
- * Doc 8 S-01 — mapping each Biz-A user (SYS$USERS) to a FINA user (FINA's USERS), in FINA$USER_MAP.
- *
- * - A Biz-A user maps to at most one FINA user; several Biz-A users may share one FINA user.
- * - `finaUserId: null` removes a mapping. Rows not sent are left as they are.
- * - Every id is checked before anything is written, and the save is ONE transaction: a refused row leaves the map
- *   exactly as it was.
- * - ⚠️ No password column is read on either side.
- */
-import { finaError } from "./errors.js";
-import { ACTIVE_FINA_USER } from "./identity.js";
-
-const asId = (v) => (typeof v === "number" ? (Number.isInteger(v) && v >= 0 ? v : null) : /^\d+$/.test(String(v ?? "")) ? Number(v) : null);
-const actorSql = (actorId) => (asId(actorId) === null ? "NULL" : String(asId(actorId)));
-
-export const createUserMap = ({ exec, client, transaction }) => {
-	const list = async () => {
-		const [biza, fina, map] = [
-			(await exec("SELECT USERID, USERNAME, FULLNAME, ACTIVE FROM SYS$USERS ORDER BY USERNAME")) ?? [],
-			(await client.executeSql(`SELECT USERID, USERNAME FROM USERS WHERE ${ACTIVE_FINA_USER} ORDER BY USERNAME`)) ?? [],
-			(await exec("SELECT BIZA_USER_ID, FINA_USER_ID FROM FINA$USER_MAP")) ?? [],
-		];
-		return {
-			bizaUsers: biza.map((u) => ({
-				userId: Number(u.userid),
-				userName: String(u.username ?? ""),
-				fullName: u.fullname === null || u.fullname === undefined ? null : String(u.fullname),
-				active: Number(u.active) === 1,
-			})),
-			finaUsers: fina.map((u) => ({ userId: Number(u.userid), userName: String(u.username ?? "") })),
-			map: map.map((m) => ({ bizaUserId: Number(m.biza_user_id), finaUserId: Number(m.fina_user_id) })),
-		};
-	};
-
-	const save = async (payload, actorId) => {
-		const rows = payload?.rows;
-		if (!Array.isArray(rows)) throw finaError("INVALID", "rows must be a list of { bizaUserId, finaUserId }.");
-
-		const problems = [];
-		const seen = new Set();
-		const clean = [];
-		rows.forEach((row, i) => {
-			const bizaUserId = asId(row?.bizaUserId);
-			const rawFina = row?.finaUserId;
-			const finaUserId = rawFina === null || rawFina === undefined || rawFina === "" ? null : asId(rawFina);
-			if (bizaUserId === null) problems.push(`row ${i + 1}: bizaUserId must be a whole number`);
-			if (finaUserId === null && !(rawFina === null || rawFina === undefined || rawFina === "")) {
-				problems.push(`row ${i + 1}: finaUserId must be a whole number or empty`);
-			}
-			if (bizaUserId !== null && seen.has(bizaUserId)) problems.push(`Biz-A user ${bizaUserId} is listed twice`);
-			if (bizaUserId !== null) seen.add(bizaUserId);
-			clean.push({ bizaUserId, finaUserId });
-		});
-		if (problems.length > 0) throw finaError("INVALID", problems.join("; "));
-
-		const known = await list();
-		const bizaIds = new Set(known.bizaUsers.map((u) => u.userId));
-		const finaIds = new Set(known.finaUsers.map((u) => u.userId));
-		for (const { bizaUserId, finaUserId } of clean) {
-			if (!bizaIds.has(bizaUserId)) problems.push(`Biz-A user ${bizaUserId} does not exist`);
-			if (finaUserId !== null && !finaIds.has(finaUserId)) problems.push(`FINA user ${finaUserId} does not exist or is inactive`);
-		}
-		if (problems.length > 0) throw finaError("INVALID", problems.join("; "));
-
-		await transaction(async () => {
-			for (const { bizaUserId, finaUserId } of clean) {
-				await exec(
-					finaUserId === null
-						? `DELETE FROM FINA$USER_MAP WHERE BIZA_USER_ID = ${bizaUserId}`
-						: `INSERT INTO FINA$USER_MAP (BIZA_USER_ID, FINA_USER_ID, UPDATED_BY, UPDATED_AT) VALUES (${bizaUserId}, ${finaUserId}, ${actorSql(actorId)}, now()) ` +
-								"ON CONFLICT (BIZA_USER_ID) DO UPDATE SET FINA_USER_ID = EXCLUDED.FINA_USER_ID, UPDATED_BY = EXCLUDED.UPDATED_BY, UPDATED_AT = now()",
-				);
-			}
-		});
-		return list();
-	};
-
-	return { list, save };
-};

package/engine/orm/companyLocale.js

@@ -1,74 +0,0 @@
-/*
- * Agung 2026-10-10 — the company's NUMBER FORMAT (one per tenant): 'id' shows and reads 1.500.000,50, 'en-US'
- * 1,500,000.50. The client formats numbers AND reads typed ones by it (client shared/number-locale.ts).
