@acms-subir/core 0.3.10 → 0.3.12

package/cli/migrations.generated.mjs

@@ -0,0 +1,1044 @@
+// GENERATED by scripts/gen-migrations.mjs from src/lib/repo/migrate-runner.ts. Do not edit; run `npm run gen:migrations -w @acms-subir/core`.
+
+// src/lib/live/migration.ts
+var LIVE_MIGRATION = { version: 34, statements: [
+  `ALTER TABLE settings ADD COLUMN live TEXT NOT NULL DEFAULT '{}'`,
+  `CREATE TABLE live_connections (
+    provider TEXT PRIMARY KEY CHECK(provider IN ('youtube','twitch')),
+    client_id TEXT NOT NULL, channel_input TEXT NOT NULL DEFAULT '', channel_id TEXT NOT NULL DEFAULT '', channel_name TEXT NOT NULL DEFAULT '',
+    encrypted TEXT NOT NULL, enabled INTEGER NOT NULL DEFAULT 0, revision INTEGER NOT NULL DEFAULT 1,
+    channels TEXT NOT NULL DEFAULT '[]', google_status TEXT NOT NULL DEFAULT 'testing', tested_at INTEGER NOT NULL DEFAULT 0,
+    checked_at INTEGER NOT NULL DEFAULT 0, last_attempt_at INTEGER NOT NULL DEFAULT 0, next_at INTEGER NOT NULL DEFAULT 0,
+    failures INTEGER NOT NULL DEFAULT 0, error TEXT NOT NULL DEFAULT '', lease TEXT NOT NULL DEFAULT '', lease_until INTEGER NOT NULL DEFAULT 0,
+    snapshot TEXT, upcoming TEXT, upcoming_checked_at INTEGER NOT NULL DEFAULT 0
+  )`,
+  `CREATE TABLE live_oauth_states (hash TEXT PRIMARY KEY, session_hash TEXT NOT NULL, revision INTEGER NOT NULL, encrypted TEXT NOT NULL, expires_at INTEGER NOT NULL)`,
+  `CREATE TABLE live_health (id INTEGER PRIMARY KEY CHECK(id=1), last_at INTEGER NOT NULL DEFAULT 0)`,
+  `INSERT INTO live_health (id) VALUES (1)`
+] };
+
+// src/lib/import/migration.ts
+var IMPORT_MIGRATION = { version: 35, statements: [
+  `CREATE TABLE IF NOT EXISTS import_runs (
+    id TEXT PRIMARY KEY,
+    source TEXT NOT NULL,
+    label TEXT NOT NULL DEFAULT '',
+    status TEXT NOT NULL DEFAULT 'running',
+    report TEXT NOT NULL DEFAULT '{}',
+    created_at INTEGER NOT NULL,
+    updated_at INTEGER NOT NULL
+  )`,
+  `CREATE TABLE IF NOT EXISTS import_records (
+    run_id TEXT NOT NULL,
+    kind TEXT NOT NULL,
+    source_id TEXT NOT NULL,
+    acms_id TEXT NOT NULL,
+    action TEXT NOT NULL,
+    stamp INTEGER NOT NULL DEFAULT 0,
+    created_at INTEGER NOT NULL,
+    PRIMARY KEY (run_id, kind, source_id)
+  )`,
+  `CREATE INDEX IF NOT EXISTS import_records_source ON import_records (kind, source_id)`
+] };
+
+// src/lib/email/migration.ts
+var EMAIL_MIGRATION = {
+  version: 29,
+  statements: [
+    `ALTER TABLE users ADD COLUMN session_version INTEGER NOT NULL DEFAULT 0`,
+    `ALTER TABLE bookings ADD COLUMN notification_version INTEGER NOT NULL DEFAULT 0`,
+    `ALTER TABLE bookings ADD COLUMN email_mutation TEXT NOT NULL DEFAULT ''`,
+    `CREATE TABLE email_configs (version INTEGER PRIMARY KEY AUTOINCREMENT,config TEXT NOT NULL,encrypted TEXT NOT NULL DEFAULT '',created_at INTEGER NOT NULL)`,
+    `CREATE TABLE email_jobs (id TEXT PRIMARY KEY,dedupe TEXT NOT NULL UNIQUE,kind TEXT NOT NULL,recipient TEXT NOT NULL,payload TEXT NOT NULL,
+      config_version INTEGER NOT NULL DEFAULT 0,state TEXT NOT NULL DEFAULT 'queued',attempts INTEGER NOT NULL DEFAULT 0,next_at INTEGER NOT NULL,
+      expires_at INTEGER,created_at INTEGER NOT NULL,updated_at INTEGER NOT NULL,lease TEXT NOT NULL DEFAULT '',lease_until INTEGER,
+      provider TEXT NOT NULL DEFAULT '',provider_id TEXT NOT NULL DEFAULT '',error TEXT NOT NULL DEFAULT '',accepted_at INTEGER,fingerprint TEXT NOT NULL DEFAULT '',rendered TEXT NOT NULL DEFAULT '')`,
+    `CREATE INDEX email_jobs_due ON email_jobs(state,next_at)`,
+    `CREATE INDEX email_jobs_provider ON email_jobs(provider,provider_id)`,
+    `CREATE TABLE email_attempts (id INTEGER PRIMARY KEY AUTOINCREMENT,job_id TEXT NOT NULL,attempt INTEGER NOT NULL,state TEXT NOT NULL,error TEXT NOT NULL,created_at INTEGER NOT NULL)`,
+    `CREATE TABLE email_delivery_events (id TEXT PRIMARY KEY,provider TEXT NOT NULL,provider_id TEXT NOT NULL,job_id TEXT NOT NULL DEFAULT '',recipient TEXT NOT NULL,state TEXT NOT NULL,created_at INTEGER NOT NULL,config_version INTEGER NOT NULL)`,
+    `CREATE INDEX email_events_message ON email_delivery_events(provider,provider_id)`,
+    `CREATE TABLE email_suppressions (address TEXT PRIMARY KEY,reason TEXT NOT NULL,created_at INTEGER NOT NULL)`,
+    `CREATE TABLE email_tokens (id TEXT PRIMARY KEY,token_hash TEXT NOT NULL UNIQUE,encrypted TEXT NOT NULL,purpose TEXT NOT NULL,email TEXT NOT NULL,name TEXT NOT NULL,role TEXT NOT NULL,user_id TEXT NOT NULL,expires_at INTEGER NOT NULL,created_at INTEGER NOT NULL,used_by TEXT NOT NULL DEFAULT '',revoked INTEGER NOT NULL DEFAULT 0)`,
+    `CREATE INDEX email_tokens_email ON email_tokens(email,purpose)`,
+    `CREATE TABLE email_rate_limits (key TEXT PRIMARY KEY,count INTEGER NOT NULL,expires_at INTEGER NOT NULL)`,
+    `CREATE TABLE email_meta (key TEXT PRIMARY KEY,value TEXT NOT NULL)`
+  ]
+};
+
+// src/lib/webhook-sql.ts
+var now = "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+function enqueue(event, data) {
+  return `INSERT INTO webhook_deliveries (id,webhook_id,event,payload,status,attempts,next_at,created_at)
+    SELECT lower(hex(randomblob(16))),h.id,${event},
+      json_object('type',${event},'createdAt',strftime('%Y-%m-%dT%H:%M:%fZ','now'),'data',json(${data})),
+      'pending',0,${now},${now}
+    FROM webhooks h WHERE h.active=1 AND EXISTS (
+      SELECT 1 FROM json_each(h.events) WHERE value=${event} OR value='*'
+    ) AND (SELECT suppressed FROM webhook_control WHERE id=1)=0;`;
+}
+function trigger(name, action, table, when, event, data) {
+  return `CREATE TRIGGER ${name} AFTER ${action} ON ${table} WHEN ${when}
+    BEGIN ${enqueue(event, data)} END`;
+}
+function content(kind) {
+  const table = `${kind}s`;
+  const fields = kind === "post" ? ["collection", "slug", "title", "status", "body", "body_json", "body_html", "excerpt", "tags", "cover", "cover_alt", "seo_title", "seo_desc", "featured", "author_id", "template", "published_at"] : ["slug", "title", "status", "is_home", "locale", "blocks", "body_json", "body_html", "seo_title", "seo_desc", "template"];
