feat(pokedex): add shareable read-only dex links

supabase/migrations/20260914000000_add_pokedex_sharing.sql

@@ -0,0 +1,73 @@
+-- Stable capability links for read-only Pokédex sharing.
+ALTER TABLE pokedexes
+  ADD COLUMN "shareToken" UUID NOT NULL DEFAULT gen_random_uuid();
+
+ALTER TABLE pokedexes
+  ADD CONSTRAINT pokedexes_share_token_key UNIQUE ("shareToken");
+
+CREATE OR REPLACE FUNCTION prevent_pokedex_share_token_update()
+RETURNS TRIGGER
+LANGUAGE plpgsql
+SET search_path = public, pg_temp
+AS $$
+BEGIN
+  IF NEW."shareToken" IS DISTINCT FROM OLD."shareToken" THEN
+    RAISE EXCEPTION 'shareToken is immutable';
+  END IF;
+  RETURN NEW;
+END;
+$$;
+
+CREATE TRIGGER prevent_pokedex_share_token_update
+  BEFORE UPDATE OF "shareToken" ON pokedexes
+  FOR EACH ROW EXECUTE FUNCTION prevent_pokedex_share_token_update();
+
+-- This is the only anonymous path into user-owned Pokédex data. Keep the returned
+-- shape deliberately narrow: no owner identity, row IDs, timestamps, or personal notes.
+CREATE OR REPLACE FUNCTION get_shared_pokedex(p_share_token UUID)
+RETURNS JSONB
+SECURITY DEFINER
+STABLE
+SET search_path = public, pg_temp
+LANGUAGE sql
+AS $$
+  SELECT jsonb_build_object(
+    'name', p.name,
+    'description', COALESCE(p.description, ''),
+    'isLivingDex', COALESCE(p."isLivingDex", false),
+    'isShinyDex', COALESCE(p."isShinyDex", false),
+    'isOriginDex', COALESCE(p."isOriginDex", false),
+    'isFormDex', COALESCE(p."isFormDex", false),
+    'gameScope', p."gameScope",
+    'dexScopes', COALESCE(
+      (
+        SELECT jsonb_agg(pds."dexId" ORDER BY pds."dexId")
+        FROM pokedex_dex_scopes pds
+        WHERE pds."pokedexId" = p.id
+      ),
+      '[]'::jsonb
+    ),
+    'catchStatuses', COALESCE(
+      (
+        SELECT jsonb_agg(
+          jsonb_build_object(
+            'pokemonId', cr."pokemonId"::text,
+            'caught', COALESCE(cr.caught, false),
+            'haveToEvolve', COALESCE(cr."haveToEvolve", false),
+            'inHome', COALESCE(cr."inHome", false),
+            'hasGigantamaxed', COALESCE(cr."hasGigantamaxed", false)
+          )
+          ORDER BY cr."pokemonId"
+        )
+        FROM catch_records cr
+        WHERE cr."pokedexId" = p.id
+      ),
+      '[]'::jsonb
+    )
+  )
+  FROM pokedexes p
+  WHERE p."shareToken" = p_share_token;
+$$;
+
+REVOKE ALL ON FUNCTION get_shared_pokedex(UUID) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION get_shared_pokedex(UUID) TO anon, authenticated;