@bettercms-ai/db 0.1.0 → 0.2.0

package/dist/index.js

@@ -11629,18 +11629,18 @@ var require_common = __commonJS({
           if (typeof args[0] !== "string") {
             args.unshift("%O");
           }
-          let index101 = 0;
+          let index103 = 0;
           args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
             if (match === "%%") {
               return "%";
             }
-            index101++;
+            index103++;
             const formatter = createDebug.formatters[format];
             if (typeof formatter === "function") {
-              const val = args[index101];
+              const val = args[index103];
               match = formatter.call(self2, val);
-              args.splice(index101, 1);
-              index101--;
+              args.splice(index103, 1);
+              index103--;
             }
             return match;
           });
@@ -11876,15 +11876,15 @@ var require_browser = __commonJS({
       }
       const c = "color: " + this.color;
       args.splice(1, 0, c, "color: inherit");
-      let index101 = 0;
+      let index103 = 0;
       let lastC = 0;
       args[0].replace(/%[a-zA-Z%]/g, (match) => {
         if (match === "%%") {
           return;
         }
-        index101++;
+        index103++;
         if (match === "%c") {
-          lastC = index101;
+          lastC = index103;
         }
       });
       args.splice(lastC, 0, c);
@@ -13368,10 +13368,10 @@ var require_axios = __commonJS({
             value = JSON.stringify(value);
           } else if (utils$1.isArray(value) && isFlatArray(value) || (utils$1.isFileList(value) || utils$1.endsWith(key, "[]")) && (arr = utils$1.toArray(value))) {
             key = removeBrackets(key);
-            arr.forEach(function each(el, index101) {
+            arr.forEach(function each(el, index103) {
               !(utils$1.isUndefined(el) || el === null) && formData.append(
                 // eslint-disable-next-line no-nested-ternary
-                indexes === true ? renderKey([key], index101, dots) : indexes === null ? key : key + "[]",
+                indexes === true ? renderKey([key], index103, dots) : indexes === null ? key : key + "[]",
                 convertValue(el)
               );
             });
@@ -13618,11 +13618,11 @@ var require_axios = __commonJS({
       return obj;
     }
     function formDataToJSON(formData) {
-      function buildPath(path2, value, target, index101) {
-        let name = path2[index101++];
+      function buildPath(path2, value, target, index103) {
+        let name = path2[index103++];
         if (name === "__proto__") return true;
         const isNumericKey = Number.isFinite(+name);
-        const isLast = index101 >= path2.length;
+        const isLast = index103 >= path2.length;
         name = !name && utils$1.isArray(target) ? target.length : name;
         if (isLast) {
           if (utils$1.hasOwnProp(target, name)) {
@@ -13635,7 +13635,7 @@ var require_axios = __commonJS({
         if (!target[name] || !utils$1.isObject(target[name])) {
           target[name] = [];
         }
-        const result = buildPath(path2, value, target[name], index101);
+        const result = buildPath(path2, value, target[name], index103);
         if (result && utils$1.isArray(target[name])) {
           target[name] = arrayToObject(target[name]);
         }
@@ -14563,12 +14563,12 @@ var require_axios = __commonJS({
       };
     }
     function throttle(fn, freq) {
-      let timestamp106 = 0;
+      let timestamp109 = 0;
       let threshold = 1e3 / freq;
       let lastArgs;
       let timer;
       const invoke = (args, now = Date.now()) => {
-        timestamp106 = now;
+        timestamp109 = now;
         lastArgs = null;
         if (timer) {
           clearTimeout(timer);
@@ -14578,7 +14578,7 @@ var require_axios = __commonJS({
       };
       const throttled = (...args) => {
         const now = Date.now();
-        const passed = now - timestamp106;
+        const passed = now - timestamp109;
         if (passed >= threshold) {
           invoke(args, now);
         } else {
@@ -16406,9 +16406,9 @@ var require_axios = __commonJS({
         if (!this._listeners) {
           return;
         }
-        const index101 = this._listeners.indexOf(listener);
-        if (index101 !== -1) {
-          this._listeners.splice(index101, 1);
+        const index103 = this._listeners.indexOf(listener);
+        if (index103 !== -1) {
+          this._listeners.splice(index103, 1);
         }
       }
       toAbortSignal() {
@@ -20130,6 +20130,7 @@ __export(index_exports, {
   bcmsMigrationFlags: () => bcmsMigrationFlags,
   betaWaitlist: () => betaWaitlist,
   billingAddons: () => billingAddons,
+  billingAlerts: () => billingAlerts,
   billingCustomers: () => billingCustomers,
   branchColumns: () => branchColumns,
   branchPreviewGrants: () => branchPreviewGrants,
@@ -20163,10 +20164,13 @@ __export(index_exports, {
   contentLocks: () => contentLocks,
   contentModels: () => contentModels,
   contentModelsRelations: () => contentModelsRelations,
+  contentNavigation: () => contentNavigation,
   contentVersions: () => contentVersions,
   conversionBriefsIssued: () => conversionBriefsIssued,
   conversionProposals: () => conversionProposals,
+  crmConnections: () => crmConnections,
   crmDeals: () => crmDeals,
+  crmOauthStates: () => crmOauthStates,
   customDomains: () => customDomains,
   deployTargets: () => deployTargets,
   deviceAuthorizations: () => deviceAuthorizations,
@@ -20176,6 +20180,7 @@ __export(index_exports, {
   foldersRelations: () => foldersRelations,
   formContacts: () => formContacts,
   formContactsRelations: () => formContactsRelations,
+  formIntegrationDeliveries: () => formIntegrationDeliveries,
   formIntegrations: () => formIntegrations,
   formIntegrationsRelations: () => formIntegrationsRelations,
   formSubmissions: () => formSubmissions,
@@ -20358,8 +20363,12 @@ import { sql } from "drizzle-orm";
 var workspaces = pgTable(
   "workspaces",
   {
+    // TEXT, but the values are UUIDs: workspaces are created with crypto.randomUUID()
+    // (src/workspaces.ts). That matters — setWorkspaceContext() pins RLS with
+    // set_current_workspace(<id>::uuid), and there is a TEXT overload it does NOT use, so
+    // reading this as a nanoid suggests the standard RLS pinning helper would throw on a
+    // real id. It does not. Other tables here genuinely are nanoid; this one is not.
     id: text2("id").primaryKey(),
-    // nanoid — consistent with BetterAuth approach
     name: varchar("name", { length: 255 }).notNull(),
     slug: varchar("slug", { length: 255 }).notNull().unique(),
     // used in API paths: /api/v1/:workspace/...
@@ -21432,6 +21441,8 @@ var projects = pgTable10(
     // Brand kit (0162): colors/type/shape/logos/voice. NULL = never configured; the
     // API substitutes DEFAULT_BRAND_KIT rather than storing a row of defaults.
     brandKit: jsonb8("brand_kit").$type(),
+    brandDesign: jsonb8("brand_design").$type(),
+    brandDesignTarget: varchar10("brand_design_target", { length: 64 }),
     /**
      * Last annotate run per release slot (migration 0229): which declared field paths could not
      * be bound to an element on the built page. Lets the Visual Editor say "3 fields unbindable"
@@ -21532,8 +21543,14 @@ var projects = pgTable10(
     canvasEnabled: boolean7("canvas_enabled").notNull().default(false),
     // Validate components automatically once a release is live (migration 0324). Defaults FALSE: the run spends the
     // customer's own GitHub Actions minutes. `componentValidationDispatchedAt` debounces a release storm.
-    componentAutoValidate: boolean7("component_auto_validate").notNull().default(false),
+    componentAutoValidate: boolean7("component_auto_validate").notNull().default(true),
     componentValidationDispatchedAt: timestamp11("component_validation_dispatched_at", { withTimezone: true }),
+    // The last automatic pass left components out (LIMIT_REACHED); its batch's last report starts the next pass (0331).
+    componentValidationOverflow: boolean7("component_validation_overflow").notNull().default(false),
+    // The last automatic validation pass's decision, whatever it was (0333) — so a project that never validates says why.
+    componentValidationLastPass: jsonb8("component_validation_last_pass").$type(),
+    // The release commit the last dispatching automatic pass ran for: a redeploy of that commit does not dispatch (0333).
+    componentValidationCommitSha: text11("component_validation_commit_sha"),
     // How nginx resolves a page request for this project (FLO-947; migration 0211, widened
     // to 'node' by 0225).
     // 'static'  = today's disk-first `try_files`; the CMS renderer only fills gaps.
@@ -21609,6 +21626,21 @@ var projects = pgTable10(
      * bar until someone actually publishes. NULL = nothing waiting. Migration 0288.
      */
     pendingMainPublish: jsonb8("pending_main_publish").$type(),
+    /**
+     * Archived: retired from the working set but NOT deleted. Three distinct axes, and
+     * conflating any two of them is the bug this comment exists to prevent:
+     *
+     *   deleted_at      hard-delete tombstone. The row and its children are going away.
+     *   unpublished_at  the site is off the internet. The project is still worked on.
+     *   archived_at     the project is put away. It is ALSO off the internet, by rule.
+     *
+     * 🔴 An archived project must be neither live nor able to go live — the same rule
+     * pages.archivedAt carries one level down. It is enforced in ONE place:
+     * project_publishing_lock() (migration 0330) reports `source = 'archived'`, so both
+     * publishing-lock seams refuse the publish and no route has to remember.
+     * Archiving therefore unpublishes first, and refuses to archive if that fails.
+     */
+    archivedAt: timestamp11("archived_at"),
     ...auditColumns,
     ...softDeleteColumn
   },
@@ -21621,7 +21653,9 @@ var projects = pgTable10(
     // 0051; the create handler's conflict check also excludes soft-deleted rows.
     uniqueIndex3("projects_workspace_slug_idx").on(table.workspaceId, table.slug).where(sql5`${table.deletedAt} IS NULL`),
     // Workspace filtering
-    index10("projects_workspace_idx").on(table.workspaceId)
+    index10("projects_workspace_idx").on(table.workspaceId),
+    // Archive: every archive-aware list filters on this, so it earns an index like deletedAt.
+    index10("projects_archived_at_idx").on(table.archivedAt)
   ]
 );
 var projectFolders = pgTable10("project_folders", {
@@ -23065,7 +23099,8 @@ import {
   timestamp as timestamp44,
   integer as integer21,
   index as index43,
-  unique as unique3
+  unique as unique3,
+  jsonb as jsonb25
 } from "drizzle-orm/pg-core";
 var releases = pgTable46(
   "releases",
@@ -23083,6 +23118,11 @@ var releases = pgTable46(
     commitMessage: text47("commit_message"),
     // pending | ingested | releasing | live | failed | rolled_back
     status: varchar30("status", { length: 20 }).notNull().default("ingested"),
+    designInput: jsonb25("design_input").$type(),
+    designSnapshot: jsonb25("design_snapshot").$type(),
+    designError: text47("design_error"),
+    designAttempts: integer21("design_attempts").notNull().default(0),
+    designRetryAt: timestamp44("design_retry_at"),
     // Artifact triple. NULL on a row that records a FAILED BUILD (0175): the build
     // never produced a .tgz, so there is nothing to key, checksum or size. Every
     // reader that resolves a deployable release must therefore filter on a status
@@ -23239,7 +23279,7 @@ var githubInstallations = pgTable49("github_installations", {
 });
 