+  const snapshot = (row) => `json_object('id',${row}.id,'slug',${row}.slug,'title',${row}.title,'status',${row}.status,
+    ${kind === "post" ? `'collection',${row}.collection` : `'locale',${row}.locale,'isHome',json(CASE WHEN ${row}.is_home THEN 'true' ELSE 'false' END)`})`;
+  const changed = fields.map((f) => `OLD.${f} IS NOT NEW.${f}`).join(" OR ");
+  const event = `CASE WHEN OLD.status!='published' THEN '${kind}.published'
+    WHEN NEW.status!='published' THEN '${kind}.unpublished' ELSE '${kind}.updated' END`;
+  return [
+    trigger(`webhook_${kind}_insert`, "INSERT", table, "NEW.status='published'", `'${kind}.published'`, `json_object('${kind}',${snapshot("NEW")})`),
+    trigger(
+      `webhook_${kind}_update`,
+      "UPDATE",
+      table,
+      `(OLD.status='published' OR NEW.status='published') AND (${changed})`,
+      event,
+      `json_object('${kind}',json(CASE WHEN NEW.status='published' THEN ${snapshot("NEW")}
+        ELSE json_set(${snapshot("OLD")},'$.status',NEW.status) END),
+        'previous',json(CASE WHEN OLD.status='published' THEN ${snapshot("OLD")} ELSE 'null' END))`
+    ),
+    trigger(`webhook_${kind}_delete`, "DELETE", table, "OLD.status='published'", `'${kind}.deleted'`, `json_object('${kind}',${snapshot("OLD")})`)
+  ];
+}
+var media = (row) => `json_object('media',json_object('id',${row}.id,'key',${row}.key,'filename',${row}.filename,
+  'mime',${row}.mime,'width',${row}.width,'height',${row}.height,'size',${row}.size,'alt',${row}.alt))`;
+var WEBHOOK_MIGRATION = { version: 33, statements: [
+  `CREATE TABLE webhook_control (id INTEGER PRIMARY KEY CHECK(id=1), suppressed INTEGER NOT NULL DEFAULT 0)`,
+  `INSERT INTO webhook_control (id,suppressed) VALUES (1,0)`,
+  // Populate the envelope from the inserted delivery's stable ID. Retries
+  // send these exact stored bytes, including for SQL-generated notifications.
+  `CREATE TRIGGER webhook_delivery_envelope AFTER INSERT ON webhook_deliveries
+    WHEN json_extract(NEW.payload,'$.id') IS NULL BEGIN
+      UPDATE webhook_deliveries SET payload=json_set(payload,'$.id',NEW.id) WHERE id=NEW.id;
+    END`,
+  ...content("post"),
+  ...content("page"),
+  trigger("webhook_media_create", "INSERT", "media", "1", "'media.created'", media("NEW")),
+  trigger("webhook_media_update", "UPDATE", "media", "OLD.alt IS NOT NEW.alt", "'media.updated'", media("NEW")),
+  trigger("webhook_media_delete", "DELETE", "media", "1", "'media.deleted'", media("OLD"))
+] };
+
+// src/lib/push/migration.ts
+var now2 = "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+var status = "CASE WHEN (SELECT suppressed FROM webhook_control WHERE id=1)=1 THEN 'skipped' ELSE 'pending' END";
+function enqueue2(kind) {
+  return `INSERT INTO push_queue (key,kind,doc_id,occurrence,status,notification_id,created_at,updated_at)
+    SELECT '${kind}:'||NEW.id,'${kind}',NEW.id,NULL,${status},NULL,${now2},${now2}
+    WHERE NOT EXISTS (SELECT 1 FROM push_queue WHERE key='${kind}:'||NEW.id);`;
+}
+function triggers(kind) {
+  const table = `${kind}s`;
+  return [
+    `CREATE TRIGGER push_${kind}_insert AFTER INSERT ON ${table} WHEN NEW.status='published' BEGIN ${enqueue2(kind)} END`,
+    `CREATE TRIGGER push_${kind}_publish AFTER UPDATE OF status ON ${table}
+      WHEN NEW.status='published' AND OLD.status IS NOT 'published' BEGIN ${enqueue2(kind)} END`
+  ];
+}
+var PUSH_MIGRATION = { version: 37, statements: [
+  `ALTER TABLE settings ADD COLUMN push TEXT NOT NULL DEFAULT '{}'`,
+  `CREATE TABLE push_devices (
+    id TEXT PRIMARY KEY, token TEXT NOT NULL UNIQUE, platform TEXT NOT NULL,
+    locale TEXT NOT NULL DEFAULT '', topics TEXT NOT NULL DEFAULT '[]',
+    created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL, last_seen_at INTEGER NOT NULL
+  )`,
+  `CREATE INDEX push_devices_seen ON push_devices (last_seen_at)`,
+  `CREATE TABLE push_notifications (
+    id TEXT PRIMARY KEY, title TEXT NOT NULL, body TEXT NOT NULL DEFAULT '', url TEXT NOT NULL DEFAULT '',
+    topics TEXT NOT NULL DEFAULT '[]', source TEXT NOT NULL DEFAULT 'manual', source_key TEXT NOT NULL DEFAULT '',
+    status TEXT NOT NULL DEFAULT 'sending', recipients INTEGER NOT NULL DEFAULT 0, sent INTEGER NOT NULL DEFAULT 0,
+    ok INTEGER NOT NULL DEFAULT 0, failed INTEGER NOT NULL DEFAULT 0, removed INTEGER NOT NULL DEFAULT 0,
+    error TEXT NOT NULL DEFAULT '', author TEXT NOT NULL DEFAULT '', created_at INTEGER NOT NULL, finished_at INTEGER
+  )`,
+  `CREATE INDEX push_notifications_created ON push_notifications (created_at)`,
+  // Expo push tickets awaiting a receipt check (receipts expire after 24h)
+  `CREATE TABLE push_tickets (id TEXT PRIMARY KEY, notification_id TEXT NOT NULL, device_id TEXT NOT NULL, created_at INTEGER NOT NULL)`,
+  `CREATE INDEX push_tickets_created ON push_tickets (created_at)`,
+  `CREATE TABLE push_queue (
+    key TEXT PRIMARY KEY, kind TEXT NOT NULL, doc_id TEXT NOT NULL, occurrence INTEGER,
+    status TEXT NOT NULL, notification_id TEXT, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL
+  )`,
+  `CREATE INDEX push_queue_status ON push_queue (status, created_at)`,
+  // everything already live counts as announced
+  `INSERT INTO push_queue (key,kind,doc_id,occurrence,status,notification_id,created_at,updated_at)
+    SELECT 'post:'||id,'post',id,NULL,'seen',NULL,${now2},${now2} FROM posts WHERE status='published'`,
+  `INSERT INTO push_queue (key,kind,doc_id,occurrence,status,notification_id,created_at,updated_at)
+    SELECT 'event:'||id,'event',id,NULL,'seen',NULL,${now2},${now2} FROM events WHERE status='published'`,
+  ...triggers("post"),
+  ...triggers("event")
+] };
+
+// src/lib/editor/migration.ts
+var now3 = "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+var revoke = (reason) => `UPDATE editor_devices SET revoked_at=${now3}, revoked_reason='${reason}' WHERE user_id=OLD.id AND revoked_at IS NULL;
+    DELETE FROM editor_tokens WHERE device_id IN (SELECT id FROM editor_devices WHERE user_id=OLD.id);`;
+var EDITOR_MIGRATION = { version: 38, statements: [
+  `CREATE TABLE editor_devices (
