7c20b518d4
Repositorio estava ha ~5 sessoes sem commit. Consolida tudo desde d088a89.
Ver commit.md na raiz para descricao completa por sessao.
# Numeros
- A# auditoria abertos: 0/30
- V# verificacoes abertos: 5/52 (todos adiados com plano)
- T# testes escritos: 10/10
- Vitest: 192/192
- SQL integration: 33/33
- E2E (Playwright, novo): 5/5
- Migrations: 17 (10 novas Sessao 6)
- Areas auditadas: 7 (+documentos com 10 V#)
# Highlights Sessao 6 (hoje)
- V#34/V#41 Opcao B2: tenant_features com plano + override (RPC SECURITY DEFINER, tela /saas/tenant-features)
- A#20 rev2 self-hosted: defesa em 5 camadas (honeypot + rate limit + math captcha condicional + paranoid mode + dashboard /saas/security)
- Documentos hardening (V#43-V#49): tenant scoping em storage policies (vazamento entre clinicas eliminado), RPC validate_share_token, signatures policy granular
- SaaS Twilio Config (/saas/twilio-config): UI editavel para SID/webhook/cotacao; AUTH_TOKEN permanece em env var
- T#9 + T#10: useAgendaEvents.spec.js + Playwright E2E (descobriu bug no front que foi corrigido)
# Sessoes anteriores (1-5) consolidadas
- Sessao 1: auth/router/session, normalizeRole extraido
- Sessao 2: agenda - composables/services consolidados
- Sessao 3: pacientes - tenant_id em todas queries
- Sessao 4: security review pagina publica - 14/15 vulnerabilidades corrigidas
- Sessao 5: SaaS - P0 (A#30: 7 tabelas com RLS off corrigidas)
# .gitignore ajustado
- supabase/* + !supabase/functions/ (mantem 10 edge functions, ignora .temp/migrations gerados pelo CLI)
- database-novo/backups/ (regeneravel via db.cjs backup)
- test-results/ + playwright-report/
- .claude/settings.local.json (config local com senha de dev removida do tracking)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
139 lines
5.7 KiB
SQL
139 lines
5.7 KiB
SQL
-- Tables: Tenants / Multi-tenant
|
|
-- Gerado automaticamente em 2026-04-17T12:23:05.228Z
|
|
-- Total: 10
|
|
|
|
CREATE TABLE public.tenant_members (
|
|
id uuid DEFAULT gen_random_uuid() NOT NULL,
|
|
tenant_id uuid NOT NULL,
|
|
user_id uuid NOT NULL,
|
|
role text NOT NULL,
|
|
status text DEFAULT 'active'::text NOT NULL,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL
|
|
);
|
|
|
|
CREATE TABLE public.company_profiles (
|
|
id uuid DEFAULT gen_random_uuid() NOT NULL,
|
|
tenant_id uuid NOT NULL,
|
|
nome_fantasia text,
|
|
razao_social text,
|
|
tipo_empresa text,
|
|
cnpj text,
|
|
ie text,
|
|
im text,
|
|
cep text,
|
|
logradouro text,
|
|
numero text,
|
|
complemento text,
|
|
bairro text,
|
|
cidade text,
|
|
estado text,
|
|
email text,
|
|
telefone text,
|
|
site text,
|
|
logo_url text,
|
|
redes_sociais jsonb DEFAULT '[]'::jsonb NOT NULL,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL,
|
|
updated_at timestamp with time zone DEFAULT now() NOT NULL
|
|
);
|
|
|
|
CREATE TABLE public.dev_user_credentials (
|
|
id uuid DEFAULT gen_random_uuid() NOT NULL,
|
|
user_id uuid,
|
|
email text NOT NULL,
|
|
password_dev text NOT NULL,
|
|
kind text DEFAULT 'custom'::text NOT NULL,
|
|
note text,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL
|
|
);
|
|
|
|
CREATE TABLE public.owner_users (
|
|
owner_id uuid NOT NULL,
|
|
user_id uuid NOT NULL,
|
|
role text DEFAULT 'admin'::text NOT NULL,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL
|
|
);
|
|
|
|
CREATE TABLE public.profiles (
|
|
id uuid NOT NULL,
|
|
role text DEFAULT 'tenant_member'::text NOT NULL,
|
|
full_name text,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL,
|
|
updated_at timestamp with time zone DEFAULT now() NOT NULL,
|
|
avatar_url text,
|
|
phone text,
|
|
bio text,
|
|
language text DEFAULT 'pt-BR'::text NOT NULL,
|
|
timezone text DEFAULT 'America/Sao_Paulo'::text NOT NULL,
|
|
notify_system_email boolean DEFAULT true NOT NULL,
|
|
notify_reminders boolean DEFAULT true NOT NULL,