 // src/schema/custom_domains.ts
-import { pgTable as pgTable50, text as text51, varchar as varchar34, boolean as boolean23, timestamp as timestamp46, index as index44, uniqueIndex as uniqueIndex18, jsonb as jsonb25 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable50, text as text51, varchar as varchar34, boolean as boolean23, timestamp as timestamp46, index as index44, uniqueIndex as uniqueIndex18, jsonb as jsonb26 } from "drizzle-orm/pg-core";
 var customDomains = pgTable50(
   "custom_domains",
   {
@@ -23273,7 +23313,7 @@ var customDomains = pgTable50(
      */
     deployTargetId: text51("deploy_target_id"),
     /** The DNS the PROVIDER asked for: pointing record plus any ownership challenge. */
-    providerRecords: jsonb25("provider_records").$type(),
+    providerRecords: jsonb26("provider_records").$type(),
     /** Nonce published at `_bettercms.<host>` as `verify=<token>`; checked by POST /verify. */
     verificationToken: text51("verification_token"),
     /** When that TXT last matched. NULL = never confirmed BY US (≠ Cloudflare's ssl_status). */
@@ -23571,7 +23611,7 @@ var externalDeployments = pgTable55(
 );
 
 // src/schema/page_types.ts
-import { pgTable as pgTable56, text as text57, varchar as varchar40, jsonb as jsonb26, index as index50, uniqueIndex as uniqueIndex22 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable56, text as text57, varchar as varchar40, jsonb as jsonb27, index as index50, uniqueIndex as uniqueIndex22 } from "drizzle-orm/pg-core";
 var pageTypes = pgTable56(
   "page_types",
   {
@@ -23582,8 +23622,8 @@ var pageTypes = pgTable56(
     slug: varchar40("slug", { length: 255 }).notNull(),
     /** Same ContentModelField[] shape `pages.fields` holds — a type exists so several pages
      *  can SHARE one schema instead of each carrying a copy. */
-    fields: jsonb26("fields").$type().notNull().default([]),
-    routingJson: jsonb26("routing_json").$type(),
+    fields: jsonb27("fields").$type().notNull().default([]),
+    routingJson: jsonb27("routing_json").$type(),
     ...branchColumns,
     ...auditColumns,
     ...softDeleteColumn
@@ -23596,7 +23636,7 @@ var pageTypes = pgTable56(
 );
 
 // src/schema/build_triggers.ts
-import { pgTable as pgTable57, text as text58, varchar as varchar41, boolean as boolean26, timestamp as timestamp53, integer as integer24, jsonb as jsonb27, index as index51, uniqueIndex as uniqueIndex23 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable57, text as text58, varchar as varchar41, boolean as boolean26, timestamp as timestamp53, integer as integer24, jsonb as jsonb28, index as index51, uniqueIndex as uniqueIndex23 } from "drizzle-orm/pg-core";
 var BUILD_TRIGGER_KINDS = ["webhook", "content", "schedule"];
 var buildTriggers = pgTable57(
   "build_triggers",
@@ -23618,7 +23658,7 @@ var buildTriggers = pgTable57(
     prevSecretEnc: text58("prev_secret_enc"),
     prevSecretExpiresAt: timestamp53("prev_secret_expires_at"),
     /** `[]` = every publish. Model SLUGS, not ids — ids break across a model rebuild. */
-    contentScopes: jsonb27("content_scopes").$type().notNull().default([]),
+    contentScopes: jsonb28("content_scopes").$type().notNull().default([]),
     schedule: varchar41("schedule", { length: 120 }),
     /** IANA zone. "Rebuild at 9am" means 9am where the customer is. */
     timezone: varchar41("timezone", { length: 64 }).notNull().default("UTC"),
@@ -23728,7 +23768,7 @@ var aiProviderKeys = pgTable61(
 );
 
 // src/schema/agent_sessions.ts
-import { pgTable as pgTable62, text as text63, varchar as varchar45, timestamp as timestamp56, doublePrecision, jsonb as jsonb28, index as index52 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable62, text as text63, varchar as varchar45, timestamp as timestamp56, doublePrecision, jsonb as jsonb29, index as index52 } from "drizzle-orm/pg-core";
 var agentSessions = pgTable62(
   "agent_sessions",
   {
@@ -23769,7 +23809,7 @@ var agentMessages = pgTable62(
     sessionId: text63("session_id").notNull(),
     role: varchar45("role", { length: 16 }).notNull(),
     // user | assistant | tool
-    content: jsonb28("content").notNull(),
+    content: jsonb29("content").notNull(),
     // { text? , toolName?, toolInput?, toolResult? ... }
     createdAt: timestamp56("created_at").notNull().defaultNow()
   },
@@ -23777,7 +23817,7 @@ var agentMessages = pgTable62(
 );
 
 // src/schema/agent_instructions.ts
-import { pgTable as pgTable63, text as text64, varchar as varchar46, boolean as boolean27, jsonb as jsonb29, timestamp as timestamp57, index as index53, check as check2 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable63, text as text64, varchar as varchar46, boolean as boolean27, jsonb as jsonb30, timestamp as timestamp57, index as index53, check as check2 } from "drizzle-orm/pg-core";
 import { sql as sql12 } from "drizzle-orm";
 var INSTRUCTION_KINDS = ["skill", "rule"];
 var INSTRUCTION_SOURCES = ["template", "manual", "import"];
@@ -23797,7 +23837,7 @@ var agentInstructions = pgTable63(
     /** Master switch. Off = ignored everywhere, regardless of `disabledFor`. */
     enabled: boolean27("enabled").notNull().default(true),
     /** Project ids that opted OUT. Workspace-wide by default, scoped by exception. */
-    disabledFor: jsonb29("disabled_for").$type().notNull().default([]),
+    disabledFor: jsonb30("disabled_for").$type().notNull().default([]),
     source: varchar46("source", { length: 16 }).$type().notNull().default("manual"),
     templateId: varchar46("template_id", { length: 64 }),
     // set when source === "template"
@@ -23820,7 +23860,7 @@ var agentInstructions = pgTable63(
 );
 
 // src/schema/ai_generation_jobs.ts
-import { pgTable as pgTable64, text as text65, varchar as varchar47, integer as integer26, jsonb as jsonb30, timestamp as timestamp58, index as index54 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable64, text as text65, varchar as varchar47, integer as integer26, jsonb as jsonb31, timestamp as timestamp58, index as index54 } from "drizzle-orm/pg-core";
 var aiGenerationJobs = pgTable64(
   "ai_generation_jobs",
   {
@@ -23836,9 +23876,9 @@ var aiGenerationJobs = pgTable64(
     // Durable because the drain runs after the request connection (and its GUCs) is gone.
     // AI-produced content is always an agent write, even when a human queued the job.
     writeOrigin: text65("write_origin").$type().notNull().default("agent:tab"),
-    mapping: jsonb30("mapping").notNull(),
+    mapping: jsonb31("mapping").notNull(),
     // GenerateMapping (generate) | { contentModelId } (seo)
-    rows: jsonb30("rows").notNull(),
+    rows: jsonb31("rows").notNull(),
     /**
      * needs_approval | queued | running | done | failed
      *
@@ -23857,7 +23897,7 @@ var aiGenerationJobs = pgTable64(
      * scope/estimate that is approved is the scope/estimate that runs. Null on jobs that never
      * needed approval. Mirrors the migration_jobs.plan precedent.
      */
-    plan: jsonb30("plan"),
+    plan: jsonb31("plan"),
     total: integer26("total").notNull().default(0),
     processed: integer26("processed").notNull().default(0),
     cursor: integer26("cursor").notNull().default(0),
@@ -23873,7 +23913,7 @@ var aiGenerationJobs = pgTable64(
 );
 
 // src/schema/mcp_tasks.ts
-import { check as check3, index as index55, integer as integer27, jsonb as jsonb31, pgTable as pgTable65, text as text66, timestamp as timestamp59, uniqueIndex as uniqueIndex26, varchar as varchar48 } from "drizzle-orm/pg-core";
+import { check as check3, index as index55, integer as integer27, jsonb as jsonb32, pgTable as pgTable65, text as text66, timestamp as timestamp59, uniqueIndex as uniqueIndex26, varchar as varchar48 } from "drizzle-orm/pg-core";
 import { sql as sql13 } from "drizzle-orm";
 var MCP_TASK_STATUSES = [
   "working",
@@ -23894,8 +23934,8 @@ var mcpTasks = pgTable65(
     aiJobId: text66("ai_job_id"),
     status: varchar48("status", { length: 24 }).$type().notNull().default("working"),
     statusMessage: text66("status_message"),
-    inputState: jsonb31("input_state").$type().notNull().default({}),
-    finalResult: jsonb31("final_result").$type(),
+    inputState: jsonb32("input_state").$type().notNull().default({}),
+    finalResult: jsonb32("final_result").$type(),
     ttlMs: integer27("ttl_ms"),
     pollIntervalMs: integer27("poll_interval_ms").notNull().default(2e3),
     cancelRequestedAt: timestamp59("cancel_requested_at"),
@@ -23935,7 +23975,7 @@ var mcpTasks = pgTable65(
 );
 
 // src/schema/seo_reports.ts
-import { pgTable as pgTable66, text as text67, date, jsonb as jsonb32, timestamp as timestamp60, uniqueIndex as uniqueIndex27, index as index56 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable66, text as text67, date, jsonb as jsonb33, timestamp as timestamp60, uniqueIndex as uniqueIndex27, index as index56 } from "drizzle-orm/pg-core";
 var seoReports = pgTable66(
   "seo_reports",
   {
@@ -23945,7 +23985,7 @@ var seoReports = pgTable66(
     projectId: text67("project_id").notNull(),
     periodStart: date("period_start").notNull(),
     periodEnd: date("period_end").notNull(),
-    metricsJson: jsonb32("metrics_json").$type().notNull(),
+    metricsJson: jsonb33("metrics_json").$type().notNull(),
     summary: text67("summary").notNull(),
     createdAt: timestamp60("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -23957,7 +23997,7 @@ var seoReports = pgTable66(
 );
 
