feat(MED-97): create company benefits tables

supabase/migrations/20250101000002_fix_permissions.sql

@@ -0,0 +1,48 @@
+-- Quick fix for RLS permissions issue
+-- Run this immediately to fix the permission denied error
+
+-- Grant execute permissions to authenticated users for all benefit distribution functions
+grant execute on function medreport.get_account_balance(uuid) to authenticated;
+grant execute on function medreport.distribute_health_benefits(uuid, numeric, text) to authenticated;
+grant execute on function medreport.consume_account_balance(uuid, numeric, text, text) to authenticated;
+grant execute on function medreport.upsert_benefit_distribution_schedule(uuid, numeric, text) to authenticated;
+grant execute on function medreport.calculate_next_distribution_date(text, timestamp with time zone) to authenticated;
+grant execute on function medreport.trigger_benefit_distribution(uuid) to authenticated;
+grant execute on function medreport.trigger_distribute_benefits() to authenticated;
+grant execute on function medreport.process_periodic_benefit_distributions() to authenticated;
+
+-- Also ensure the trigger function has security definer
+create or replace function medreport.trigger_distribute_benefits()
+returns trigger
+language plpgsql
+security definer
+as $$
+begin
+    -- Only distribute if benefit_amount is set and greater than 0
+    if new.benefit_amount is not null and new.benefit_amount > 0 then
+        -- Distribute benefits to all company members immediately
+        perform medreport.distribute_health_benefits(
+            new.account_id,
+            new.benefit_amount,
+            coalesce(new.benefit_occurance, 'yearly')
+        );
+        
+        -- Create or update the distribution schedule for future distributions
+        perform medreport.upsert_benefit_distribution_schedule(
+            new.account_id,
+            new.benefit_amount,
+            coalesce(new.benefit_occurance, 'yearly')
+        );
+    else
+        -- If benefit_amount is 0 or null, deactivate the schedule
+        update medreport.benefit_distribution_schedule
+        set is_active = false, updated_at = now()
+        where company_id = new.account_id;
+    end if;
+    
+    return new;
+end;
+$$;
+
+-- Grant execute permission to the updated trigger function
+grant execute on function medreport.trigger_distribute_benefits() to authenticated, service_role;