- *
- * ⚠️ THE COMPANY THEME'S PATH, ON PURPOSE (companyTheme.js, companyLogo.js): one SYS$CONFIG row of its own; the same
- * administrator gate (principalGuards.js — only a verified administrator of the company changes it); the same audit
- * table, so "who changed it, from what to what" lives where the other company settings' history does.
- *
- * ⚠️ READ NEVER THROWS: a missing or malformed row is Indonesian, the format the platform had before the setting
- * existed. Throwing would take down every screen that formats a number.
- */
-import { POSTGRES_SQL } from "./sqlDialect.js";
-import { requirePrincipal, requireAdministrator } from "./principalGuards.js";
-import { THEME_AUDIT_TABLE } from "./companyTheme.js";
-
-export const COMPANY_LOCALE_NAME = "COMPANY_LOCALE";
-
-/* One row, no version of its own — the theme's reason (companyTheme.js COMPANY_THEME_VERSION). */
-export const COMPANY_LOCALE_VERSION = "1";
-
-/* ⚠️ An allowlist: a value not named here is refused on write and read back as the default. */
-export const NUMBER_LOCALES = ["id", "en-US"];
-export const DEFAULT_LOCALE = Object.freeze({ number: "id" });
-
-const isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-
-const parse = (raw) => {
-	if (raw === null || raw === undefined || raw === "") return null;
-	if (isPlainObject(raw)) return raw;
-	try {
-		const parsed = JSON.parse(String(raw));
-		return isPlainObject(parsed) ? parsed : null;
-	} catch {
-		return null;
-	}
-};
-
-export const readCompanyLocale = async ({ exec }) => {
-	const rows = await exec(`SELECT ID, DATA FROM SYS$CONFIG WHERE NAME = '${COMPANY_LOCALE_NAME}' ORDER BY ID`);
-	const stored = parse(Array.isArray(rows) && rows[0] ? (rows[0].DATA ?? rows[0].data) : null);
-	return { number: stored && NUMBER_LOCALES.includes(stored.number) ? stored.number : DEFAULT_LOCALE.number };
-};
-
-/*
- * Save the setting and record who changed it. A refusal of the VALUE is returned (`problems`, shown on the settings
- * screen); a caller who may not change it at all is thrown (no admin can fix that).
- */
-export const writeCompanyLocale = async ({ exec, execStatements, principal, locale, sql = POSTGRES_SQL }) => {
-	const userId = requirePrincipal(principal, "changing the company number format requires a verified principal");
-	await requireAdministrator(exec, userId, "only administrators may change the company number format");
-
-	if (!isPlainObject(locale)) return { ok: false, problems: ["locale must be an object such as { number: 'id' }."], locale: null };
-	/* ⚠️ CLOSED: an unknown key is refused, never stored (a userId in the payload is the case that matters). */
-	const problems = Object.keys(locale)
-		.filter((key) => key !== "number")
-		.map((key) => `locale.${key} is not a setting.`);
-	if (!NUMBER_LOCALES.includes(locale.number)) problems.push(`locale.number must be one of ${NUMBER_LOCALES.join(", ")}.`);
-	if (problems.length > 0) return { ok: false, problems, locale: null };
-
-	const previous = await readCompanyLocale({ exec });
-	const stored = { number: locale.number };
-	const json = JSON.stringify(stored);
-
-	/* ONE TRANSACTION, UPDATE-then-guarded-INSERT — companyTheme.js says why on both counts. */
-	await execStatements([
-		`INSERT INTO ${THEME_AUDIT_TABLE} (USER_ID, CHANGED_AT, OLD_THEME, NEW_THEME) ` +
-			`VALUES (${userId}, ${sql.now}, ${sql.json(JSON.stringify(previous))}, ${sql.json(json)})`,
-		`UPDATE SYS$CONFIG SET DATA = ${sql.text(json)} WHERE NAME = '${COMPANY_LOCALE_NAME}'`,
-		`INSERT INTO SYS$CONFIG (NAME, VERSION, DATA) ` +
-			`SELECT '${COMPANY_LOCALE_NAME}', '${COMPANY_LOCALE_VERSION}', ${sql.text(json)}${sql.fromNothing} ` +
-			`WHERE NOT EXISTS (SELECT 1 FROM SYS$CONFIG WHERE NAME = '${COMPANY_LOCALE_NAME}')`,
-	]);
-	return { ok: true, problems: [], locale: stored };
-};

package/engine/orm/userApiDataset.js

@@ -1,153 +0,0 @@
-/*
- * FINA's `TUserApiDataset`, served for a PostgreSQL index — the admin Users screen.