 // src/schema/qa_reports.ts
-import { pgTable as pgTable67, text as text68, integer as integer28, jsonb as jsonb33, timestamp as timestamp61, index as index57 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable67, text as text68, integer as integer28, jsonb as jsonb34, timestamp as timestamp61, index as index57 } from "drizzle-orm/pg-core";
 var qaReports = pgTable67(
   "qa_reports",
   {
@@ -23965,7 +24005,7 @@ var qaReports = pgTable67(
     // nanoid
     workspaceId: text68("workspace_id").notNull(),
     projectId: text68("project_id").notNull(),
-    findingsJson: jsonb33("findings_json").$type().notNull(),
+    findingsJson: jsonb34("findings_json").$type().notNull(),
     summary: text68("summary").notNull(),
     criticalCount: integer28("critical_count").notNull().default(0),
     createdAt: timestamp61("created_at", { withTimezone: true }).notNull().defaultNow()
@@ -23974,7 +24014,7 @@ var qaReports = pgTable67(
 );
 
 // src/schema/webflow_integrations.ts
-import { pgTable as pgTable68, text as text69, varchar as varchar49, jsonb as jsonb34, timestamp as timestamp62, index as index58 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable68, text as text69, varchar as varchar49, jsonb as jsonb35, timestamp as timestamp62, index as index58 } from "drizzle-orm/pg-core";
 var webflowIntegrations = pgTable68(
   "webflow_integrations",
   {
@@ -23988,7 +24028,7 @@ var webflowIntegrations = pgTable68(
     // display only; may be absent
     accessToken: text69("access_token").notNull(),
     // encrypted at rest
-    scopes: jsonb34("scopes").$type().notNull().default([]),
+    scopes: jsonb35("scopes").$type().notNull().default([]),
     connectedBy: text69("connected_by"),
     // FK → users.id
     createdAt: timestamp62("created_at").notNull().defaultNow(),
@@ -23998,7 +24038,7 @@ var webflowIntegrations = pgTable68(
 );
 
 // src/schema/migration_jobs.ts
-import { pgTable as pgTable69, text as text70, varchar as varchar50, integer as integer29, jsonb as jsonb35, timestamp as timestamp63, index as index59 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable69, text as text70, varchar as varchar50, integer as integer29, jsonb as jsonb36, timestamp as timestamp63, index as index59 } from "drizzle-orm/pg-core";
 var migrationJobs = pgTable69(
   "migration_jobs",
   {
@@ -24011,11 +24051,11 @@ var migrationJobs = pgTable69(
     // webflow | framer
     framework: varchar50("framework", { length: 16 }).notNull().default("astro"),
     // astro | next
-    plan: jsonb35("plan").notNull(),
+    plan: jsonb36("plan").notNull(),
     // MigrationPlan (user-confirmed mapping)
-    graph: jsonb35("graph"),
+    graph: jsonb36("graph"),
     // reserved for a future per-phase checkpoint — NOT written today
-    report: jsonb35("report"),
+    report: jsonb36("report"),
     // MigrationReport, written once when the job reaches done | failed
     // queued | crawling | binding | seeding | media | repo | done | failed
     status: varchar50("status", { length: 16 }).notNull().default("queued"),
@@ -24035,7 +24075,7 @@ var migrationJobs = pgTable69(
 );
 
 // src/schema/ai_reports.ts
-import { pgTable as pgTable70, text as text71, varchar as varchar51, jsonb as jsonb36, timestamp as timestamp64, index as index60 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable70, text as text71, varchar as varchar51, jsonb as jsonb37, timestamp as timestamp64, index as index60 } from "drizzle-orm/pg-core";
 var aiReports = pgTable70(
   "ai_reports",
   {
@@ -24044,7 +24084,7 @@ var aiReports = pgTable70(
     workspaceId: text71("workspace_id").notNull(),
     projectId: text71("project_id").notNull(),
     kind: varchar51("kind", { length: 16 }).$type().notNull(),
-    findingsJson: jsonb36("findings_json").$type().notNull(),
+    findingsJson: jsonb37("findings_json").$type().notNull(),
     summary: text71("summary").notNull(),
     createdAt: timestamp64("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -24199,7 +24239,7 @@ var siteFiles = pgTable72(
 );
 
 // src/schema/indexnow_submissions.ts
-import { pgTable as pgTable73, text as text74, varchar as varchar54, integer as integer32, jsonb as jsonb37, timestamp as timestamp67, index as index62 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable73, text as text74, varchar as varchar54, integer as integer32, jsonb as jsonb38, timestamp as timestamp67, index as index62 } from "drizzle-orm/pg-core";
 var INDEXNOW_KINDS = ["auto", "manual", "retry"];
 var INDEXNOW_STATUSES = ["ok", "failed"];
 var indexnowSubmissions = pgTable73(
@@ -24212,7 +24252,7 @@ var indexnowSubmissions = pgTable73(
     // FK → projects.id ON DELETE CASCADE (migration 0234)
     /** The host as submitted, kept verbatim so a 422 stays explainable after a domain move. */
     host: text74("host").notNull(),
-    urls: jsonb37("urls").$type().notNull().default([]),
+    urls: jsonb38("urls").$type().notNull().default([]),
     urlCount: integer32("url_count").notNull().default(0),
     status: varchar54("status", { length: 8 }).$type().notNull(),
     /** NULL only when the request never got a response at all (DNS/timeout after 3 attempts). */
@@ -24225,7 +24265,7 @@ var indexnowSubmissions = pgTable73(
 );
 
 // src/schema/brand_kit_versions.ts
-import { pgTable as pgTable74, text as text75, integer as integer33, jsonb as jsonb38, timestamp as timestamp68, primaryKey as primaryKey5, index as index63 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable74, text as text75, integer as integer33, jsonb as jsonb39, timestamp as timestamp68, primaryKey as primaryKey5, index as index63 } from "drizzle-orm/pg-core";
 var brandKitVersions = pgTable74(
   "brand_kit_versions",
   {
@@ -24236,7 +24276,7 @@ var brandKitVersions = pgTable74(
     projectId: text75("project_id").notNull(),
     // FK → projects.id ON DELETE CASCADE (0239)
     version: integer33("version").notNull(),
-    snapshot: jsonb38("snapshot").$type().notNull(),
+    snapshot: jsonb39("snapshot").$type().notNull(),
     createdBy: text75("created_by"),
     // FK → users(id), nullable: a system write has no author
     createdAt: timestamp68("created_at").notNull().defaultNow()
@@ -24312,7 +24352,7 @@ import {
   text as text80,
   varchar as varchar59,
   timestamp as timestamp72,
-  jsonb as jsonb40,
+  jsonb as jsonb41,
   integer as integer36,
   foreignKey as foreignKey4,
   index as index67,
@@ -24326,7 +24366,7 @@ import {
   foreignKey as foreignKey2,
   index as index65,
   integer as integer35,
-  jsonb as jsonb39,
+  jsonb as jsonb40,
   pgTable as pgTable77,
   text as text78,
   timestamp as timestamp71,
@@ -24342,8 +24382,8 @@ var componentVariantGroups = pgTable77(
     projectId: text78("project_id"),
     name: varchar57("name", { length: 255 }).notNull(),
     slug: varchar57("slug", { length: 255 }).notNull(),
-    canonicalInputs: jsonb39("canonical_inputs").$type().notNull().default([]),
-    publishedCanonicalInputs: jsonb39("published_canonical_inputs").$type(),
+    canonicalInputs: jsonb40("canonical_inputs").$type().notNull().default([]),
+    publishedCanonicalInputs: jsonb40("published_canonical_inputs").$type(),
     status: varchar57("status", { length: 20 }).notNull().default("draft"),
     publishedAt: timestamp71("published_at"),
     optimisticVersion: integer35("optimistic_version").notNull().default(0),
@@ -24427,15 +24467,15 @@ var components = pgTable79(
     publishedVariantGroupId: text80("published_variant_group_id").references(() => componentVariantGroups.id, {
       onDelete: "restrict"
     }),
-    variantInputMappings: jsonb40("variant_input_mappings").$type().notNull().default([]),
+    variantInputMappings: jsonb41("variant_input_mappings").$type().notNull().default([]),
     // The live canonical-input mapping snapshot. Draft mapping edits must never alter
     // already-published Layout output before the Component is explicitly re-published.
-    publishedVariantInputMappings: jsonb40("published_variant_input_mappings").$type(),
+    publishedVariantInputMappings: jsonb41("published_variant_input_mappings").$type(),
     // Exact immutable family version adopted by this live variant. Legacy published rows
     // have no manifest pin and use the one-time `publishedCanonicalInputs` snapshot instead.
     publishedFamilyManifestId: text80("published_family_manifest_id"),
     publishedFamilyManifestHash: varchar59("published_family_manifest_hash", { length: 64 }),
-    publishedCanonicalInputs: jsonb40("published_canonical_inputs").$type(),
+    publishedCanonicalInputs: jsonb41("published_canonical_inputs").$type(),
     // Placement governance (migration 0190). Existing rows were backfilled to ["*"] so
     // rollout preserves the old everywhere-visible behaviour; new project components start
     // with [] and are deliberately approved from the section picker. Tokens are
@@ -24467,8 +24507,8 @@ var components = pgTable79(
     groupId: text80("group_id").references(() => componentGroups.id, { onDelete: "restrict" }),
     // Stored as unknown[] to keep @bettercms-ai/db decoupled from @bettercms-ai/types,
     // matching pages.block_json. Validated as ContentBlock[] at the API layer.
-    blockJson: jsonb40("block_json").$type().notNull().default([]),
-    props: jsonb40("props").$type().notNull().default([]),
+    blockJson: jsonb41("block_json").$type().notNull().default([]),
+    props: jsonb41("props").$type().notNull().default([]),
     // Draft/live split (migration 0186_component_draft_live_split.sql). `blockJson`/`props`
     // above are the DRAFT; these two are the LIVE snapshot that get_components_by_handle()
     // serves. Nullable: a never-published component has no live copy. A DB trigger fills them
@@ -24476,8 +24516,8 @@ var components = pgTable79(
     // trigger deliberately skips published -> published, or every autosave would go live).
     // `props` splits alongside `blockJson` because applyOverrides() targets
     // props[].target.blockId/path — a live tree paired with draft prop-defs mis-targets.
-    publishedBlockJson: jsonb40("published_block_json").$type(),
-    publishedProps: jsonb40("published_props").$type(),
+    publishedBlockJson: jsonb41("published_block_json").$type(),
+    publishedProps: jsonb41("published_props").$type(),
     status: varchar59("status", { length: 20 }).$type().notNull().default("draft"),
     publishedAt: timestamp72("published_at"),
     // Out of the working set, still serving (FLO-1012). Deliberately NOT a third `status`
@@ -24485,6 +24525,10 @@ var components = pgTable79(
     // the draft/published bit that restore has to put back. NULL = active.
     archivedAt: timestamp72("archived_at"),
     thumbnail: varchar59("thumbnail", { length: 2048 }),
+    // A snapshot of the validated Output (0334), stored under component-preview/<projectId>/snapshots/. Never written to `thumbnail`.
+    outputSnapshotKey: text80("output_snapshot_key"),
+    outputSnapshotCommitSha: text80("output_snapshot_commit_sha"),
+    outputSnapshotAt: timestamp72("output_snapshot_at", { withTimezone: true }),
     optimisticVersion: integer36("optimistic_version").notNull().default(0),
     ...writeGovernanceColumns,
     ...branchColumns,
@@ -24545,30 +24589,53 @@ var componentsRelations = relations14(components, ({ one }) => ({
   })
 }));
 
