feat(db): t38 — deploy hardening final (security, indexes, autovacuum, FK)

supabase/functions/_shared/cors-snapshot.json

@@ -1,8 +1,8 @@
 {
-  "generated_at": "2026-05-01T20:17:13.993Z",
-  "total": 83,
+  "generated_at": "2026-05-15T11:17:51.360Z",
+  "total": 78,
   "counts": {
-    "shared": 83,
+    "shared": 78,
     "inline": 0,
     "none": 0
   },
@@ -31,14 +31,6 @@
       "allowMethods": null,
       "allowOrigin": null
     },
-    {
-      "name": "bi-share-dossier",
-      "mode": "shared",
-      "allowHeaders": [],
-      "exposeHeaders": [],
-      "allowMethods": null,
-      "allowOrigin": null
-    },
     {
       "name": "bitrix-sync",
       "mode": "shared",
@@ -87,14 +79,6 @@
       "allowMethods": null,
       "allowOrigin": null
     },
-    {
-      "name": "collections-public-react",
-      "mode": "shared",
-      "allowHeaders": [],
-      "exposeHeaders": [],
-      "allowMethods": null,
-      "allowOrigin": null
-    },
     {
       "name": "collections-watcher",
       "mode": "shared",
@@ -127,14 +111,6 @@
       "allowMethods": null,
       "allowOrigin": null
     },
-    {
-      "name": "comparisons-public-react",
-      "mode": "shared",
-      "allowHeaders": [],
-      "exposeHeaders": [],
-      "allowMethods": null,
-      "allowOrigin": null
-    },
     {
       "name": "connection-tester",
       "mode": "shared",
@@ -295,14 +271,6 @@
       "allowMethods": null,
       "allowOrigin": null
     },
-    {
-      "name": "generate-mockup-nanobanana",
-      "mode": "shared",
-      "allowHeaders": [],
-      "exposeHeaders": [],
-      "allowMethods": null,
-      "allowOrigin": null
-    },
     {
       "name": "generate-product-seo",
       "mode": "shared",
@@ -359,14 +327,6 @@
       "allowMethods": null,
       "allowOrigin": null
     },
-    {
-      "name": "kit-public-view",
-      "mode": "shared",
-      "allowHeaders": [],
-      "exposeHeaders": [],
-      "allowMethods": null,
-      "allowOrigin": null
-    },
     {
       "name": "log-login-attempt",
       "mode": "shared",
@@ -495,6 +455,14 @@
       "allowMethods": null,
       "allowOrigin": null
     },
+    {
+      "name": "quote-public-view",
+      "mode": "shared",
+      "allowHeaders": [],
+      "exposeHeaders": [],
+      "allowMethods": null,
+      "allowOrigin": null
+    },
     {
       "name": "quote-sync",
       "mode": "shared",
@@ -664,4 +632,4 @@
       "allowOrigin": null
     }
   ]
-}
+}

supabase/functions/quote-public-view/index.ts

@@ -0,0 +1,16 @@
+/**
+ * quote-public-view — DEPRECATED
+ * Rota pública de aprovação de orçamento por token removida em 2026-05-07.
+ * Mantida como stub para compatibilidade com config.toml.
+ */
+import { buildPublicCorsHeaders, handleCorsPreflight } from "../_shared/cors.ts";
+
+Deno.serve((req) => {
+  const preflight = handleCorsPreflight(req, { public: true });
+  if (preflight) return preflight;
+
+  return new Response(
+    JSON.stringify({ error: "This endpoint has been discontinued." }),
+    { status: 410, headers: { ...buildPublicCorsHeaders(), "Content-Type": "application/json" } }
+  );
+});

supabase/migrations/001_notification_system.sql

@@ -89,6 +89,7 @@ END;
 $$ LANGUAGE plpgsql;
 
 DROP TRIGGER IF EXISTS trigger_update_notification_updated_at ON notifications;
+-- Could not detect table for DROP TRIGGER IF EXISTS trigger_update_notification_updated_at
 CREATE TRIGGER trigger_update_notification_updated_at
   BEFORE UPDATE ON notifications
   FOR EACH ROW

supabase/migrations/002_notification_preferences.sql

@@ -63,6 +63,7 @@ BEGIN
 END;
 $$ LANGUAGE plpgsql;
 
+DROP TRIGGER IF EXISTS on_user_created_preferences ON auth.users;
 DROP TRIGGER IF EXISTS on_user_created_preferences ON auth.users;
 CREATE TRIGGER on_user_created_preferences
   AFTER INSERT ON auth.users

supabase/migrations/20241231000000_saved_filters.sql

@@ -38,33 +38,49 @@ CREATE INDEX IF NOT EXISTS idx_saved_filters_default
 ALTER TABLE public.saved_filters ENABLE ROW LEVEL SECURITY;
 