+    id TEXT PRIMARY KEY, user_id TEXT NOT NULL, name TEXT NOT NULL, client_id TEXT NOT NULL,
+    session_version INTEGER NOT NULL, created_at INTEGER NOT NULL, last_used_at INTEGER NOT NULL,
+    revoked_at INTEGER, revoked_reason TEXT NOT NULL DEFAULT ''
+  )`,
+  `CREATE INDEX editor_devices_user ON editor_devices (user_id, revoked_at)`,
+  `CREATE TABLE editor_tokens (
+    hash TEXT PRIMARY KEY, device_id TEXT NOT NULL, kind TEXT NOT NULL CHECK (kind IN ('access','refresh')),
+    created_at INTEGER NOT NULL, expires_at INTEGER NOT NULL, used_at INTEGER
+  )`,
+  `CREATE INDEX editor_tokens_device ON editor_tokens (device_id)`,
+  `CREATE TABLE editor_codes (
+    hash TEXT PRIMARY KEY, user_id TEXT NOT NULL, client_id TEXT NOT NULL, redirect_uri TEXT NOT NULL,
+    challenge TEXT NOT NULL, device_name TEXT NOT NULL, session_version INTEGER NOT NULL,
+    created_at INTEGER NOT NULL, expires_at INTEGER NOT NULL, used_at INTEGER, device_id TEXT
+  )`,
+  `CREATE TABLE editor_activity (
+    id TEXT PRIMARY KEY, created_at INTEGER NOT NULL, user_id TEXT NOT NULL, device_id TEXT NOT NULL,
+    action TEXT NOT NULL, target TEXT NOT NULL DEFAULT ''
+  )`,
+  `CREATE INDEX editor_activity_device ON editor_activity (device_id, created_at)`,
+  `CREATE TRIGGER editor_user_delete AFTER DELETE ON users BEGIN ${revoke("user removed")} END`,
+  `CREATE TRIGGER editor_user_password AFTER UPDATE OF session_version ON users
+    WHEN NEW.session_version IS NOT OLD.session_version BEGIN ${revoke("password changed")} END`
+] };
+var EDITOR_GRACE_MIGRATION = { version: 39, statements: [
+  `ALTER TABLE editor_tokens ADD COLUMN parent TEXT`,
+  `CREATE INDEX editor_tokens_parent ON editor_tokens (parent)`,
+  `CREATE TABLE editor_claims (key TEXT PRIMARY KEY, created_at INTEGER NOT NULL)`
+] };
+
+// src/lib/calendar/migration.ts
+var CALENDAR_SETTINGS_MIGRATION = { version: 40, statements: [
+  `ALTER TABLE settings ADD COLUMN calendar TEXT NOT NULL DEFAULT '{}'`,
+  `ALTER TABLE booking_links ADD COLUMN approval TEXT NOT NULL DEFAULT 'default'`,
+  `ALTER TABLE booking_links ADD COLUMN approval_rules TEXT NOT NULL DEFAULT '{}'`,
+  `UPDATE booking_links SET approval = CASE auto_confirm WHEN 1 THEN 'default' ELSE 'manual' END`
+] };
+var ROOM_HOLD_MIGRATION = { version: 41, statements: [
+  `ALTER TABLE events ADD COLUMN room_hold TEXT NOT NULL DEFAULT '{}'`
+] };
+
+// src/lib/maps/migration.ts
+var PLACES_MIGRATION = { version: 43, statements: [
+  `CREATE TABLE IF NOT EXISTS places (
+    id TEXT PRIMARY KEY, name TEXT NOT NULL, address TEXT NOT NULL DEFAULT '', url TEXT NOT NULL DEFAULT '',
+    lat REAL, lng REAL, notes TEXT NOT NULL DEFAULT '', is_default INTEGER NOT NULL DEFAULT 0,
+    map_image TEXT NOT NULL DEFAULT '', map_image_dark TEXT NOT NULL DEFAULT '',
+    ord INTEGER NOT NULL DEFAULT 0, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL
+  )`,
+  `ALTER TABLE resources ADD COLUMN place_id TEXT NOT NULL DEFAULT ''`
+] };
+
+// src/lib/repo/migrations.ts
+var CONTENT_VERSION_COLUMNS = {
+  settings: [
+    "site_title",
+    "tagline",
+    "links_name",
+    "links_bio",
+    "links_avatar",
+    "footer_text",
+    "active_theme",
+    "design_overrides",
+    "site_logo",
+    "site_url",
+    "site_favicon",
+    "site_cover",
+    "announcement",
+    "head_code",
+    "footer_code",
+    "timezone",
+    "locale",
+    "analytics",
+    "section_pages",
+    "live",
+    "push",
+    "calendar",
+    "site_logo_dark",
+    "mobile_access"
+  ],
+  pages: ["id", "slug", "title", "status", "is_home", "blocks", "seo_title", "seo_desc", "body_json", "body_html", "template", "locale", "translations"],
+  posts: [
+    "id",
+    "slug",
+    "title",
+    "body",
+    "tags",
+    "cover",
+    "status",
+    "published_at",
+    "body_json",
+    "body_html",
+    "excerpt",
+    "cover_alt",
+    "seo_title",
+    "seo_desc",
+    "scheduled_at",
+    "author_id",
+    "featured",
+    "template",
+    "collection",
+    "translations"
+  ],
+  post_authors: ["post_id", "author_id", "ord"],
+  events: [
+    "id",
+    "slug",
+    "title",
+    "body_json",
+    "body_html",
+    "excerpt",
+    "cover",
+    "cover_alt",
+    "seo_title",
+    "seo_desc",
+    "status",
+    "featured",
+    "tags",
+    "template",
+    "starts",
+    "ends",
+    "all_day",
+    "timezone",
+    "rrule",
+    "exdates",
+    "cancelled",
+    "location",
+    "cta",
+    "calendar_ids",
+    "fields",
+    "source_uid",
+    "start_at",
+    "end_at",
+    "published_at",
+    "scheduled_at",
+    "rsvp",
+    "translations",
+    "room_hold"
+  ],
+  calendars: ["id", "slug", "name", "color", "description", "kind", "feed_url", "visibility", "feed_token", "ord"],
+  places: ["id", "name", "address", "url", "lat", "lng", "notes", "is_default", "map_image", "map_image_dark", "ord"],
+  resources: [
+    "id",
+    "slug",
+    "name",
+    "kind",
+    "description",
+    "photo",
+    "capacity",
+    "amenities",
+    "timezone",
+    "hours",
+    "overrides",
+    "busy_feeds",
+    "visibility",
+    "show_on_calendar",
+    "feed_token",
+    "ord",
+    "place_id"
+  ],
+  booking_links: [
+    "id",
+    "resource_id",
+    "slug",
+    "name",
+    "description",
+    "mode",
+    "duration",
+    "lengths",
+    "min_days",
+    "max_days",
+    "step",
+    "buffer_before",
+    "buffer_after",
+    "min_notice",
+    "max_advance",
+    "per_day_cap",
+    "hours",
+    "auto_confirm",
+    "visibility",
+    "ask_phone",
+    "questions",
+    "confirm_message",
+    "redirect_url",
+    "active",
+    "ord",
+    "approval",
+    "approval_rules",
+    "change_cutoff"
+  ],
+  links: ["id", "label", "url", "icon", "ord", "kind", "html", "meta"],
+  nav_items: ["id", "label", "url", "area", "ord"],
+  tags: ["id", "name", "slug", "description"],
+  media: ["id", "key", "filename", "mime", "width", "height", "size", "alt", "variants"],
+  redirects: ["id", "from_path", "to_path", "code"],
+  users: ["id", "name", "email", "role", "bio", "avatar", "slug"],