+// src/schema/content_navigation.ts
+import { foreignKey as foreignKey5, index as index68, integer as integer37, jsonb as jsonb42, pgTable as pgTable80, text as text81, timestamp as timestamp73 } from "drizzle-orm/pg-core";
+var contentNavigation = pgTable80(
+  "content_navigation",
+  {
+    projectId: text81("project_id").primaryKey(),
+    workspaceId: text81("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    doc: jsonb42("doc").$type().notNull().default({ schema: 1, folders: [], items: [] }),
+    version: integer37("version").notNull().default(1),
+    updatedBy: text81("updated_by"),
+    createdAt: timestamp73("created_at").notNull().defaultNow(),
+    updatedAt: timestamp73("updated_at").notNull().defaultNow()
+  },
+  (table) => [
+    foreignKey5({
+      columns: [table.projectId, table.workspaceId],
+      foreignColumns: [projects.id, projects.workspaceId],
+      name: "content_navigation_project_workspace_fkey"
+    }).onDelete("cascade").onUpdate("cascade"),
+    index68("content_navigation_workspace_idx").on(table.workspaceId)
+  ]
+);
+
 // src/schema/component_variants.ts
 import {
-  pgTable as pgTable80,
-  text as text81,
+  pgTable as pgTable81,
+  text as text82,
   varchar as varchar60,
-  timestamp as timestamp73,
-  jsonb as jsonb41,
-  integer as integer37,
-  index as index68,
+  timestamp as timestamp74,
+  jsonb as jsonb43,
+  integer as integer38,
+  index as index69,
   unique as unique4,
   uniqueIndex as uniqueIndex34
 } from "drizzle-orm/pg-core";
 import { relations as relations15 } from "drizzle-orm/relations";
 import { sql as sql18 } from "drizzle-orm";
-var componentVariants = pgTable80(
+var componentVariants = pgTable81(
   "component_variants",
   {
-    id: text81("id").primaryKey(),
-    workspaceId: text81("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    componentId: text81("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    id: text82("id").primaryKey(),
+    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
     name: varchar60("name", { length: 255 }).notNull(),
     // `<component-root>-<variant-name>`, e.g. `footer-compact`.
     key: varchar60("key", { length: 356 }).notNull(),
-    delta: jsonb41("delta").$type().notNull().default({
+    delta: jsonb43("delta").$type().notNull().default({
       fieldOverrides: [],
       addedProps: [],
       removedFieldKeys: [],
@@ -24576,13 +24643,13 @@ var componentVariants = pgTable80(
       valueOverrides: {},
       addedBlocks: []
     }),
-    publishedDelta: jsonb41("published_delta").$type(),
+    publishedDelta: jsonb43("published_delta").$type(),
     status: varchar60("status", { length: 20 }).$type().notNull().default("draft"),
-    publishedAt: timestamp73("published_at"),
-    optimisticVersion: integer37("optimistic_version").notNull().default(0),
-    createdAt: timestamp73("created_at").notNull().defaultNow(),
-    updatedAt: timestamp73("updated_at").notNull().defaultNow(),
-    deletedAt: timestamp73("deleted_at")
+    publishedAt: timestamp74("published_at"),
+    optimisticVersion: integer38("optimistic_version").notNull().default(0),
+    createdAt: timestamp74("created_at").notNull().defaultNow(),
+    updatedAt: timestamp74("updated_at").notNull().defaultNow(),
+    deletedAt: timestamp74("deleted_at")
   },
   (table) => [
     unique4("component_variants_id_workspace_component_unique").on(
@@ -24590,8 +24657,8 @@ var componentVariants = pgTable80(
       table.workspaceId,
       table.componentId
     ),
-    index68("component_variants_workspace_idx").on(table.workspaceId),
-    index68("component_variants_component_idx").on(table.componentId),
+    index69("component_variants_workspace_idx").on(table.workspaceId),
+    index69("component_variants_component_idx").on(table.componentId),
     uniqueIndex34("component_variants_component_key_unique").on(table.componentId, table.key).where(sql18`${table.deletedAt} IS NULL`)
   ]
 );
@@ -24609,41 +24676,41 @@ var componentVariantsRelations = relations15(componentVariants, ({ one }) => ({
 // src/schema/component_implementation_evidence.ts
 import {
   bigint as bigint4,
-  foreignKey as foreignKey5,
-  index as index69,
-  integer as integer38,
-  jsonb as jsonb42,
-  pgTable as pgTable81,
-  text as text82,
-  timestamp as timestamp74,
+  foreignKey as foreignKey6,
+  index as index70,
+  integer as integer39,
+  jsonb as jsonb44,
+  pgTable as pgTable82,
+  text as text83,
+  timestamp as timestamp75,
   unique as unique5,
   uniqueIndex as uniqueIndex35,
   uuid as uuid2,
   varchar as varchar61
 } from "drizzle-orm/pg-core";
 import { sql as sql19 } from "drizzle-orm";
-var componentImplementationCandidates = pgTable81(
+var componentImplementationCandidates = pgTable82(
   "component_implementation_candidates",
   {
-    id: text82("id").primaryKey(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    variantGroupId: text82("variant_group_id"),
-    familyKey: text82("family_key").notNull(),
+    id: text83("id").primaryKey(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text83("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    variantGroupId: text83("variant_group_id"),
+    familyKey: text83("family_key").notNull(),
     familyContractHash: varchar61("family_contract_hash", { length: 64 }).notNull(),
     // Exact value-bearing family contract. Unlike `contract.canonicalInputs` (the
     // renderer/schema projection), this snapshot deliberately retains defaults because it
     // becomes the immutable public-input source pinned by each published variant.
-    familyContract: jsonb42("family_contract").$type(),
+    familyContract: jsonb44("family_contract").$type(),
     schemaHash: varchar61("schema_hash", { length: 64 }).notNull(),
     brandContractHash: varchar61("brand_contract_hash", { length: 64 }).notNull(),
-    contract: jsonb42("contract").$type().notNull(),
-    createdBy: text82("created_by"),
-    createdAt: timestamp74("created_at").notNull().defaultNow()
+    contract: jsonb44("contract").$type().notNull(),
+    createdBy: text83("created_by"),
+    createdAt: timestamp75("created_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_candidates_project_workspace_fkey"
@@ -24659,29 +24726,29 @@ var componentImplementationCandidates = pgTable81(
       table.familyContractHash
     ).where(sql19`${table.familyContract} IS NOT NULL`),
     unique5("component_implementation_candidate_scope_unique").on(table.id, table.projectId, table.componentId),
-    index69("component_implementation_candidates_component_idx").on(table.projectId, table.componentId)
+    index70("component_implementation_candidates_component_idx").on(table.projectId, table.componentId)
   ]
 );
-var componentFamilyManifests = pgTable81(
+var componentFamilyManifests = pgTable82(
   "component_family_manifests",
   {
-    id: text82("id").primaryKey(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    familyKey: text82("family_key").notNull(),
+    id: text83("id").primaryKey(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    familyKey: text83("family_key").notNull(),
     familyContractHash: varchar61("family_contract_hash", { length: 64 }).notNull(),
-    familyContract: jsonb42("family_contract").$type(),
+    familyContract: jsonb44("family_contract").$type(),
     commitSha: varchar61("commit_sha", { length: 64 }).notNull(),
     adapterHash: varchar61("adapter_hash", { length: 64 }).notNull(),
     manifestHash: varchar61("manifest_hash", { length: 64 }).notNull(),
-    previewOrigin: text82("preview_origin").notNull(),
-    nativeViewports: jsonb42("native_viewports").$type().notNull(),
-    adapter: jsonb42("adapter").$type().notNull(),
-    createdBy: text82("created_by"),
-    createdAt: timestamp74("created_at").notNull().defaultNow()
+    previewOrigin: text83("preview_origin").notNull(),
+    nativeViewports: jsonb44("native_viewports").$type().notNull(),
+    adapter: jsonb44("adapter").$type().notNull(),
+    createdBy: text83("created_by"),
+    createdAt: timestamp75("created_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_family_manifests_project_workspace_fkey"
@@ -24690,21 +24757,21 @@ var componentFamilyManifests = pgTable81(
     unique5("component_family_manifests_id_project_unique").on(table.id, table.projectId),
     unique5("component_family_manifests_evidence_unique").on(table.id, table.projectId, table.manifestHash),
     uniqueIndex35("component_family_manifest_tuple_unique").on(table.projectId, table.familyKey, table.manifestHash),
-    index69("component_family_manifests_family_idx").on(table.projectId, table.familyKey, table.createdAt)
+    index70("component_family_manifests_family_idx").on(table.projectId, table.familyKey, table.createdAt)
   ]
 );
-var componentImplementationRequests = pgTable81(
+var componentImplementationRequests = pgTable82(
   "component_implementation_requests",
   {
-    id: text82("id").primaryKey(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    candidateId: text82("candidate_id").notNull(),
-    componentVersion: integer38("component_version").notNull(),
+    id: text83("id").primaryKey(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text83("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    candidateId: text83("candidate_id").notNull(),
+    componentVersion: integer39("component_version").notNull(),
     provider: varchar61("provider", { length: 20 }).$type().notNull(),
     status: varchar61("status", { length: 20 }).$type().notNull(),
-    familyKey: text82("family_key").notNull(),
+    familyKey: text83("family_key").notNull(),
     familyContractHash: varchar61("family_contract_hash", { length: 64 }).notNull(),
     schemaHash: varchar61("schema_hash", { length: 64 }).notNull(),
     brandContractHash: varchar61("brand_contract_hash", { length: 64 }).notNull(),
@@ -24712,86 +24779,86 @@ var componentImplementationRequests = pgTable81(
     commitSha: varchar61("commit_sha", { length: 64 }),
     adapterHash: varchar61("adapter_hash", { length: 64 }),
     familyManifestHash: varchar61("family_manifest_hash", { length: 64 }),
-    previewOrigin: text82("preview_origin"),
-    nativeViewports: jsonb42("native_viewports").$type(),
-    adapter: jsonb42("adapter").$type(),
-    providerProvenance: jsonb42("provider_provenance").$type(),
-    claimedByApiKeyId: text82("claimed_by_api_key_id"),
+    previewOrigin: text83("preview_origin"),
+    nativeViewports: jsonb44("native_viewports").$type(),
+    adapter: jsonb44("adapter").$type(),
+    providerProvenance: jsonb44("provider_provenance").$type(),
+    claimedByApiKeyId: text83("claimed_by_api_key_id"),
     claimCredentialHash: varchar61("claim_credential_hash", { length: 64 }),
-    claimCredentialExpiresAt: timestamp74("claim_credential_expires_at", { withTimezone: true }),
-    claimCredentialConsumedAt: timestamp74("claim_credential_consumed_at", { withTimezone: true }),
+    claimCredentialExpiresAt: timestamp75("claim_credential_expires_at", { withTimezone: true }),
+    claimCredentialConsumedAt: timestamp75("claim_credential_consumed_at", { withTimezone: true }),
     completionHash: varchar61("completion_hash", { length: 64 }),
-    evidenceId: text82("evidence_id"),
-    errorCode: text82("error_code"),
-    errorMessage: text82("error_message"),
-    requestedBy: text82("requested_by"),
-    createdAt: timestamp74("created_at", { withTimezone: true }).notNull().defaultNow(),
-    expiresAt: timestamp74("expires_at", { withTimezone: true }).notNull(),
-    claimedAt: timestamp74("claimed_at", { withTimezone: true }),
-    completedAt: timestamp74("completed_at", { withTimezone: true }),
-    failedAt: timestamp74("failed_at", { withTimezone: true }),
-    updatedAt: timestamp74("updated_at", { withTimezone: true }).notNull().defaultNow()
+    evidenceId: text83("evidence_id"),
+    errorCode: text83("error_code"),
+    errorMessage: text83("error_message"),
+    requestedBy: text83("requested_by"),
+    createdAt: timestamp75("created_at", { withTimezone: true }).notNull().defaultNow(),
+    expiresAt: timestamp75("expires_at", { withTimezone: true }).notNull(),
+    claimedAt: timestamp75("claimed_at", { withTimezone: true }),
+    completedAt: timestamp75("completed_at", { withTimezone: true }),
+    failedAt: timestamp75("failed_at", { withTimezone: true }),
+    updatedAt: timestamp75("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_requests_project_workspace_fkey"
     }).onDelete("cascade"),
-    foreignKey5({
+    foreignKey6({
       columns: [table.candidateId, table.projectId, table.componentId],
       foreignColumns: [componentImplementationCandidates.id, componentImplementationCandidates.projectId, componentImplementationCandidates.componentId],
       name: "component_implementation_requests_candidate_fkey"
     }).onDelete("cascade"),
     unique5("component_implementation_requests_scope_unique").on(table.id, table.projectId, table.componentId),
     uniqueIndex35("component_implementation_requests_active_unique").on(table.projectId, table.componentId).where(sql19`${table.status} IN ('pending', 'claimed')`),
-    index69("component_implementation_requests_claimable_idx").on(table.projectId, table.status, table.expiresAt, table.createdAt)
+    index70("component_implementation_requests_claimable_idx").on(table.projectId, table.status, table.expiresAt, table.createdAt)
   ]
 );
-var componentImplementationEvidence = pgTable81(
+var componentImplementationEvidence = pgTable82(
   "component_implementation_evidence",
   {
-    id: text82("id").primaryKey(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    candidateId: text82("candidate_id").notNull(),