- *
- * User List → Add → Save (client/src/app/admin/userForm.component.ts modifyUser) and the list's
- * Delete (usersList.component.ts) post TFinaMethod/"json2fina" with this data module. apiRoute did
- * not route json2fina, so it went to FINA — which a PostgreSQL tenant does not run, and Add User
- * failed as `502 ECONNREFUSED 127.0.0.1:212`. Users there live in SYS$USERS, beside the tenant data.
- *
- * The Delphi trail, so the behaviour is FINA's and not a guess:
- *   FINAMethod.pas:459   needAuthenticate — TUserApiDataset is the one module that demands `password`
- *   FINAMethod.pas:734   that password is the CALLER's (`userId`) own -> 'Incorrect password'
- *   FINAMethod.pas:499   isAppend — an `id` of '' or -1 inserts; `delete = 1` deletes; else edits
- *   FINAMethod.pas:538   AssignField — a master key with no matching column is ignored
- *   FINAMethod.pas:839   {"id": <key>} on success, {"error": <message>} on failure, HTTP 200 both
- *   UserApiDataset.pas   USERNAME upper-cased; `plainpassword` hashed into USERPASSWORD
- *
- * ⚠️ ONE DELIBERATE DIFFERENCE: FINA skips the confirmation when `password` is '' (FINAMethod.pas:734
- * tests `password <> Str_Empty`). Here an empty password is simply an incorrect one — the screen
- * always asks for it, and a write to the user table must not be one empty field away from unguarded.
- *
- * Passwords are hashed with finaAuth.js's scrypt, the scheme the PostgreSQL login verifies, so a user
- * created here can sign in straight away. The envelope carries plain-text passwords: nothing in this
- * module logs or echoes it.
- */
-import { hashPassword, verifyCredential } from "./finaAuth.js";
-import { buildInsertUserSql } from "./userAdmin.js";
-import { withoutStatement } from "./saveErrors.js";
-import { logger } from "../../logger.js";
-
-export const USER_API_DATASET = "TUserApiDataset";
-
-export const isUserApiDataset = (param) => String(param?.dataModule ?? "") === USER_API_DATASET;
-
-const quote = (value) => String(value ?? "").replace(/'/g, "''");
-const upper = (value) => String(value ?? "").toUpperCase();
-const has = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
-const isBlank = (value) => String(value ?? "").trim() === "";
-
-/* Delphi's FieldByName is case-insensitive; the client happens to send lower case. */
-const lowerKeys = (object) =>
-	Object.fromEntries(Object.entries(object ?? {}).map(([key, value]) => [key.toLowerCase(), value]));
-
-/* The columns verifyCredential reads — the same ones the login selects. */
-export const buildFindUserByIdSql = (userId) =>
-	`SELECT USERID, USERNAME, USERPASSWORD, USERLEVEL FROM SYS$USERS WHERE USERID = ${Number(userId)}`;
-
-/* Only the keys the master carries are written. ⚠️ USERPASSWORD only for a non-empty plainpassword:
-   the edit form omits it when the password is unchanged, and writing it anyway would hash ''. */
-export const buildUpdateUserSql = (userId, master = {}) => {
-	const fields = lowerKeys(master);
-	const sets = [];
-	if (has(fields, "username")) sets.push(`USERNAME = '${quote(upper(fields.username))}'`);
-	if (has(fields, "fullname")) {
-		sets.push(`FULLNAME = ${fields.fullname === null ? "NULL" : `'${quote(fields.fullname)}'`}`);
-	}
-	if (has(fields, "userlevel") && !isBlank(fields.userlevel) && Number.isInteger(Number(fields.userlevel))) {
-		sets.push(`USERLEVEL = ${Number(fields.userlevel)}`);
-	}
-	if (!isBlank(fields.plainpassword)) {
-		sets.push(`USERPASSWORD = '${quote(hashPassword(fields.plainpassword))}'`);
-	}
-	if (sets.length === 0) return null;
-	return `UPDATE SYS$USERS SET ${sets.join(", ")} WHERE USERID = ${Number(userId)} RETURNING USERID`;
-};
-
-/* SYS$SESSION, SYS$USER_TENANT and SYS$USER_PREFERENCES cascade from SYS$USERS. */
-export const buildDeleteUserSql = (userId) =>
-	`DELETE FROM SYS$USERS WHERE USERID = ${Number(userId)} RETURNING USERID`;
-
-const answer = (entry) => ({ status: 200, body: { result: [entry] } });