+  forms: ["id", "name", "kind", "purpose", "status", "definition"]
+};
+var BUMP_CONTENT_VERSION = "UPDATE settings SET content_version = content_version + 1 WHERE id = 1;";
+function contentVersionTriggers(table, columns) {
+  const changed = columns.map((c) => `OLD.${c} IS NOT NEW.${c}`).join(" OR ");
+  const update = `CREATE TRIGGER content_version_${table}_update AFTER UPDATE OF ${columns.join(", ")} ON ${table} WHEN ${changed} BEGIN ${BUMP_CONTENT_VERSION} END`;
+  if (table === "settings") return [update];
+  return [
+    `CREATE TRIGGER content_version_${table}_insert AFTER INSERT ON ${table} BEGIN ${BUMP_CONTENT_VERSION} END`,
+    `CREATE TRIGGER content_version_${table}_delete AFTER DELETE ON ${table} BEGIN ${BUMP_CONTENT_VERSION} END`,
+    update
+  ];
+}
+var MIGRATIONS_TABLE = `CREATE TABLE IF NOT EXISTS migrations (
+  version INTEGER PRIMARY KEY, applied_at INTEGER NOT NULL
+)`;
+var MIGRATIONS = [
+  {
+    version: 1,
+    // baseline: the original four tables
+    statements: [
+      `CREATE TABLE IF NOT EXISTS pages (
+        id TEXT PRIMARY KEY, slug TEXT UNIQUE NOT NULL, title TEXT NOT NULL,
+        status TEXT NOT NULL DEFAULT 'draft', is_home INTEGER NOT NULL DEFAULT 0,
+        blocks TEXT NOT NULL DEFAULT '[]', seo_title TEXT DEFAULT '', seo_desc TEXT DEFAULT '',
+        created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL
+      )`,
+      `CREATE TABLE IF NOT EXISTS posts (
+        id TEXT PRIMARY KEY, slug TEXT UNIQUE NOT NULL, title TEXT NOT NULL,
+        body TEXT DEFAULT '', tags TEXT DEFAULT '[]', cover TEXT DEFAULT '',
+        status TEXT NOT NULL DEFAULT 'draft', published_at INTEGER,
+        created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL
+      )`,
+      `CREATE TABLE IF NOT EXISTS links (
+        id TEXT PRIMARY KEY, label TEXT NOT NULL, url TEXT NOT NULL,
+        icon TEXT DEFAULT '', ord INTEGER NOT NULL, clicks INTEGER NOT NULL DEFAULT 0
+      )`,
+      `CREATE TABLE IF NOT EXISTS settings (
+        id INTEGER PRIMARY KEY CHECK (id = 1),
+        site_title TEXT NOT NULL DEFAULT 'My Site', tagline TEXT DEFAULT ''
+      )`
+    ]
+  },
+  {
+    version: 2,
+    // editor rework: rich post fields, scheduling, media
+    statements: [
+      `ALTER TABLE posts ADD COLUMN body_json TEXT DEFAULT ''`,
+      `ALTER TABLE posts ADD COLUMN body_html TEXT DEFAULT ''`,
+      `ALTER TABLE posts ADD COLUMN excerpt TEXT DEFAULT ''`,
+      `ALTER TABLE posts ADD COLUMN cover_alt TEXT DEFAULT ''`,
+      `ALTER TABLE posts ADD COLUMN seo_title TEXT DEFAULT ''`,
+      `ALTER TABLE posts ADD COLUMN seo_desc TEXT DEFAULT ''`,
+      `ALTER TABLE posts ADD COLUMN scheduled_at INTEGER`,
+      `CREATE TABLE IF NOT EXISTS media (
+        id TEXT PRIMARY KEY, key TEXT UNIQUE NOT NULL, filename TEXT NOT NULL,
+        mime TEXT NOT NULL, width INTEGER NOT NULL DEFAULT 0, height INTEGER NOT NULL DEFAULT 0,
+        size INTEGER NOT NULL DEFAULT 0, alt TEXT DEFAULT '', variants TEXT DEFAULT '[]',
+        created_at INTEGER NOT NULL
+      )`
+    ]
+  },
+  {
+    version: 3,
+    // tags as entities + multi-author users
+    statements: [
+      `CREATE TABLE IF NOT EXISTS tags (
+        id TEXT PRIMARY KEY, name TEXT NOT NULL, slug TEXT UNIQUE NOT NULL,
+        description TEXT DEFAULT ''
+      )`,
+      `CREATE TABLE IF NOT EXISTS users (
+        id TEXT PRIMARY KEY, name TEXT NOT NULL, email TEXT UNIQUE NOT NULL,
+        role TEXT NOT NULL DEFAULT 'editor', pass_hash TEXT NOT NULL,
+        created_at INTEGER NOT NULL
+      )`,
+      `ALTER TABLE posts ADD COLUMN author_id TEXT`
+    ]
+  },
+  {
+    version: 4,
+    // pages move from widget blocks to the TipTap editor
+    statements: [
+      `ALTER TABLE pages ADD COLUMN body_json TEXT DEFAULT ''`,
+      `ALTER TABLE pages ADD COLUMN body_html TEXT DEFAULT ''`
+    ]
+  },
+  {
+    version: 5,
+    // links page items: custom HTML/JS blocks alongside link buttons
+    statements: [
+      `ALTER TABLE links ADD COLUMN kind TEXT NOT NULL DEFAULT 'link'`,
+      `ALTER TABLE links ADD COLUMN html TEXT DEFAULT ''`
+    ]
+  },
+  {
+    version: 6,
+    // link-in-bio block types: per-item JSON meta (brand color, spacer size, vcard fields…)
+    statements: [`ALTER TABLE links ADD COLUMN meta TEXT DEFAULT '{}'`]
+  },
+  {
+    version: 7,
+    // links page gets its own display name + bio, decoupled from site title/tagline
+    statements: [
+      `ALTER TABLE settings ADD COLUMN links_name TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN links_bio TEXT DEFAULT ''`
+    ]
+  },
+  {
+    version: 8,
+    // links page profile photo
+    statements: [`ALTER TABLE settings ADD COLUMN links_avatar TEXT DEFAULT ''`]
+  },
+  {
+    version: 9,
+    // editable site footer (markdown)
+    statements: [`ALTER TABLE settings ADD COLUMN footer_text TEXT DEFAULT ''`]
+  },
+  {
+    version: 10,
+    // theme engine: active theme + sparse token overrides + site logo
+    statements: [
+      `ALTER TABLE settings ADD COLUMN active_theme TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN design_overrides TEXT DEFAULT '{}'`,
+      `ALTER TABLE settings ADD COLUMN site_logo TEXT DEFAULT ''`
+    ]
+  },
+  {
+    version: 11,
+    // featured posts (homepage/featured sections)
+    statements: [`ALTER TABLE posts ADD COLUMN featured INTEGER NOT NULL DEFAULT 0`]
+  },
+  {
+    version: 12,
+    // managed navigation (header / footer / social areas)
+    statements: [
+      `CREATE TABLE IF NOT EXISTS nav_items (
+        id TEXT PRIMARY KEY, label TEXT NOT NULL, url TEXT NOT NULL,
+        area TEXT NOT NULL DEFAULT 'header', ord INTEGER NOT NULL
+      )`
+    ]
+  },
+  {
+    version: 13,
+    // author profiles: bio, avatar, public slug for /author/<slug>
+    statements: [
+      `ALTER TABLE users ADD COLUMN bio TEXT DEFAULT ''`,
+      `ALTER TABLE users ADD COLUMN avatar TEXT DEFAULT ''`,
+      `ALTER TABLE users ADD COLUMN slug TEXT DEFAULT ''`
+    ]
+  },
+  {
+    version: 14,
+    // external drafts API: bearer key + CORS origin allowlist
+    statements: [