-    familyManifestId: text82("family_manifest_id").notNull(),
+    id: text83("id").primaryKey(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text83("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    candidateId: text83("candidate_id").notNull(),
+    familyManifestId: text83("family_manifest_id").notNull(),
     familyManifestHash: varchar61("family_manifest_hash", { length: 64 }).notNull(),
     variantBindingHash: varchar61("variant_binding_hash", { length: 64 }).notNull(),
-    variantBinding: jsonb42("variant_binding").$type().notNull(),
-    requestId: text82("request_id"),
+    variantBinding: jsonb44("variant_binding").$type().notNull(),
+    requestId: text83("request_id"),
     schemaHash: varchar61("schema_hash", { length: 64 }).notNull(),
     brandContractHash: varchar61("brand_contract_hash", { length: 64 }).notNull(),
     commitSha: varchar61("commit_sha", { length: 64 }).notNull(),
     adapterHash: varchar61("adapter_hash", { length: 64 }).notNull(),
-    previewOrigin: text82("preview_origin").notNull(),
-    nativeViewports: jsonb42("native_viewports").$type().notNull(),
-    adapter: jsonb42("adapter").$type().notNull(),
+    previewOrigin: text83("preview_origin").notNull(),
+    nativeViewports: jsonb44("native_viewports").$type().notNull(),
+    adapter: jsonb44("adapter").$type().notNull(),
     status: varchar61("status", { length: 20 }).$type().notNull(),
-    checks: jsonb42("checks").$type().notNull(),
+    checks: jsonb44("checks").$type().notNull(),
     evidenceDigest: varchar61("evidence_digest", { length: 128 }).notNull(),
     evidenceTupleHash: varchar61("evidence_tuple_hash", { length: 64 }).notNull(),
-    createdBy: text82("created_by"),
-    createdAt: timestamp74("created_at").notNull().defaultNow()
+    createdBy: text83("created_by"),
+    createdAt: timestamp75("created_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_evidence_project_workspace_fkey"
     }).onDelete("cascade"),
-    foreignKey5({
+    foreignKey6({
       columns: [table.familyManifestId, table.projectId, table.familyManifestHash],
       foreignColumns: [componentFamilyManifests.id, componentFamilyManifests.projectId, componentFamilyManifests.manifestHash],
       name: "component_implementation_evidence_manifest_fkey"
     }).onDelete("restrict"),
-    foreignKey5({
+    foreignKey6({
       columns: [table.candidateId, table.projectId, table.componentId],
       foreignColumns: [componentImplementationCandidates.id, componentImplementationCandidates.projectId, componentImplementationCandidates.componentId],
       name: "component_implementation_evidence_candidate_fkey"
     }).onDelete("cascade"),
-    foreignKey5({
+    foreignKey6({
       columns: [table.requestId, table.projectId, table.componentId],
       foreignColumns: [componentImplementationRequests.id, componentImplementationRequests.projectId, componentImplementationRequests.componentId],
       name: "component_implementation_evidence_request_fkey"
@@ -24799,43 +24866,43 @@ var componentImplementationEvidence = pgTable81(
     uniqueIndex35("component_implementation_evidence_digest_unique").on(table.projectId, table.componentId, table.evidenceDigest),
     uniqueIndex35("component_implementation_evidence_request_unique").on(table.requestId).where(sql19`${table.requestId} IS NOT NULL`),
     unique5("component_implementation_evidence_scope_unique").on(table.id, table.projectId, table.componentId),
-    index69("component_implementation_evidence_candidate_idx").on(table.candidateId, table.createdAt)
+    index70("component_implementation_evidence_candidate_idx").on(table.candidateId, table.createdAt)
   ]
 );
-var componentImplementationApprovals = pgTable81(
+var componentImplementationApprovals = pgTable82(
   "component_implementation_approvals",
   {
-    id: text82("id").primaryKey(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    candidateId: text82("candidate_id").notNull(),
-    evidenceId: text82("evidence_id").notNull(),
-    approvedBy: text82("approved_by").notNull(),
-    approvedAt: timestamp74("approved_at").notNull().defaultNow()
+    id: text83("id").primaryKey(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text83("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    candidateId: text83("candidate_id").notNull(),
+    evidenceId: text83("evidence_id").notNull(),
+    approvedBy: text83("approved_by").notNull(),
+    approvedAt: timestamp75("approved_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_approvals_project_workspace_fkey"
     }).onDelete("cascade"),
-    foreignKey5({
+    foreignKey6({
       columns: [table.candidateId, table.projectId, table.componentId],
       foreignColumns: [componentImplementationCandidates.id, componentImplementationCandidates.projectId, componentImplementationCandidates.componentId],
       name: "component_implementation_approvals_candidate_fkey"
     }).onDelete("cascade"),
-    foreignKey5({
+    foreignKey6({
       columns: [table.evidenceId, table.projectId, table.componentId],
       foreignColumns: [componentImplementationEvidence.id, componentImplementationEvidence.projectId, componentImplementationEvidence.componentId],
       name: "component_implementation_approvals_evidence_fkey"
     }).onDelete("cascade"),
     uniqueIndex35("component_implementation_approval_evidence_unique").on(table.evidenceId),
     unique5("component_implementation_approval_scope_unique").on(table.id, table.projectId, table.componentId),
-    index69("component_implementation_approvals_component_idx").on(table.projectId, table.componentId)
+    index70("component_implementation_approvals_component_idx").on(table.projectId, table.componentId)
   ]
 );
-var componentImplementationAdapters = pgTable81(
+var componentImplementationAdapters = pgTable82(
   "component_implementation_adapters",
   {
     // uuid generated BY THE DATABASE, unlike this file's older `text` ids with app-side prefixes.
@@ -24843,104 +24910,112 @@ var componentImplementationAdapters = pgTable81(
     // (project_id, component_id), which is unique — so there is nothing for a readable prefix to
     // help with, and one fewer identifier for a writer to have to mint correctly.
     id: uuid2("id").primaryKey().defaultRandom(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull(),
-    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    adapter: jsonb42("adapter").$type().notNull(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull(),
+    componentId: text83("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    adapter: jsonb44("adapter").$type().notNull(),
     adapterHash: varchar61("adapter_hash", { length: 64 }).notNull(),
     source: varchar61("source", { length: 24 }).$type().notNull(),
-    declaredBy: text82("declared_by"),
-    declaredAt: timestamp74("declared_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp74("updated_at", { withTimezone: true }).notNull().defaultNow()
+    declaredBy: text83("declared_by"),
+    declaredAt: timestamp75("declared_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp75("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_adapters_scope_fkey"
     }).onDelete("cascade"),
     unique5("component_implementation_adapters_component_unique").on(table.projectId, table.componentId),
-    index69("component_implementation_adapters_project_idx").on(table.projectId, table.componentId)
+    index70("component_implementation_adapters_project_idx").on(table.projectId, table.componentId)
   ]
 );
-var componentImplementationStates = pgTable81(
+var componentImplementationStates = pgTable82(
   "component_implementation_states",
   {
-    id: text82("id").primaryKey(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    selectedCandidateId: text82("selected_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
-    selectedEvidenceId: text82("selected_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
-    selectedApprovalId: text82("selected_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
-    publishedCandidateId: text82("published_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
-    publishedEvidenceId: text82("published_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
-    publishedApprovalId: text82("published_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
-    requestId: text82("request_id"),
+    id: text83("id").primaryKey(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text83("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    selectedCandidateId: text83("selected_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
+    selectedEvidenceId: text83("selected_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
+    selectedApprovalId: text83("selected_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
+    publishedCandidateId: text83("published_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
+    publishedEvidenceId: text83("published_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
+    publishedApprovalId: text83("published_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
+    requestId: text83("request_id"),
     requestProvider: varchar61("request_provider", { length: 20 }).$type(),
     requestStatus: varchar61("request_status", { length: 20 }).$type().notNull().default("not-requested"),
-    requestErrorCode: text82("request_error_code"),
-    requestErrorMessage: text82("request_error_message"),
-    requestedBy: text82("requested_by"),
-    requestedAt: timestamp74("requested_at"),
-    updatedAt: timestamp74("updated_at").notNull().defaultNow()
+    requestErrorCode: text83("request_error_code"),
+    requestErrorMessage: text83("request_error_message"),
+    requestedBy: text83("requested_by"),
+    requestedAt: timestamp75("requested_at"),
+    updatedAt: timestamp75("updated_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_states_project_workspace_fkey"
     }).onDelete("cascade"),
     uniqueIndex35("component_implementation_states_component_unique").on(table.projectId, table.componentId),
-    index69("component_implementation_states_workspace_idx").on(table.workspaceId)
+    index70("component_implementation_states_workspace_idx").on(table.workspaceId)
   ]
 );
-var componentPreviewSources = pgTable81(
+var componentPreviewSources = pgTable82(
   "component_preview_sources",
   {
     id: uuid2("id").primaryKey().defaultRandom(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull(),
-    componentId: text82("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    sourcePath: text82("source_path").notNull(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull(),
+    componentId: text83("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    sourcePath: text83("source_path").notNull(),
     sourceExport: varchar61("source_export", { length: 128 }).notNull().default("default"),
     /** `file`: props are the component's fields. `section`: codemod-extracted, props `{ blockId, bind, overrides, page }` (0321). */
     sourceKind: varchar61("source_kind", { length: 16 }).$type().notNull().default("file"),
     recordedBy: varchar61("recorded_by", { length: 24 }).$type().notNull().default("agent"),
-    updatedBy: text82("updated_by"),
-    createdAt: timestamp74("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp74("updated_at", { withTimezone: true }).notNull().defaultNow()
+    updatedBy: text83("updated_by"),
+    createdAt: timestamp75("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp75("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_preview_sources_scope_fkey"
     }).onDelete("cascade"),
     unique5("component_preview_sources_component_unique").on(table.projectId, table.componentId),
-    index69("component_preview_sources_project_idx").on(table.projectId)
+    index70("component_preview_sources_project_idx").on(table.projectId)
   ]
 );
-var componentPreviewBundles = pgTable81(
+var componentPreviewBundles = pgTable82(
   "component_preview_bundles",
   {
     id: uuid2("id").primaryKey().defaultRandom(),
-    workspaceId: text82("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text82("project_id").notNull(),
+    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text83("project_id").notNull(),
     commitSha: varchar61("commit_sha", { length: 64 }).notNull(),
-    artifactKey: text82("artifact_key").notNull(),
+    artifactKey: text83("artifact_key").notNull(),
     checksum: varchar61("checksum", { length: 80 }).notNull(),
     sizeBytes: bigint4("size_bytes", { mode: "number" }).notNull(),
-    createdAt: timestamp74("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp75("created_at", { withTimezone: true }).notNull().defaultNow(),
+    /** The preview-runtime version that built this bundle (0330); null from a runner before 0.5.0. */
+    runtimeVersion: text83("runtime_version"),
+    /** The latest runtime refresh of this commit: rebuilt with a newer runner without re-validating (0330). */
+    refreshId: uuid2("refresh_id"),
+    refreshStatus: text83("refresh_status"),
+    refreshErrorCode: text83("refresh_error_code"),
+    refreshErrorMessage: text83("refresh_error_message"),
+    refreshDispatchedAt: timestamp75("refresh_dispatched_at", { withTimezone: true })
   },
   (table) => [
-    foreignKey5({
+    foreignKey6({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_preview_bundles_scope_fkey"
     }).onDelete("cascade"),
     unique5("component_preview_bundles_commit_unique").on(table.projectId, table.commitSha),
-    index69("component_preview_bundles_project_idx").on(table.projectId, table.createdAt)
+    index70("component_preview_bundles_project_idx").on(table.projectId, table.createdAt)
   ]
 );
 