|
|
notify_news boolean DEFAULT false NOT NULL,
|
|
account_type text DEFAULT 'free'::text NOT NULL,
|
|
platform_roles text[] DEFAULT '{}'::text[] NOT NULL,
|
|
nickname text,
|
|
work_description text,
|
|
work_description_other text,
|
|
site_url text,
|
|
social_instagram text,
|
|
social_youtube text,
|
|
social_facebook text,
|
|
social_x text,
|
|
social_custom jsonb DEFAULT '[]'::jsonb NOT NULL,
|
|
tenant_id uuid,
|
|
CONSTRAINT profiles_account_type_check CHECK ((account_type = ANY (ARRAY['free'::text, 'patient'::text, 'therapist'::text, 'clinic'::text]))),
|
|
CONSTRAINT profiles_role_check CHECK ((role = ANY (ARRAY['saas_admin'::text, 'tenant_member'::text, 'portal_user'::text, 'patient'::text])))
|
|
);
|
|
|
|
CREATE TABLE public.saas_admins (
|
|
user_id uuid NOT NULL,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL
|
|
);
|
|
|
|
CREATE TABLE public.support_sessions (
|
|
id uuid DEFAULT gen_random_uuid() NOT NULL,
|
|
tenant_id uuid NOT NULL,
|
|
admin_id uuid NOT NULL,
|
|
token text DEFAULT encode(extensions.gen_random_bytes(32), 'hex'::text) NOT NULL,
|
|
expires_at timestamp with time zone DEFAULT (now() + '01:00:00'::interval) NOT NULL,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL
|
|
);
|
|
|
|
CREATE TABLE public.tenant_invites (
|
|
id uuid DEFAULT gen_random_uuid() NOT NULL,
|
|
tenant_id uuid NOT NULL,
|
|
email text NOT NULL,
|
|
role text NOT NULL,
|
|
token uuid DEFAULT gen_random_uuid() NOT NULL,
|
|
invited_by uuid,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL,
|
|
expires_at timestamp with time zone DEFAULT (now() + '7 days'::interval) NOT NULL,
|
|
accepted_at timestamp with time zone,
|
|
accepted_by uuid,
|
|
revoked_at timestamp with time zone,
|
|
revoked_by uuid,
|
|
CONSTRAINT tenant_invites_role_check CHECK ((role = ANY (ARRAY['therapist'::text, 'secretary'::text])))
|
|
);
|
|
|
|
CREATE TABLE public.tenants (
|
|
id uuid DEFAULT gen_random_uuid() NOT NULL,
|
|
name text,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL,
|
|
kind text DEFAULT 'saas'::text NOT NULL,
|
|
papel_timbrado jsonb DEFAULT '{"footer": {"slots": {"left": null, "right": null, "center": {"type": "custom-text", "content": ""}}, "height": 40, "preset": "text-center", "divider": {"show": true, "color": "#cccccc", "style": "solid"}, "enabled": true, "showPageNumber": false}, "header": {"slots": {"left": {"size": "medium", "type": "logo"}, "right": {"type": "institution-data", "fields": ["nome", "cnpj", "endereco_linha"]}, "center": null}, "height": 80, "preset": "logo-left-text-right", "divider": {"show": true, "color": "#cccccc", "style": "solid"}, "enabled": true}, "margins": {"top": 20, "left": 25, "right": 25, "bottom": 20}}'::jsonb,
|
|
CONSTRAINT tenants_kind_check CHECK ((kind = ANY (ARRAY['therapist'::text, 'clinic_coworking'::text, 'clinic_reception'::text, 'clinic_full'::text, 'clinic'::text, 'saas'::text, 'supervisor'::text])))
|
|
);
|
|
|
|
CREATE TABLE public.user_settings (
|
|
user_id uuid NOT NULL,
|
|
theme_mode text DEFAULT 'dark'::text NOT NULL,
|
|
preset text DEFAULT 'Aura'::text NOT NULL,
|
|
primary_color text DEFAULT 'noir'::text NOT NULL,
|
|
surface_color text DEFAULT 'slate'::text NOT NULL,
|
|
menu_mode text DEFAULT 'static'::text NOT NULL,
|
|
created_at timestamp with time zone DEFAULT now() NOT NULL,
|
|
updated_at timestamp with time zone DEFAULT now() NOT NULL,
|
|
layout_variant text DEFAULT 'classic'::text NOT NULL,
|
|
CONSTRAINT user_settings_layout_variant_check CHECK ((layout_variant = ANY (ARRAY['classic'::text, 'rail'::text]))),
|
|
CONSTRAINT user_settings_menu_mode_check CHECK ((menu_mode = ANY (ARRAY['static'::text, 'overlay'::text]))),
|
|
CONSTRAINT user_settings_theme_mode_check CHECK ((theme_mode = ANY (ARRAY['light'::text, 'dark'::text])))
|
|
);
|