+      `ALTER TABLE settings ADD COLUMN drafts_api_key TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN drafts_allowed_origins TEXT DEFAULT '[]'`
+    ]
+  },
+  {
+    version: 15,
+    // SEO foundation: canonical site URL, favicon, default share image
+    statements: [
+      `ALTER TABLE settings ADD COLUMN site_url TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN site_favicon TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN site_cover TEXT DEFAULT ''`
+    ]
+  },
+  {
+    version: 16,
+    // URL redirects (manual + auto-created on slug changes)
+    statements: [
+      `CREATE TABLE IF NOT EXISTS redirects (
+        id TEXT PRIMARY KEY, from_path TEXT UNIQUE NOT NULL, to_path TEXT NOT NULL,
+        code INTEGER NOT NULL DEFAULT 301, created_at INTEGER NOT NULL
+      )`
+    ]
+  },
+  {
+    version: 17,
+    // content model: multi-author posts, per-doc templates, announcement bar
+    statements: [
+      `CREATE TABLE IF NOT EXISTS post_authors (
+        post_id TEXT NOT NULL, author_id TEXT NOT NULL, ord INTEGER NOT NULL DEFAULT 0,
+        PRIMARY KEY (post_id, author_id)
+      )`,
+      // existing single authors become the first (primary) entry
+      `INSERT OR IGNORE INTO post_authors (post_id, author_id, ord)
+        SELECT id, author_id, 0 FROM posts WHERE author_id IS NOT NULL`,
+      `ALTER TABLE posts ADD COLUMN template TEXT DEFAULT ''`,
+      `ALTER TABLE pages ADD COLUMN template TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN announcement TEXT DEFAULT '{}'`
+    ]
+  },
+  {
+    version: 18,
+    // site tools: code injection, publication timezone + locale
+    statements: [
+      `ALTER TABLE settings ADD COLUMN head_code TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN footer_code TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN timezone TEXT DEFAULT ''`,
+      `ALTER TABLE settings ADD COLUMN locale TEXT DEFAULT ''`
+    ]
+  },
+  {
+    // Multiple collections: posts gain a `collection` column keyed by the
+    // acms({ content.collections }) config key. Slug uniqueness becomes
+    // per-collection — v1 declared slug as column-level UNIQUE, which SQLite
+    // can't alter away, so this is a table rebuild (create → copy → swap).
+    // Column lists are explicit so the copy can never mispair values.
+    version: 19,
+    statements: [
+      `CREATE TABLE posts_v19 (
+        id TEXT PRIMARY KEY, slug TEXT NOT NULL, title TEXT NOT NULL,
+        body TEXT DEFAULT '', tags TEXT DEFAULT '[]', cover TEXT DEFAULT '',
+        status TEXT NOT NULL DEFAULT 'draft', published_at INTEGER,
+        created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL,
+        body_json TEXT DEFAULT '', body_html TEXT DEFAULT '', excerpt TEXT DEFAULT '',
+        cover_alt TEXT DEFAULT '', seo_title TEXT DEFAULT '', seo_desc TEXT DEFAULT '',
+        scheduled_at INTEGER, author_id TEXT, featured INTEGER NOT NULL DEFAULT 0,
+        template TEXT DEFAULT '',
+        collection TEXT NOT NULL DEFAULT 'posts',
+        UNIQUE(collection, slug)
+      )`,
+      `INSERT INTO posts_v19 (
+        id, slug, title, body, tags, cover, status, published_at, created_at, updated_at,
+        body_json, body_html, excerpt, cover_alt, seo_title, seo_desc,
+        scheduled_at, author_id, featured, template, collection
+      ) SELECT
+        id, slug, title, body, tags, cover, status, published_at, created_at, updated_at,
+        body_json, body_html, excerpt, cover_alt, seo_title, seo_desc,
+        scheduled_at, author_id, featured, template, 'posts'
+      FROM posts`,
+      `DROP TABLE posts`,
+      `ALTER TABLE posts_v19 RENAME TO posts`,
+      `CREATE INDEX IF NOT EXISTS idx_posts_collection ON posts(collection)`
+    ]
+  },
+  {
+    // Bilingual foundation: pages gain a `locale` keyed by acms({ i18n })
+    // locale codes. '' means the default locale, so existing rows (and sites
+    // that never configure i18n) keep today's behavior. "Is home" becomes
+    // per-locale — one home page per language.
+    version: 20,
+    statements: [`ALTER TABLE pages ADD COLUMN locale TEXT NOT NULL DEFAULT ''`]
+  },
+  {
+    // Public search: one FTS5 row per published post/page (title, excerpt,
+    // stripped body text, public tag names). Rows are synced by the repo on
+    // every write — no SQL triggers — and backfilled in code right after
+    // this version applies, since plaintext can't be derived in SQL.
+    // remove_diacritics makes "cafe" match "café" (matters for es content).
+    version: 21,
+    statements: [
+      `CREATE VIRTUAL TABLE IF NOT EXISTS search_index USING fts5(
+        kind UNINDEXED, ref_id UNINDEXED, locale UNINDEXED,
+        title, excerpt, plaintext, tags,
+        tokenize = 'unicode61 remove_diacritics 2'
+      )`
+    ]
+  },
+  {
+    // Manual publish: live (published/scheduled) documents stage their edits
+    // in a `draft` JSON snapshot; the live columns only change when the user
+    // hits Update. NULL = no pending edits.
+    version: 22,
+    statements: [
+      `ALTER TABLE posts ADD COLUMN draft TEXT`,
+      `ALTER TABLE pages ADD COLUMN draft TEXT`
+    ]
+  },
+  {
+    // Manual publish for the Design screen: theme/token/logo changes stage in
+    // a `draft_design` JSON snapshot (previewed with ?designPreview=1) until
+    // the user hits Publish design. NULL = no staged design.
+    version: 23,
+    statements: [`ALTER TABLE settings ADD COLUMN draft_design TEXT`]
+  },
+  {
+    // Snippets: named, reusable fragments of editor content ("Save as
+    // snippet" on a selection; re-inserted from the "/" menu).
+    version: 24,
+    statements: [
+      `CREATE TABLE IF NOT EXISTS snippets (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        content_json TEXT NOT NULL,
+        created_at INTEGER NOT NULL
+      )`
+    ]
+  },
+  {
+    // Analytics providers (Umami, Meta Pixel, TikTok Pixel): structured
+    // per-provider settings rendered into the public <head>. JSON object,
+    // '{}' = every provider disabled (schema defaults).
