commit4

database/migrations/2026_10_28_130000_create_workshop_billing_corrections.php

@@ -0,0 +1,16 @@
+<?php
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+return new class extends Migration {
+ public function up(): void {
+  $old=substr(DB::selectOne("SELECT pg_get_constraintdef(oid) AS d FROM pg_constraint WHERE conrelid='permission_grants'::regclass AND conname='permission_grants_scope_check'")->d,6);
+  DB::statement('ALTER TABLE permission_grants DROP CONSTRAINT permission_grants_scope_check');
+  DB::statement("ALTER TABLE permission_grants ADD CONSTRAINT permission_grants_scope_check CHECK (($old) OR (permission IN ('workshop_corrections.view','workshop_corrections.request','workshop_corrections.review','workshop_corrections.apply') AND unit_id IS NOT NULL))");
+  DB::unprepared(file_get_contents(__DIR__.'/../sql/workshop-corrections.sql'));
+  foreach(['wc_requests','wc_reviews','wc_applications','wc_commands','wc_events','wc_outbox'] as $t){
+   DB::statement("CREATE TRIGGER {$t}_immutable BEFORE UPDATE OR DELETE ON {$t} FOR EACH ROW EXECUTE FUNCTION sgf_append_only_audit()");
+   DB::statement("CREATE TRIGGER {$t}_environment BEFORE INSERT ON {$t} FOR EACH ROW EXECUTE FUNCTION sgf_ic_test_only()");
+  }
+ }
+ public function down(): void {throw new RuntimeException('Correction history requires reviewed preservation.');}
+};