-const refuse = (error) => answer({ error });
-const keyOf = (rows) => rows?.[0]?.userid ?? rows?.[0]?.USERID;
-
-/* FINAMethod.pas isAppend: '' or -1. A JSON null reads as '' in Delphi, so it appends too. */
-const isAppend = (id) => id === undefined || id === null || String(id).trim() === "" || Number(id) === -1;
-
-/* dialect.js decorate keeps the driver error on `cause` and copies `code` — read both. */
-const describeFailure = (error, master) => {
-	const code = String(error?.code ?? error?.cause?.code ?? "");
-	if (code === "23505") return `User name '${upper(master.username)}' is already used.`;
-	return withoutStatement(error?.message ?? String(error));
-};
-
-/*
- * The caller whose password confirms the change.
- *
- * ⚠️ A verified principal WINS over the body's `userId`, and a body naming someone else is refused
- * rather than quietly overridden: it is either a stale tab or a forged request, and neither should
- * reach the user table. With no principal (observe mode) the body is all there is — FINA's own rule.
- */
-const confirmingUserOf = (param, principal) => {
-	const claimed = param.userId ?? param.userid;
-	if (principal?.userId !== undefined && principal?.userId !== null) {
-		if (claimed !== undefined && claimed !== null && Number(claimed) !== Number(principal.userId)) {
-			return { error: "The request names a different user than the one signed in." };
-		}
-		return { userId: Number(principal.userId) };
-	}
-	return { userId: Number(claimed) };
-};
-
-/* Returns a DataSnap response — always, and never throws: the caller is a socket handler. */
-export const saveUserApiDataset = async (param, { exec, dbIndex, principal = null }) => {
-	const master = lowerKeys(param?.data?.master);
-	const isDelete = String(param?.delete ?? "") === "1";
-	const inserting = !isDelete && isAppend(param?.id);
-	const id = Number(param?.id);
-	if (!inserting && !Number.isInteger(id)) return refuse(`Invalid user id: ${param?.id}`);
-
-	const confirming = confirmingUserOf(param ?? {}, principal);
-	if (confirming.error) return refuse(confirming.error);
-
-	try {
-		const password = param?.password;
-		if (!Number.isInteger(confirming.userId) || typeof password !== "string" || password === "") {
-			return refuse("Incorrect password");
-		}
-		const confirmRows = (await exec(buildFindUserByIdSql(confirming.userId), dbIndex)) ?? [];
-		const confirmName = confirmRows[0]?.username ?? confirmRows[0]?.USERNAME;
-		if (verifyCredential(confirmRows, confirmName, password).userId !== confirming.userId) {
-			return refuse("Incorrect password");
-		}
-
-		if (isDelete) {
-			const rows = await exec(buildDeleteUserSql(id), dbIndex);
-			return keyOf(rows) === undefined ? refuse(`User ${id} not found`) : answer({ id: String(keyOf(rows)) });
-		}
-
-		if (inserting) {
-			if (isBlank(master.username)) return refuse("A new user needs a user name.");
-			if (isBlank(master.plainpassword)) return refuse("A new user needs a password.");
-			const rows = await exec(
-				buildInsertUserSql({
-					username: master.username,
-					password: master.plainpassword,
-					fullname: master.fullname,
-					userlevel: master.userlevel,
-				}),
-				dbIndex,
-			);
-			return answer({ id: String(keyOf(rows) ?? "") });
-		}
-
-		const update = buildUpdateUserSql(id, master);
-		/* Nothing to change still has to name a user that exists, as FINA's DoEdit would. */
-		const rows = await exec(update ?? buildFindUserByIdSql(id), dbIndex);
-		return keyOf(rows) === undefined ? refuse(`User ${id} not found`) : answer({ id: String(keyOf(rows)) });
-	} catch (error) {
-		const message = describeFailure(error, master);
-		logger.error(`[json2fina] ${USER_API_DATASET}: ${message}`);
-		return refuse(message);
-	}
-};

package/migrations/postgres/1790600000000__fina.sql

@@ -1,33 +0,0 @@
--- Doc 8 (FINA Cloud) - engine/fina's own tables (D14), so it never reads a table an application declares.