+    version: 25,
+    statements: [`ALTER TABLE settings ADD COLUMN analytics TEXT DEFAULT '{}'`]
+  },
+  {
+    version: 26,
+    statements: [
+      `ALTER TABLE settings ADD COLUMN ai TEXT NOT NULL DEFAULT '{}'`,
+      `ALTER TABLE settings ADD COLUMN agent TEXT NOT NULL DEFAULT '{}'`
+    ]
+  },
+  {
+    // Calendar module: calendars (native + live ICS feeds), events with
+    // wall-clock times + recurrence, and the integration plumbing shared by
+    // events and (later) bookings: scoped API keys and signed webhooks with
+    // a retry queue. calendar_ids / tags / exdates / location / cta / fields
+    // are JSON columns, same as posts.tags. Event search rows reuse the
+    // search_index FTS table with kind = 'event'.
+    version: 27,
+    statements: [
+      `CREATE TABLE IF NOT EXISTS calendars (
+        id TEXT PRIMARY KEY,
+        slug TEXT UNIQUE NOT NULL,
+        name TEXT NOT NULL,
+        color TEXT NOT NULL DEFAULT '#4f46e5',
+        description TEXT NOT NULL DEFAULT '',
+        kind TEXT NOT NULL DEFAULT 'native',
+        feed_url TEXT NOT NULL DEFAULT '',
+        visibility TEXT NOT NULL DEFAULT 'public',
+        feed_token TEXT NOT NULL DEFAULT '',
+        ord INTEGER NOT NULL DEFAULT 0,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      )`,
+      `CREATE TABLE IF NOT EXISTS events (
+        id TEXT PRIMARY KEY,
+        slug TEXT UNIQUE NOT NULL,
+        title TEXT NOT NULL,
+        body_json TEXT NOT NULL DEFAULT '',
+        body_html TEXT NOT NULL DEFAULT '',
+        excerpt TEXT NOT NULL DEFAULT '',
+        cover TEXT NOT NULL DEFAULT '',
+        cover_alt TEXT NOT NULL DEFAULT '',
+        seo_title TEXT NOT NULL DEFAULT '',
+        seo_desc TEXT NOT NULL DEFAULT '',
+        status TEXT NOT NULL DEFAULT 'draft',
+        featured INTEGER NOT NULL DEFAULT 0,
+        tags TEXT NOT NULL DEFAULT '[]',
+        template TEXT NOT NULL DEFAULT '',
+        starts TEXT NOT NULL,
+        ends TEXT NOT NULL DEFAULT '',
+        all_day INTEGER NOT NULL DEFAULT 0,
+        timezone TEXT NOT NULL DEFAULT '',
+        rrule TEXT NOT NULL DEFAULT '',
+        exdates TEXT NOT NULL DEFAULT '[]',
+        cancelled INTEGER NOT NULL DEFAULT 0,
+        location TEXT NOT NULL DEFAULT '{}',
+        cta TEXT NOT NULL DEFAULT '{}',
+        calendar_ids TEXT NOT NULL DEFAULT '[]',
+        fields TEXT NOT NULL DEFAULT '{}',
+        source_uid TEXT NOT NULL DEFAULT '',
+        start_at INTEGER NOT NULL,
+        end_at INTEGER NOT NULL,
+        draft TEXT,
+        published_at INTEGER,
+        scheduled_at INTEGER,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      )`,
+      `CREATE INDEX IF NOT EXISTS events_start_at ON events (start_at)`,
+      `CREATE INDEX IF NOT EXISTS events_status ON events (status)`,
+      `CREATE TABLE IF NOT EXISTS api_keys (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        prefix TEXT NOT NULL,
+        key_hash TEXT UNIQUE NOT NULL,
+        scopes TEXT NOT NULL DEFAULT '[]',
+        last_used_at INTEGER,
+        created_at INTEGER NOT NULL
+      )`,
+      `CREATE TABLE IF NOT EXISTS webhooks (
+        id TEXT PRIMARY KEY,
+        url TEXT NOT NULL,
+        secret TEXT NOT NULL,
+        events TEXT NOT NULL DEFAULT '[]',
+        active INTEGER NOT NULL DEFAULT 1,
+        last_status INTEGER,
+        last_at INTEGER,
+        created_at INTEGER NOT NULL
+      )`,
+      `CREATE TABLE IF NOT EXISTS webhook_deliveries (
+        id TEXT PRIMARY KEY,
+        webhook_id TEXT NOT NULL,
+        event TEXT NOT NULL,
+        payload TEXT NOT NULL,
+        status TEXT NOT NULL DEFAULT 'pending',
+        attempts INTEGER NOT NULL DEFAULT 0,
+        next_at INTEGER,
+        response_code INTEGER,
+        created_at INTEGER NOT NULL,
+        delivered_at INTEGER
+      )`,
+      `CREATE INDEX IF NOT EXISTS webhook_deliveries_due ON webhook_deliveries (status, next_at)`
+    ]
+  },
+  {
+    // Bookings: resources (rooms, people, vans…), their booking links, and the
+    // bookings themselves (also staff time blocks and event RSVPs). Weekly
+    // hours / overrides / questions are JSON. The (resource_id, start_at)
+    // index serves the overlap check every booking insert runs; hold_start /
+    // hold_end are the booked time widened by the link's buffers, so the
+    // overlap test is a single range comparison.
+    version: 28,
+    statements: [
+      `CREATE TABLE IF NOT EXISTS resources (
+        id TEXT PRIMARY KEY,
+        slug TEXT UNIQUE NOT NULL,
+        name TEXT NOT NULL,
+        kind TEXT NOT NULL DEFAULT 'Room',
+        description TEXT NOT NULL DEFAULT '',
+        photo TEXT NOT NULL DEFAULT '',
+        capacity INTEGER,
+        amenities TEXT NOT NULL DEFAULT '[]',
+        timezone TEXT NOT NULL DEFAULT '',
+        hours TEXT NOT NULL DEFAULT '{}',
+        overrides TEXT NOT NULL DEFAULT '[]',
+        busy_feeds TEXT NOT NULL DEFAULT '[]',
+        notify_emails TEXT NOT NULL DEFAULT '[]',
+        visibility TEXT NOT NULL DEFAULT 'public',
+        show_on_calendar INTEGER NOT NULL DEFAULT 0,
+        feed_token TEXT NOT NULL DEFAULT '',
+        ord INTEGER NOT NULL DEFAULT 0,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      )`,
+      `CREATE TABLE IF NOT EXISTS booking_links (
+        id TEXT PRIMARY KEY,
+        resource_id TEXT NOT NULL,
+        slug TEXT NOT NULL,
+        name TEXT NOT NULL,
+        description TEXT NOT NULL DEFAULT '',
+        mode TEXT NOT NULL DEFAULT 'slots',
+        duration INTEGER NOT NULL DEFAULT 60,
+        lengths TEXT NOT NULL DEFAULT '[]',
+        min_days INTEGER NOT NULL DEFAULT 1,
+        max_days INTEGER NOT NULL DEFAULT 1,
