From edd50a04fd16435e15fe0fe294284ca8ae886f19 Mon Sep 17 00:00:00 2001
From: Light1YT <evileyecreation@gmail.com>
Date: Thu, 28 May 2026 20:29:19 +0500
Subject: [PATCH] feat(tradein): FDW grant + night-window seed for scrapers
 scheduler (#560 #563)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Prod prerequisites identified in deep review of the scheduler automation:

- data/sql/122: GRANT SELECT ON rosreestr_deals TO tradein_fdw_reader.
  scheduler import reads gendesign.rosreestr_deals via FDW, but the reader
  role was REVOKE ALL (100_tradein_fdw_role.sql) with no grant → import
  would fail "permission denied for table rosreestr_deals". Single parent
  grant suffices for declarative partitioning.

- tradein 072: seed next_run_at = next night-window (tomorrow + window_start
  hour, pinned UTC) instead of NULL. NULL made get_due_schedules() fire both
  rows within ~1 tick of deploy — outside the night window and (for cian)
  before the FDW grant lands. Stays enabled; just shifts first fire to night.
---
 data/sql/122_grant_rosreestr_to_fdw_reader.sql            | 7 +++++++
 .../data/sql/072_scrape_schedules_seed_cian_rosreestr.sql | 8 ++++++++
 2 files changed, 15 insertions(+)
 create mode 100644 data/sql/122_grant_rosreestr_to_fdw_reader.sql

diff --git a/data/sql/122_grant_rosreestr_to_fdw_reader.sql b/data/sql/122_grant_rosreestr_to_fdw_reader.sql
new file mode 100644
index 00000000..eae57e5d
--- /dev/null
+++ b/data/sql/122_grant_rosreestr_to_fdw_reader.sql
@@ -0,0 +1,7 @@
+-- 122_grant_rosreestr_to_fdw_reader.sql
+-- #563: tradein scheduler reads gendesign.rosreestr_deals via FDW; tradein_fdw_reader
+-- was REVOKE ALL (100_tradein_fdw_role.sql) → grant SELECT on the partitioned parent.
+-- Single parent grant suffices (PG declarative partitioning checks parent ACL).
+BEGIN;
+GRANT SELECT ON public.rosreestr_deals TO tradein_fdw_reader;
+COMMIT;
diff --git a/tradein-mvp/backend/data/sql/072_scrape_schedules_seed_cian_rosreestr.sql b/tradein-mvp/backend/data/sql/072_scrape_schedules_seed_cian_rosreestr.sql
index 6b25404f..99465fb8 100644
--- a/tradein-mvp/backend/data/sql/072_scrape_schedules_seed_cian_rosreestr.sql
+++ b/tradein-mvp/backend/data/sql/072_scrape_schedules_seed_cian_rosreestr.sql
@@ -53,11 +53,17 @@ COMMENT ON FOREIGN TABLE gendesign_rosreestr_deals IS
 
 -- ── Seed rows для scrape_schedules ────────────────────────────────────────────
 
+-- next_run_at = следующее наступление night-window (tomorrow + window_start_hour),
+-- иначе при NULL get_due_schedules() выстрелит сразу после деплоя (вне окна,
+-- cian — на момент деплоя / до того как ляжет FDW-грант миграции 122).
+-- window_*_hour документированы в UTC (см. 052) → AT TIME ZONE 'UTC' фиксирует
+-- wall-clock час в UTC независимо от session TimeZone GUC.
 INSERT INTO scrape_schedules (
     source,
     enabled,
     window_start_hour,
     window_end_hour,
+    next_run_at,
     default_params
 )
 VALUES
@@ -66,6 +72,7 @@ VALUES
     true,
     2,
     5,
+    ((CURRENT_DATE + INTERVAL '1 day') + make_interval(hours => 2)) AT TIME ZONE 'UTC',
     '{"batch_size": 100}'::jsonb
 ),
 (
@@ -73,6 +80,7 @@ VALUES
     true,
     4,
     6,
+    ((CURRENT_DATE + INTERVAL '1 day') + make_interval(hours => 4)) AT TIME ZONE 'UTC',
     '{"since": "2024-01-01", "batch_size": 2000}'::jsonb
 )
 ON CONFLICT (source) DO NOTHING;