 -- Política: usuários podem ver apenas seus próprios filtros
-DROP POLICY IF EXISTS "Users can view own filters" ON public.saved_filters;
-CREATE POLICY "Users can view own filters"
-  ON public.saved_filters
-  FOR SELECT
-  USING (auth.uid() = user_id);
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname = 'public' AND tablename = 'saved_filters' AND policyname = 'Users can view own filters') THEN
+    CREATE POLICY "Users can view own filters"
+      ON public.saved_filters
+      FOR SELECT
+      USING (auth.uid() = user_id);
+  END IF;
+END $$;
 
 -- Política: usuários podem inserir seus próprios filtros
-DROP POLICY IF EXISTS "Users can insert own filters" ON public.saved_filters;
-CREATE POLICY "Users can insert own filters"
-  ON public.saved_filters
-  FOR INSERT
-  WITH CHECK (auth.uid() = user_id);
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname = 'public' AND tablename = 'saved_filters' AND policyname = 'Users can insert own filters') THEN
+    CREATE POLICY "Users can insert own filters"
+      ON public.saved_filters
+      FOR INSERT
+      WITH CHECK (auth.uid() = user_id);
+  END IF;
+END $$;
 
 -- Política: usuários podem atualizar seus próprios filtros
-DROP POLICY IF EXISTS "Users can update own filters" ON public.saved_filters;
-CREATE POLICY "Users can update own filters"
-  ON public.saved_filters
-  FOR UPDATE
-  USING (auth.uid() = user_id)
-  WITH CHECK (auth.uid() = user_id);
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname = 'public' AND tablename = 'saved_filters' AND policyname = 'Users can update own filters') THEN
+    CREATE POLICY "Users can update own filters"
+      ON public.saved_filters
+      FOR UPDATE
+      USING (auth.uid() = user_id)
+      WITH CHECK (auth.uid() = user_id);
+  END IF;
+END $$;
 
 -- Política: usuários podem deletar seus próprios filtros
-DROP POLICY IF EXISTS "Users can delete own filters" ON public.saved_filters;
-CREATE POLICY "Users can delete own filters"
-  ON public.saved_filters
-  FOR DELETE
-  USING (auth.uid() = user_id);
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname = 'public' AND tablename = 'saved_filters' AND policyname = 'Users can delete own filters') THEN
+    CREATE POLICY "Users can delete own filters"
+      ON public.saved_filters
+      FOR DELETE
+      USING (auth.uid() = user_id);
+  END IF;
+END $$;
 
 -- Trigger para atualizar updated_at
 CREATE OR REPLACE FUNCTION update_saved_filters_updated_at()
@@ -75,6 +91,7 @@ BEGIN
 END;
 $$ LANGUAGE plpgsql;
 
+DROP TRIGGER IF EXISTS trigger_saved_filters_updated_at ON public.saved_filters;
 DROP TRIGGER IF EXISTS trigger_saved_filters_updated_at ON public.saved_filters;
 CREATE TRIGGER trigger_saved_filters_updated_at
   BEFORE UPDATE ON public.saved_filters
@@ -97,6 +114,7 @@ BEGIN
 END;
 $$ LANGUAGE plpgsql;
 
+DROP TRIGGER IF EXISTS trigger_single_default_filter ON public.saved_filters;
 DROP TRIGGER IF EXISTS trigger_single_default_filter ON public.saved_filters;
 CREATE TRIGGER trigger_single_default_filter
   BEFORE INSERT OR UPDATE OF is_default ON public.saved_filters

supabase/migrations/20241231000001_entity_versions.sql

@@ -16,7 +16,15 @@ CREATE INDEX IF NOT EXISTS idx_versions_date ON public.entity_versions(changed_a
 
 ALTER TABLE public.entity_versions ENABLE ROW LEVEL SECURITY;
 
-DROP POLICY IF EXISTS "Users can view versions" ON public.entity_versions;
-CREATE POLICY "Users can view versions" ON public.entity_versions FOR SELECT USING (true);
-DROP POLICY IF EXISTS "Users can insert versions" ON public.entity_versions;
-CREATE POLICY "Users can insert versions" ON public.entity_versions FOR INSERT WITH CHECK (auth.uid() = changed_by OR changed_by IS NULL);
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname = 'public' AND tablename = 'entity_versions' AND policyname = 'Users can view versions') THEN
+    CREATE POLICY "Users can view versions" ON public.entity_versions FOR SELECT USING (true);
+  END IF;
+END $$;
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname = 'public' AND tablename = 'entity_versions' AND policyname = 'Users can insert versions') THEN
+    CREATE POLICY "Users can insert versions" ON public.entity_versions FOR INSERT WITH CHECK (auth.uid() = changed_by OR changed_by IS NULL);
+  END IF;
+END $$;