+        step INTEGER NOT NULL DEFAULT 30,
+        buffer_before INTEGER NOT NULL DEFAULT 0,
+        buffer_after INTEGER NOT NULL DEFAULT 0,
+        min_notice INTEGER NOT NULL DEFAULT 120,
+        max_advance INTEGER NOT NULL DEFAULT 90,
+        per_day_cap INTEGER NOT NULL DEFAULT 0,
+        hours TEXT,
+        auto_confirm INTEGER NOT NULL DEFAULT 1,
+        visibility TEXT NOT NULL DEFAULT 'public',
+        ask_phone INTEGER NOT NULL DEFAULT 0,
+        questions TEXT NOT NULL DEFAULT '[]',
+        confirm_message TEXT NOT NULL DEFAULT '',
+        redirect_url TEXT NOT NULL DEFAULT '',
+        active INTEGER NOT NULL DEFAULT 1,
+        ord INTEGER NOT NULL DEFAULT 0,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL,
+        UNIQUE (resource_id, slug)
+      )`,
+      `CREATE TABLE IF NOT EXISTS bookings (
+        id TEXT PRIMARY KEY,
+        kind TEXT NOT NULL DEFAULT 'booking',
+        resource_id TEXT NOT NULL DEFAULT '',
+        link_id TEXT NOT NULL DEFAULT '',
+        event_id TEXT NOT NULL DEFAULT '',
+        status TEXT NOT NULL,
+        start_at INTEGER NOT NULL,
+        end_at INTEGER NOT NULL,
+        hold_start INTEGER NOT NULL,
+        hold_end INTEGER NOT NULL,
+        timezone TEXT NOT NULL DEFAULT '',
+        name TEXT NOT NULL DEFAULT '',
+        email TEXT NOT NULL DEFAULT '',
+        phone TEXT NOT NULL DEFAULT '',
+        seats INTEGER NOT NULL DEFAULT 1,
+        answers TEXT NOT NULL DEFAULT '{}',
+        notes TEXT NOT NULL DEFAULT '',
+        manage_token TEXT NOT NULL DEFAULT '',
+        source TEXT NOT NULL DEFAULT 'web',
+        reminder_sent_at INTEGER,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      )`,
+      `CREATE INDEX IF NOT EXISTS bookings_resource_start ON bookings (resource_id, start_at)`,
+      `CREATE INDEX IF NOT EXISTS bookings_event_start ON bookings (event_id, start_at)`,
+      `CREATE INDEX IF NOT EXISTS bookings_manage ON bookings (manage_token)`,
+      `ALTER TABLE events ADD COLUMN rsvp TEXT NOT NULL DEFAULT '{}'`
+    ]
+  },
+  EMAIL_MIGRATION,
+  { version: 30, statements: [
+    `CREATE TABLE mobile_booking_requests (key_hash TEXT PRIMARY KEY, request_hash TEXT NOT NULL, booking_id TEXT NOT NULL, created_at INTEGER NOT NULL)`
+  ] },
+  // design history: every Publish design snapshots the outgoing live design
+  // (theme, overrides, brand images, navigation) so it can be restored
+  { version: 31, statements: [
+    `CREATE TABLE IF NOT EXISTS design_versions (
+      id TEXT PRIMARY KEY,
+      created_at INTEGER NOT NULL,
+      author TEXT NOT NULL DEFAULT '',
+      summary TEXT NOT NULL DEFAULT '',
+      snapshot TEXT NOT NULL
+    )`,
+    `CREATE INDEX IF NOT EXISTS design_versions_created ON design_versions (created_at)`
+  ] },
+  { version: 32, statements: [
+    `ALTER TABLE settings ADD COLUMN section_pages TEXT NOT NULL DEFAULT '{}'`,
+    `ALTER TABLE settings ADD COLUMN design_revision INTEGER NOT NULL DEFAULT 0`,
+    `CREATE TABLE IF NOT EXISTS design_audit (
+      id TEXT PRIMARY KEY, created_at INTEGER NOT NULL, actor TEXT NOT NULL,
+      action TEXT NOT NULL, expected_revision INTEGER NOT NULL,
+      actual_revision INTEGER NOT NULL CHECK (expected_revision = actual_revision)
+    )`
+  ] },
+  WEBHOOK_MIGRATION,
+  LIVE_MIGRATION,
+  IMPORT_MIGRATION,
+  // translations: per-language words for posts, pages and events (facts stay shared)
+  { version: 36, statements: [
+    `ALTER TABLE posts ADD COLUMN translations TEXT NOT NULL DEFAULT '{}'`,
+    `ALTER TABLE pages ADD COLUMN translations TEXT NOT NULL DEFAULT '{}'`,
+    `ALTER TABLE events ADD COLUMN translations TEXT NOT NULL DEFAULT '{}'`
+  ] },
+  PUSH_MIGRATION,
+  EDITOR_MIGRATION,
+  EDITOR_GRACE_MIGRATION,
+  CALENDAR_SETTINGS_MIGRATION,
+  ROOM_HOLD_MIGRATION,
+  { version: 42, statements: [
+    `ALTER TABLE settings ADD COLUMN site_logo_dark TEXT NOT NULL DEFAULT ''`
+  ] },
+  PLACES_MIGRATION,
+  { version: 44, statements: [
+    `ALTER TABLE bookings ADD COLUMN form_response TEXT`,
+    `CREATE TABLE forms (id TEXT PRIMARY KEY, name TEXT NOT NULL, kind TEXT NOT NULL, purpose TEXT NOT NULL, status TEXT NOT NULL, definition TEXT NOT NULL, draft TEXT, revision INTEGER NOT NULL DEFAULT 1, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
+    `CREATE TABLE form_submissions (id TEXT PRIMARY KEY, form_id TEXT NOT NULL, response TEXT NOT NULL, created_at INTEGER NOT NULL)`,
+    `CREATE INDEX form_submissions_form_created ON form_submissions(form_id, created_at)`
+  ] },
+  // app access: owner switches + limits, per-link guest change cutoff, and
+  // guest sign-in (emailed codes → per-device tokens; secrets stored hashed)
+  { version: 45, statements: [
+    `ALTER TABLE settings ADD COLUMN mobile_access TEXT NOT NULL DEFAULT '{}'`,
+    `ALTER TABLE booking_links ADD COLUMN change_cutoff INTEGER NOT NULL DEFAULT 0`,
+    `CREATE TABLE guest_codes (email TEXT PRIMARY KEY, code_hash TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0, expires_at INTEGER NOT NULL, created_at INTEGER NOT NULL)`,
+    `CREATE TABLE guest_sessions (id TEXT PRIMARY KEY, token_hash TEXT NOT NULL UNIQUE, email TEXT NOT NULL, device_name TEXT NOT NULL DEFAULT '', created_at INTEGER NOT NULL, last_seen_at INTEGER NOT NULL)`,
+    `CREATE INDEX guest_sessions_email ON guest_sessions(email)`,
+    `CREATE INDEX bookings_email ON bookings(email)`
+  ] },
+  // links page revision for whole-page saves (staff app): triggers bump it on
+  // every content change, whichever path made it (web admin, API, restore);
+  // click counts don't. revision_checks makes a stale save fail inside its
+  // own batch (CHECK fails → the whole batch rolls back).