@@ -24948,14 +25023,14 @@ var componentPreviewBundles = pgTable81(
 import { sql as sql20 } from "drizzle-orm";
 import {
   check as check4,
-  foreignKey as foreignKey6,
-  index as index70,
-  integer as integer39,
-  jsonb as jsonb43,
-  pgTable as pgTable82,
+  foreignKey as foreignKey7,
+  index as index71,
+  integer as integer40,
+  jsonb as jsonb45,
+  pgTable as pgTable83,
   primaryKey as primaryKey6,
-  text as text83,
-  timestamp as timestamp75,
+  text as text84,
+  timestamp as timestamp76,
   unique as unique6,
   uniqueIndex as uniqueIndex36,
   uuid as uuid3,
@@ -24969,62 +25044,62 @@ var ORCHESTRATION_RUN_STATUSES = [
   "completed",
   "abandoned"
 ];
-var projectOrchestrationStates = pgTable82(
+var projectOrchestrationStates = pgTable83(
   "project_orchestration_states",
   {
-    projectId: text83("project_id").primaryKey().references(() => projects.id, { onDelete: "cascade" }),
-    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    generation: integer39("generation").notNull().default(2),
-    enabledBy: text83("enabled_by").notNull(),
-    enabledAt: timestamp75("enabled_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp75("updated_at", { withTimezone: true }).notNull().defaultNow()
+    projectId: text84("project_id").primaryKey().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    generation: integer40("generation").notNull().default(2),
+    enabledBy: text84("enabled_by").notNull(),
+    enabledAt: timestamp76("enabled_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey6({
+    foreignKey7({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "project_orchestration_states_project_workspace_fkey"
     }).onDelete("cascade"),
     unique6("project_orchestration_states_scope_unique").on(table.projectId, table.workspaceId),
     check4("project_orchestration_states_generation_check", sql20`${table.generation} >= 2`),
-    index70("project_orchestration_states_workspace_idx").on(table.workspaceId)
+    index71("project_orchestration_states_workspace_idx").on(table.workspaceId)
   ]
 );
-var orchestrationRuns = pgTable82(
+var orchestrationRuns = pgTable83(
   "orchestration_runs",
   {
     id: uuid3("id").primaryKey().defaultRandom(),
-    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    projectGeneration: integer39("project_generation").notNull(),
-    startIdempotencyKey: text83("start_idempotency_key").notNull(),
+    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    projectGeneration: integer40("project_generation").notNull(),
+    startIdempotencyKey: text84("start_idempotency_key").notNull(),
     targetKind: varchar62("target_kind", { length: 32 }).$type().notNull().default("component-variant"),
-    targetId: text83("target_id").notNull().references(() => components.id, { onDelete: "no action" }),
-    targetVariantId: text83("target_variant_id"),
-    targetMetadata: jsonb43("target_metadata").$type().notNull(),
+    targetId: text84("target_id").notNull().references(() => components.id, { onDelete: "no action" }),
+    targetVariantId: text84("target_variant_id"),
+    targetMetadata: jsonb45("target_metadata").$type().notNull(),
     status: varchar62("status", { length: 20 }).$type().notNull().default("open"),
     activeStage: varchar62("active_stage", { length: 64 }).notNull().default("awaiting-executor"),
-    version: integer39("version").notNull().default(1),
-    preferredExecutorId: text83("preferred_executor_id"),
-    cancellationRequestedAt: timestamp75("cancellation_requested_at", { withTimezone: true }),
-    cancellationRequestedBy: text83("cancellation_requested_by"),
-    createdBy: text83("created_by").notNull(),
+    version: integer40("version").notNull().default(1),
+    preferredExecutorId: text84("preferred_executor_id"),
+    cancellationRequestedAt: timestamp76("cancellation_requested_at", { withTimezone: true }),
+    cancellationRequestedBy: text84("cancellation_requested_by"),
+    createdBy: text84("created_by").notNull(),
     policyVersion: varchar62("policy_version", { length: 64 }).notNull().default("orchestration-v2"),
-    createdAt: timestamp75("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp75("updated_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey6({
+    foreignKey7({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "orchestration_runs_project_workspace_fkey"
     }).onDelete("cascade"),
-    foreignKey6({
+    foreignKey7({
       columns: [table.targetVariantId, table.workspaceId, table.targetId],
       foreignColumns: [componentVariants.id, componentVariants.workspaceId, componentVariants.componentId],
       name: "orchestration_runs_target_variant_scope_fkey"
     }).onDelete("no action"),
-    foreignKey6({
+    foreignKey7({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projectOrchestrationStates.projectId, projectOrchestrationStates.workspaceId],
       name: "orchestration_runs_project_state_fkey"
@@ -25035,14 +25110,14 @@ var orchestrationRuns = pgTable82(
       table.startIdempotencyKey
     ),
     uniqueIndex36("orchestration_runs_nonterminal_project_unique").on(table.projectId).where(sql20`${table.status} IN ('open', 'paused', 'cancelling')`),
-    index70("orchestration_runs_project_target_idx").on(
+    index71("orchestration_runs_project_target_idx").on(
       table.projectId,
       table.targetKind,
       table.targetId,
       table.targetVariantId,
       table.createdAt
     ),
-    index70("orchestration_runs_workspace_status_idx").on(
+    index71("orchestration_runs_workspace_status_idx").on(
       table.workspaceId,
       table.status,
       table.updatedAt
@@ -25129,59 +25204,59 @@ var orchestrationRuns = pgTable82(
     check4("orchestration_runs_timestamps_check", sql20`${table.updatedAt} >= ${table.createdAt}`)
   ]
 );
-var orchestrationRunStartKeys = pgTable82(
+var orchestrationRunStartKeys = pgTable83(
   "orchestration_run_start_keys",
   {
-    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    idempotencyKey: text83("idempotency_key").notNull(),
+    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    idempotencyKey: text84("idempotency_key").notNull(),
     runId: uuid3("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
-    createdAt: timestamp75("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     primaryKey6({ columns: [table.projectId, table.idempotencyKey] }),
-    foreignKey6({
+    foreignKey7({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [orchestrationRuns.id, orchestrationRuns.workspaceId, orchestrationRuns.projectId],
       name: "orchestration_run_start_keys_run_scope_fkey"
     }).onDelete("cascade"),
-    index70("orchestration_run_start_keys_run_created_idx").on(table.runId, table.createdAt),
+    index71("orchestration_run_start_keys_run_created_idx").on(table.runId, table.createdAt),
     check4(
       "orchestration_run_start_keys_idempotency_key_check",
       sql20`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
     )
   ]
 );
-var orchestrationRunEvents = pgTable82(
+var orchestrationRunEvents = pgTable83(
   "orchestration_run_events",
   {
     id: uuid3("id").primaryKey().defaultRandom(),
     runId: uuid3("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
-    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sequence: integer39("sequence").notNull(),
-    schemaVersion: integer39("schema_version").notNull().default(1),
-    idempotencyKey: text83("idempotency_key").notNull(),
+    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sequence: integer40("sequence").notNull(),
+    schemaVersion: integer40("schema_version").notNull().default(1),
+    idempotencyKey: text84("idempotency_key").notNull(),
     type: varchar62("type", { length: 100 }).notNull(),
     actorType: varchar62("actor_type", { length: 32 }).notNull(),
-    actorId: text83("actor_id").notNull(),
-    causationId: text83("causation_id"),
-    correlationId: text83("correlation_id"),
-    payload: jsonb43("payload").$type().notNull().default({}),
+    actorId: text84("actor_id").notNull(),
+    causationId: text84("causation_id"),
+    correlationId: text84("correlation_id"),
+    payload: jsonb45("payload").$type().notNull().default({}),
     payloadDigest: varchar62("payload_digest", { length: 71 }).generatedAlwaysAs(
       sql20`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
     ),
-    createdAt: timestamp75("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey6({
+    foreignKey7({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [orchestrationRuns.id, orchestrationRuns.workspaceId, orchestrationRuns.projectId],
       name: "orchestration_run_events_run_scope_fkey"
     }).onDelete("cascade"),
     unique6("orchestration_run_events_sequence_unique").on(table.runId, table.sequence),
     unique6("orchestration_run_events_idempotency_unique").on(table.runId, table.idempotencyKey),
-    index70("orchestration_run_events_project_created_idx").on(table.projectId, table.createdAt),
+    index71("orchestration_run_events_project_created_idx").on(table.projectId, table.createdAt),
     check4("orchestration_run_events_sequence_check", sql20`${table.sequence} >= 1`),
     check4("orchestration_run_events_schema_version_check", sql20`${table.schemaVersion} >= 1`),