---
--- FINA$SETTING holds what the SERVER enforces for FINA Cloud: the Biz-A date lock (C-14) and the JV settings
--- (Need Approval, default template, rate editable, department / project mandatory, attachment limits). One JSON
--- value per section, validated by engine/fina/settings.js, which is the only writer.
---
--- FINA$USER_MAP maps each Biz-A user (SYS$USERS) to a FINA user (FINA's own USERS table, in the FINA database),
--- S-01. A Biz-A user maps to at most one FINA user; several may share one. The mapping goes with its Biz-A user.
--- FINA_USER_ID has no foreign key: FINA's USERS lives in another database (Firebird, through the FINA API).
---
--- Server-only. The browser role (biza_app) gets NOTHING on either table: a user who could write the map could
--- become somebody else in FINA, and one who could write a setting could lift the date lock. The rls_role default
--- privileges grant every new table to biza_app, so they are taken back below.
-
-CREATE TABLE IF NOT EXISTS FINA$SETTING (
-    KEY varchar(64) NOT NULL,
-    VALUE text NOT NULL,
-    UPDATED_BY integer,
-    UPDATED_AT timestamp NOT NULL DEFAULT now(),
-    CONSTRAINT PK_FINA$SETTING PRIMARY KEY (KEY)
-);
-
-CREATE TABLE IF NOT EXISTS FINA$USER_MAP (
-    BIZA_USER_ID integer NOT NULL,
-    FINA_USER_ID integer NOT NULL,
-    UPDATED_BY integer,
-    UPDATED_AT timestamp NOT NULL DEFAULT now(),
-    CONSTRAINT PK_FINA$USER_MAP PRIMARY KEY (BIZA_USER_ID),
-    CONSTRAINT FK_FINA$USER_MAP_USER FOREIGN KEY (BIZA_USER_ID) REFERENCES SYS$USERS (USERID) ON DELETE CASCADE
-);
-
-REVOKE ALL ON FINA$SETTING FROM biza_app;
-REVOKE ALL ON FINA$USER_MAP FROM biza_app;

package/migrations/postgres/1790700000000__attachment.sql

@@ -1,29 +0,0 @@
--- Doc 8 M6 (D11) - the platform attachment store: files belonging to a record, kept in the tenant database.
---
--- A file belongs to an OWNER (OWNER_TYPE + OWNER_ID, e.g. fina.jv / 140): no foreign key, the owner may live in
--- another database (a FINA document lives in FINA). engine/attachments/store.js is the only reader and writer; it
--- names the owner in every statement. Files arrive in chunks (STATUS UPLOADING) and are READY once every declared byte
--- is there; an upload left behind is cleared after an hour.
---
--- Server-only. The browser role (biza_app) gets NOTHING: who may read or change a file is decided by the CLI with the
--- verified principal (for FINA documents: engine/fina/attachments.js). The rls_role default privileges grant every
--- new table to biza_app, so they are taken back below.