+  { version: 46, statements: [
+    `ALTER TABLE settings ADD COLUMN links_revision INTEGER NOT NULL DEFAULT 0`,
+    `CREATE TABLE revision_checks (expected INTEGER NOT NULL, actual INTEGER NOT NULL CHECK (expected = actual))`,
+    `CREATE TRIGGER links_revision_insert AFTER INSERT ON links BEGIN UPDATE settings SET links_revision = links_revision + 1 WHERE id = 1; END`,
+    `CREATE TRIGGER links_revision_delete AFTER DELETE ON links BEGIN UPDATE settings SET links_revision = links_revision + 1 WHERE id = 1; END`,
+    `CREATE TRIGGER links_revision_update AFTER UPDATE OF kind, label, url, icon, html, meta, ord ON links BEGIN UPDATE settings SET links_revision = links_revision + 1 WHERE id = 1; END`,
+    `CREATE TRIGGER links_revision_profile AFTER UPDATE OF links_name, links_bio, links_avatar ON settings
+      WHEN OLD.links_name IS NOT NEW.links_name OR OLD.links_bio IS NOT NEW.links_bio OR OLD.links_avatar IS NOT NEW.links_avatar
+      BEGIN UPDATE settings SET links_revision = links_revision + 1 WHERE id = 1; END`
+  ] },
+  // Settings → Monitoring: Uptime Kuma push URL + status page
+  { version: 47, statements: [
+    `ALTER TABLE settings ADD COLUMN monitoring TEXT NOT NULL DEFAULT '{}'`
+  ] },
+  { version: 48, statements: [
+    `CREATE TABLE auth_owner_checks (allowed INTEGER CONSTRAINT keep_clerk_owner CHECK(allowed=1))`,
+    `ALTER TABLE editor_codes ADD COLUMN auth_provider TEXT NOT NULL DEFAULT 'builtin'`,
+    `ALTER TABLE editor_devices ADD COLUMN auth_provider TEXT NOT NULL DEFAULT 'builtin'`,
+    `CREATE TABLE auth_identities (issuer TEXT NOT NULL, subject TEXT NOT NULL, user_id TEXT NOT NULL, disabled INTEGER NOT NULL DEFAULT 0, PRIMARY KEY(issuer,subject), UNIQUE(issuer,user_id))`,
+    `CREATE TABLE auth_bootstrap (issuer TEXT PRIMARY KEY)`,
+    `CREATE TABLE auth_invitations (id TEXT PRIMARY KEY, issuer TEXT NOT NULL, email TEXT NOT NULL, name TEXT NOT NULL, role TEXT NOT NULL, state TEXT NOT NULL, remote_id TEXT NOT NULL, expires_at INTEGER NOT NULL, created_at INTEGER NOT NULL)`,
+    `CREATE UNIQUE INDEX auth_invitation_pending ON auth_invitations(issuer,email) WHERE state IN ('sending','pending')`,
+    `CREATE TABLE auth_mobile (kind TEXT NOT NULL, id TEXT NOT NULL, issuer TEXT NOT NULL, subject TEXT NOT NULL, session_id TEXT NOT NULL, PRIMARY KEY(kind,id))`,
+    `CREATE TRIGGER auth_user_deleted AFTER DELETE ON users BEGIN UPDATE auth_identities SET disabled=1 WHERE user_id=OLD.id; END`,
+    `CREATE TRIGGER auth_code_deleted AFTER DELETE ON editor_codes BEGIN DELETE FROM auth_mobile WHERE kind='code' AND id=OLD.hash; END`,
+    `CREATE TRIGGER auth_device_deleted AFTER DELETE ON editor_devices BEGIN DELETE FROM auth_mobile WHERE kind='device' AND id=OLD.id; END`
+  ] },
+  // Public cache: content_version goes up on every change a visitor could
+  // see, from any write path (admin, editor API, scheduler, design publish,
+  // restore/import, raw SQL), because triggers do the bumping. Cached pages
+  // and app ETags are keyed by it; the purge loop records how far it got.
+  { version: 49, statements: [
+    `ALTER TABLE settings ADD COLUMN content_version INTEGER NOT NULL DEFAULT 0`,
+    `ALTER TABLE settings ADD COLUMN cache_purged_version INTEGER NOT NULL DEFAULT 0`,
+    // start at a random point so two databases (a reinstall, a test run)
+    // never hand out the same version, and an old ETag can't match by chance
+    `UPDATE settings SET content_version = abs(random() % 1000000000), cache_purged_version = content_version WHERE id = 1`,
+    ...Object.entries(CONTENT_VERSION_COLUMNS).flatMap(([table, columns]) => contentVersionTriggers(table, columns))
+  ] },
+  // scheduled off-site backups (lib/backup/offsite.ts): last run + lease
+  { version: 50, statements: [
+    `CREATE TABLE backup_state (id INTEGER PRIMARY KEY CHECK (id = 1), last_at INTEGER NOT NULL DEFAULT 0, lease_until INTEGER NOT NULL DEFAULT 0,
+      last_key TEXT NOT NULL DEFAULT '', last_error TEXT NOT NULL DEFAULT '', failed_at INTEGER NOT NULL DEFAULT 0)`,
+    `INSERT INTO backup_state (id) VALUES (1)`
+  ] }
+];
+var LATEST_VERSION = MIGRATIONS[MIGRATIONS.length - 1].version;
+
+// src/lib/repo/migrate-runner.ts
+var MIGRATION_LOCK_TABLE = `CREATE TABLE IF NOT EXISTS migration_lock (
+  id INTEGER PRIMARY KEY CHECK (id = 1), owner TEXT NOT NULL, expires_at INTEGER NOT NULL
+)`;
+var LOCK_TTL_MS = 10 * 6e4;
+var MigrationLockTimeout = class extends Error {
+};
+async function appliedVersion(db) {
+  const r = (await db.all("SELECT MAX(version) AS v FROM migrations"))[0];
+  return Number(r?.v ?? 0);
+}
+async function pendingMigrations(db) {
+  await db.run(MIGRATIONS_TABLE);
+  let applied = await appliedVersion(db);
+  if (applied === 0 && (await db.all("SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'pages'")).length) applied = 1;
+  return { applied, pending: MIGRATIONS.filter((m) => m.version > applied) };
+}
+async function runMigrations(db, opts = {}) {
+  const now4 = opts.now ?? Date.now;
+  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const first = await pendingMigrations(db);
+  if (!first.pending.length) return { from: first.applied, to: first.applied, applied: [] };
+  const refused = first.applied > 0 && first.pending.find((m) => opts.refuse?.includes(m.version));
+  if (refused) return { from: first.applied, to: first.applied, applied: [], deferred: refused.version };
+  await db.run(MIGRATION_LOCK_TABLE);
+  const owner = crypto.randomUUID();
+  const deadline = now4() + (opts.waitMs ?? 6e4);
+  let waited = false;
+  for (; ; ) {
+    const t = now4();
+    await db.run(
+      `INSERT INTO migration_lock (id, owner, expires_at) VALUES (1, ?, ?)
+       ON CONFLICT(id) DO UPDATE SET owner = excluded.owner, expires_at = excluded.expires_at WHERE migration_lock.expires_at < ?`,
+      [owner, t + LOCK_TTL_MS, t]
+    );
+    const holder = (await db.all("SELECT owner FROM migration_lock WHERE id = 1"))[0];
+    if (holder?.owner === owner) break;
+    if (t >= deadline) throw new MigrationLockTimeout("Another process is migrating this database. Try again when it finishes.");
+    if (!waited) {
+      opts.log?.("Waiting for another migration to finish\u2026");
+      waited = true;
+    }
+    await sleep(500);
+  }
+  try {
+    const { applied, pending } = await pendingMigrations(db);
+    if (applied === 1 && !await appliedVersion(db)) {
+      await db.run("INSERT INTO migrations (version, applied_at) VALUES (1, ?)", [now4()]);
+    }
+    for (const m of pending) {
+      opts.log?.(`Applying migration ${m.version}`);
+      await db.batch([
+        ...m.statements.map((sql) => ({ sql })),
+        { sql: "INSERT INTO migrations (version, applied_at) VALUES (?, ?)", args: [m.version, now4()] }
+      ]);
+    }
+    return { from: applied, to: pending.length ? pending[pending.length - 1].version : applied, applied: pending.map((m) => m.version) };
+  } finally {
+    await db.run("DELETE FROM migration_lock WHERE id = 1 AND owner = ?", [owner]).catch(() => {
+    });
+  }
+}
+export {
+  LATEST_VERSION,
+  MIGRATIONS,
+  MIGRATION_LOCK_TABLE,
+  MigrationLockTimeout,
+  pendingMigrations,
+  runMigrations
+};