     check4(
@@ -25197,29 +25272,29 @@ var orchestrationRunEvents = pgTable82(
     )
   ]
 );
-var orchestrationRunCommandResults = pgTable82(
+var orchestrationRunCommandResults = pgTable83(
   "orchestration_run_command_results",
   {
     commandId: uuid3("command_id").primaryKey(),
-    workspaceId: text83("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text83("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid3("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     command: varchar62("command", { length: 20 }).$type().notNull(),
-    expectedVersion: integer39("expected_version").notNull(),
-    resultingVersion: integer39("resulting_version").notNull(),
-    actorId: text83("actor_id").notNull(),
+    expectedVersion: integer40("expected_version").notNull(),
+    resultingVersion: integer40("resulting_version").notNull(),
+    actorId: text84("actor_id").notNull(),
     eventId: uuid3("event_id").notNull().references(() => orchestrationRunEvents.id, { onDelete: "cascade" }),
-    resultPayload: jsonb43("result_payload").$type().notNull(),
-    createdAt: timestamp75("created_at", { withTimezone: true }).notNull().defaultNow()
+    resultPayload: jsonb45("result_payload").$type().notNull(),
+    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey6({
+    foreignKey7({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [orchestrationRuns.id, orchestrationRuns.workspaceId, orchestrationRuns.projectId],
       name: "orchestration_run_command_results_run_scope_fkey"
     }).onDelete("cascade"),
-    index70("orchestration_run_command_results_run_created_idx").on(table.runId, table.createdAt),
-    index70("orchestration_run_command_results_project_created_idx").on(
+    index71("orchestration_run_command_results_run_created_idx").on(table.runId, table.createdAt),
+    index71("orchestration_run_command_results_project_created_idx").on(
       table.projectId,
       table.createdAt
     ),
@@ -25252,13 +25327,13 @@ import {
   bigint as bigint5,
   boolean as boolean29,
   check as check5,
-  foreignKey as foreignKey7,
-  index as index71,
-  integer as integer40,
-  jsonb as jsonb44,
-  pgTable as pgTable83,
-  text as text84,
-  timestamp as timestamp76,
+  foreignKey as foreignKey8,
+  index as index72,
+  integer as integer41,
+  jsonb as jsonb46,
+  pgTable as pgTable84,
+  text as text85,
+  timestamp as timestamp77,
   unique as unique7,
   uniqueIndex as uniqueIndex37,
   uuid as uuid4,
@@ -25303,23 +25378,23 @@ var EXECUTOR_COMMAND_KINDS = [
   "cancel",
   "handoff"
 ];
-var orchestrationExecutorInstallations = pgTable83(
+var orchestrationExecutorInstallations = pgTable84(
   "orchestration_executor_installations",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     kind: varchar63("kind", { length: 24 }).$type().notNull(),
-    grantId: text84("grant_id").references(() => deviceAuthorizations.id, { onDelete: "cascade" }),
+    grantId: text85("grant_id").references(() => deviceAuthorizations.id, { onDelete: "cascade" }),
     protocolVersion: varchar63("protocol_version", { length: 16 }).notNull(),
-    capabilityDigest: text84("capability_digest").notNull(),
-    repositoryClaim: jsonb44("repository_claim").$type().notNull().default({}),
+    capabilityDigest: text85("capability_digest").notNull(),
+    repositoryClaim: jsonb46("repository_claim").$type().notNull().default({}),
     status: varchar63("status", { length: 20 }).$type().notNull().default("active"),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "orchestration_executor_installations_project_workspace_fkey"
@@ -25329,7 +25404,7 @@ var orchestrationExecutorInstallations = pgTable83(
       table.workspaceId,
       table.projectId
     ),
-    index71("orchestration_executor_installations_project_status_idx").on(
+    index72("orchestration_executor_installations_project_status_idx").on(
       table.projectId,
       table.status
     ),
@@ -25366,27 +25441,27 @@ var orchestrationExecutorInstallations = pgTable83(
     )
   ]
 );
-var orchestrationExecutorSessions = pgTable83(
+var orchestrationExecutorSessions = pgTable84(
   "orchestration_executor_sessions",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     installationId: uuid4("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
-    sessionEpoch: integer40("session_epoch").notNull().default(1),
+    sessionEpoch: integer41("session_epoch").notNull().default(1),
     credentialAudience: varchar63("credential_audience", { length: 64 }).notNull(),
     state: varchar63("state", { length: 20 }).$type().notNull().default("open"),
     clientCursor: bigint5("client_cursor", { mode: "number" }).notNull().default(0),
     serverCursor: bigint5("server_cursor", { mode: "number" }).notNull().default(0),
-    connectedAt: timestamp76("connected_at", { withTimezone: true }).notNull().defaultNow(),
-    lastHeartbeatAt: timestamp76("last_heartbeat_at", { withTimezone: true }),
-    serverReceivedAt: timestamp76("server_received_at", { withTimezone: true }),
-    closedAt: timestamp76("closed_at", { withTimezone: true }),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    connectedAt: timestamp77("connected_at", { withTimezone: true }).notNull().defaultNow(),
+    lastHeartbeatAt: timestamp77("last_heartbeat_at", { withTimezone: true }),
+    serverReceivedAt: timestamp77("server_received_at", { withTimezone: true }),
+    closedAt: timestamp77("closed_at", { withTimezone: true }),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.installationId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationExecutorInstallations.id,
@@ -25404,11 +25479,11 @@ var orchestrationExecutorSessions = pgTable83(
       table.installationId,
       table.sessionEpoch
     ),
-    index71("orchestration_executor_sessions_installation_state_idx").on(
+    index72("orchestration_executor_sessions_installation_state_idx").on(
       table.installationId,
       table.state
     ),
-    index71("orchestration_executor_sessions_liveness_idx").on(table.serverReceivedAt).where(sql21`${table.state} = 'open'`),
+    index72("orchestration_executor_sessions_liveness_idx").on(table.serverReceivedAt).where(sql21`${table.state} = 'open'`),
     check5("orchestration_executor_sessions_epoch_check", sql21`${table.sessionEpoch} >= 1`),
     check5(
       "orchestration_executor_sessions_state_check",
@@ -25432,18 +25507,18 @@ var orchestrationExecutorSessions = pgTable83(
     )
   ]
 );
-var orchestrationImplementationAttempts = pgTable83(
+var orchestrationImplementationAttempts = pgTable84(
   "orchestration_implementation_attempts",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     installationId: uuid4("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
-    attemptNumber: integer40("attempt_number").notNull(),
+    attemptNumber: integer41("attempt_number").notNull(),
     targetKind: varchar63("target_kind", { length: 32 }).notNull().default("component-variant"),
-    targetId: text84("target_id").notNull(),
-    targetBindingDigest: text84("target_binding_digest").notNull(),
+    targetId: text85("target_id").notNull(),
+    targetBindingDigest: text85("target_binding_digest").notNull(),
     repositoryId: bigint5("repository_id", { mode: "number" }),
     baseBranch: varchar63("base_branch", { length: 255 }),
     baseSha: varchar63("base_sha", { length: 64 }),
@@ -25452,7 +25527,7 @@ var orchestrationImplementationAttempts = pgTable83(
      * crash-safety line: if the process dies holding a branch, cancellation and reconciliation can
      * still find it. Null until the branch exists. Shape-checked to run branches only (0278).
      */
-    createdRef: text84("created_ref"),
+    createdRef: text85("created_ref"),
     status: varchar63("status", { length: 24 }).$type().notNull().default("preflight"),
     supersededBy: uuid4("superseded_by"),
     /**
@@ -25460,19 +25535,19 @@ var orchestrationImplementationAttempts = pgTable83(
      * withdrawn attempt's pull request is kept BY URL, so a reader of the run never has to
      * discover from GitHub that one used to exist here.
      */
-    withdrawnAt: timestamp76("withdrawn_at", { withTimezone: true }),
-    withdrawnBy: text84("withdrawn_by"),
-    withdrawnPullRequestUrl: text84("withdrawn_pull_request_url"),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    withdrawnAt: timestamp77("withdrawn_at", { withTimezone: true }),
+    withdrawnBy: text85("withdrawn_by"),
+    withdrawnPullRequestUrl: text85("withdrawn_pull_request_url"),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.supersededBy],
       foreignColumns: [table.id],
       name: "orchestration_implementation_attempts_superseded_by_fkey"
     }).onDelete("set null"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationRuns.id,
@@ -25481,7 +25556,7 @@ var orchestrationImplementationAttempts = pgTable83(
       ],
       name: "orchestration_implementation_attempts_run_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.installationId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationExecutorInstallations.id,
@@ -25499,7 +25574,7 @@ var orchestrationImplementationAttempts = pgTable83(
       table.runId,
       table.attemptNumber