-
-CREATE TABLE IF NOT EXISTS SYS$ATTACHMENT (
-    ID bigserial NOT NULL,
-    OWNER_TYPE varchar(64) NOT NULL,
-    OWNER_ID varchar(64) NOT NULL,
-    FILE_NAME varchar(255) NOT NULL,
-    MIME_TYPE varchar(100) NOT NULL,
-    SIZE_BYTES integer NOT NULL,
-    CONTENT bytea NOT NULL,
-    STATUS varchar(12) NOT NULL,
-    CREATED_BY integer,
-    CREATED_AT timestamptz NOT NULL DEFAULT now(),
-    CONSTRAINT PK_SYS$ATTACHMENT PRIMARY KEY (ID)
-);
-
-CREATE INDEX IF NOT EXISTS IDX_SYS$ATTACHMENT_OWNER ON SYS$ATTACHMENT (OWNER_TYPE, OWNER_ID);
-
-REVOKE ALL ON SYS$ATTACHMENT FROM biza_app;
-REVOKE ALL ON SEQUENCE SYS$ATTACHMENT_ID_SEQ FROM biza_app;

package/migrations/postgres/1790800000000__fina_jv_submission.sql

@@ -1,41 +0,0 @@
--- Doc 8 M7 (FINA Cloud) - JV submissions (pengajuan): with Need Approval on, a NEW JV waits here for its approval
--- (A-05) instead of being saved to FINA, under a temporary number PJV/YYYY/MM/0001 (A-10, T-32).
---
--- engine/fina is the only writer (engine/fina/submissionRepo.js). DOCUMENT holds the JV as the server normalized it
--- (master and lines, JSON); STATUS is MENUNGGU while it waits, PROSES_POSTING while its approval posts it, then
--- DISETUJUI (FINA_JVID / FINA_JVNUMBER say which JV it became), DITOLAK or GAGAL_POSTING (POST_ERROR says why).
--- WF_INSTANCE_ID is its BPM instance (workflow FINA_JV_APPROVAL, entity type FINA_JV_SUBMISSION).
---
--- The browser role (biza_app) may READ the columns a list shows (Daftar Pengajuan JV, Persetujuan JV) and nothing
--- else: not DOCUMENT (the JV goes out through fina/submission/get, which checks the FINA right), and no write. The
--- rls_role default privileges grant every new table to biza_app, so everything is taken back first.
-
-CREATE TABLE IF NOT EXISTS FINA$JV_SUBMISSION (
-    ID bigserial NOT NULL,
-    SUB_NUMBER varchar(30) NOT NULL,
-    STATUS varchar(16) NOT NULL,
-    TRANSDATE date NOT NULL,
-    TRANSDESCRIPTION varchar(80),
-    AMOUNT numeric(18,4) NOT NULL DEFAULT 0,
-    TEMPLATEID integer,
-    DOCUMENT text NOT NULL,
-    WF_INSTANCE_ID bigint,
-    FINA_JVID integer,
-    FINA_JVNUMBER varchar(20),
-    POST_ERROR text,
-    CREATED_BY integer NOT NULL,
-    CREATED_AT timestamp NOT NULL DEFAULT now(),
-    UPDATED_BY integer,
-    UPDATED_AT timestamp,
-    DECIDED_BY integer,
-    DECIDED_AT timestamp,
-    CONSTRAINT PK_FINA$JV_SUBMISSION PRIMARY KEY (ID),
-    CONSTRAINT UQ_FINA$JV_SUBMISSION_NUMBER UNIQUE (SUB_NUMBER),
-    CONSTRAINT CK_FINA$JV_SUBMISSION_STATUS CHECK (STATUS IN ('MENUNGGU', 'PROSES_POSTING', 'DISETUJUI', 'DITOLAK', 'GAGAL_POSTING'))
-);
-
-CREATE INDEX IF NOT EXISTS IDX_FINA$JV_SUBMISSION_STATUS ON FINA$JV_SUBMISSION (STATUS);
-
-REVOKE ALL ON FINA$JV_SUBMISSION FROM biza_app;
-REVOKE ALL ON SEQUENCE FINA$JV_SUBMISSION_ID_SEQ FROM biza_app;
-GRANT SELECT (ID, SUB_NUMBER, STATUS, TRANSDATE, TRANSDESCRIPTION, AMOUNT, TEMPLATEID, WF_INSTANCE_ID, FINA_JVID, FINA_JVNUMBER, POST_ERROR, CREATED_BY, CREATED_AT, UPDATED_BY, UPDATED_AT, DECIDED_BY, DECIDED_AT) ON FINA$JV_SUBMISSION TO biza_app;