     ),
-    index71("orchestration_implementation_attempts_run_created_idx").on(
+    index72("orchestration_implementation_attempts_run_created_idx").on(
       table.runId,
       table.createdAt
     ),
@@ -25530,49 +25605,49 @@ var orchestrationImplementationAttempts = pgTable83(
     )
   ]
 );
-var orchestrationPlanSnapshots = pgTable83(
+var orchestrationPlanSnapshots = pgTable84(
   "orchestration_plan_snapshots",
   {
-    planDigest: text84("plan_digest").primaryKey(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    planDigest: text85("plan_digest").primaryKey(),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     baseHeadOid: varchar63("base_head_oid", { length: 64 }).notNull(),
-    budget: jsonb44("budget").notNull(),
-    files: jsonb44("files").notNull(),
-    fileCount: integer40("file_count").notNull(),
+    budget: jsonb46("budget").notNull(),
+    files: jsonb46("files").notNull(),
+    fileCount: integer41("file_count").notNull(),
     byteCount: bigint5("byte_count", { mode: "number" }).notNull(),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow()
   },
-  (table) => [index71("orchestration_plan_snapshots_project_idx").on(table.workspaceId, table.projectId, table.createdAt)]
+  (table) => [index72("orchestration_plan_snapshots_project_idx").on(table.workspaceId, table.projectId, table.createdAt)]
 );
-var orchestrationVisualApprovals = pgTable83(
+var orchestrationVisualApprovals = pgTable84(
   "orchestration_visual_approvals",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
     headSha: varchar63("head_sha", { length: 64 }).notNull(),
     evidenceId: uuid4("evidence_id").notNull(),
-    authorizedBy: text84("authorized_by").notNull(),
-    idempotencyKey: text84("idempotency_key").notNull(),
-    expiresAt: timestamp76("expires_at", { withTimezone: true }).notNull(),
-    consumedAt: timestamp76("consumed_at", { withTimezone: true }),
-    consumedByRef: text84("consumed_by_ref"),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    authorizedBy: text85("authorized_by").notNull(),
+    idempotencyKey: text85("idempotency_key").notNull(),
+    expiresAt: timestamp77("expires_at", { withTimezone: true }).notNull(),
+    consumedAt: timestamp77("consumed_at", { withTimezone: true }),
+    consumedByRef: text85("consumed_by_ref"),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationMergeAuthorizations = pgTable83(
+var orchestrationMergeAuthorizations = pgTable84(
   "orchestration_merge_authorizations",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
-    pullRequestNumber: integer40("pull_request_number").notNull(),
+    pullRequestNumber: integer41("pull_request_number").notNull(),
     expectedHeadSha: varchar63("expected_head_sha", { length: 64 }).notNull(),
     visualApprovalId: uuid4("visual_approval_id").notNull(),
     /**
@@ -25580,88 +25655,88 @@ var orchestrationMergeAuthorizations = pgTable83(
      * what an authorization BOUGHT, and a void bought nothing. A CHECK keeps the three together and
      * forbids a row that is both spent and voided.
      */
-    voidedAt: timestamp76("voided_at", { withTimezone: true }),
-    voidedBy: text84("voided_by"),
-    voidReason: text84("void_reason"),
-    authorizedBy: text84("authorized_by").notNull(),
-    idempotencyKey: text84("idempotency_key").notNull(),
-    expiresAt: timestamp76("expires_at", { withTimezone: true }).notNull(),
-    consumedAt: timestamp76("consumed_at", { withTimezone: true }),
-    consumedByRef: text84("consumed_by_ref"),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    voidedAt: timestamp77("voided_at", { withTimezone: true }),
+    voidedBy: text85("voided_by"),
+    voidReason: text85("void_reason"),
+    authorizedBy: text85("authorized_by").notNull(),
+    idempotencyKey: text85("idempotency_key").notNull(),
+    expiresAt: timestamp77("expires_at", { withTimezone: true }).notNull(),
+    consumedAt: timestamp77("consumed_at", { withTimezone: true }),
+    consumedByRef: text85("consumed_by_ref"),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationDeploymentAuthorizations = pgTable83(
+var orchestrationDeploymentAuthorizations = pgTable84(
   "orchestration_deployment_authorizations",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
     mergeSha: varchar63("merge_sha", { length: 64 }).notNull(),
     artifactChecksum: varchar63("artifact_checksum", { length: 80 }).notNull(),
     mergeAuthorizationId: uuid4("merge_authorization_id").notNull(),
-    authorizedBy: text84("authorized_by").notNull(),
-    idempotencyKey: text84("idempotency_key").notNull(),
-    expiresAt: timestamp76("expires_at", { withTimezone: true }).notNull(),
-    consumedAt: timestamp76("consumed_at", { withTimezone: true }),
-    consumedByRef: text84("consumed_by_ref"),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    authorizedBy: text85("authorized_by").notNull(),
+    idempotencyKey: text85("idempotency_key").notNull(),
+    expiresAt: timestamp77("expires_at", { withTimezone: true }).notNull(),
+    consumedAt: timestamp77("consumed_at", { withTimezone: true }),
+    consumedByRef: text85("consumed_by_ref"),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationDeploymentRequests = pgTable83(
+var orchestrationDeploymentRequests = pgTable84(
   "orchestration_deployment_requests",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
     authorizationId: uuid4("authorization_id").notNull(),
     expectedMergeSha: varchar63("expected_merge_sha", { length: 64 }).notNull(),
     artifactChecksum: varchar63("artifact_checksum", { length: 80 }).notNull(),
     state: varchar63("state", { length: 12 }).$type().notNull().default("live"),
-    voidReason: text84("void_reason"),
-    releaseId: text84("release_id"),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    voidReason: text85("void_reason"),
+    releaseId: text85("release_id"),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationExecutionApprovals = pgTable83(
+var orchestrationExecutionApprovals = pgTable84(
   "orchestration_execution_approvals",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     installationId: uuid4("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
-    idempotencyKey: text84("idempotency_key").notNull(),
-    approvedBy: text84("approved_by").notNull(),
+    idempotencyKey: text85("idempotency_key").notNull(),
+    approvedBy: text85("approved_by").notNull(),
     targetKind: varchar63("target_kind", { length: 32 }).notNull().default("component-variant"),
-    targetId: text84("target_id").notNull(),
-    targetBindingDigest: text84("target_binding_digest").notNull(),
+    targetId: text85("target_id").notNull(),
+    targetBindingDigest: text85("target_binding_digest").notNull(),
     repositoryId: bigint5("repository_id", { mode: "number" }),
     baseBranch: varchar63("base_branch", { length: 255 }),
     baseSha: varchar63("base_sha", { length: 64 }),
     /** Set when the approval is spent. 0274 grants UPDATE on THESE TWO COLUMNS ONLY, so every
      *  other field on a row a human signed stays as unwritable as it was before. */
-    consumedAt: timestamp76("consumed_at", { withTimezone: true }),
+    consumedAt: timestamp77("consumed_at", { withTimezone: true }),
     consumedByAttemptId: uuid4("consumed_by_attempt_id"),
-    pathPolicy: jsonb44("path_policy").$type().notNull().default({}),
-    operationClasses: jsonb44("operation_classes").$type().notNull().default([]),
-    mutationBudget: jsonb44("mutation_budget").$type().notNull().default({}),
-    planDigest: text84("plan_digest").notNull(),
-    capabilityDigest: text84("capability_digest").notNull(),
-    validationDigest: text84("validation_digest").notNull(),
-    expiresAt: timestamp76("expires_at", { withTimezone: true }).notNull(),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow()
+    pathPolicy: jsonb46("path_policy").$type().notNull().default({}),
+    operationClasses: jsonb46("operation_classes").$type().notNull().default([]),
+    mutationBudget: jsonb46("mutation_budget").$type().notNull().default({}),
+    planDigest: text85("plan_digest").notNull(),
+    capabilityDigest: text85("capability_digest").notNull(),
+    validationDigest: text85("validation_digest").notNull(),
+    expiresAt: timestamp77("expires_at", { withTimezone: true }).notNull(),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationRuns.id,
@@ -25670,7 +25745,7 @@ var orchestrationExecutionApprovals = pgTable83(
       ],
       name: "orchestration_execution_approvals_run_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.attemptId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationImplementationAttempts.id,
@@ -25679,7 +25754,7 @@ var orchestrationExecutionApprovals = pgTable83(
       ],
       name: "orchestration_execution_approvals_attempt_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.installationId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationExecutorInstallations.id,
@@ -25695,7 +25770,7 @@ var orchestrationExecutionApprovals = pgTable83(
     // One approval per attempt. A running implementation never introduces a second approval; a
     // changed binding requires a NEW attempt, which is what makes the authority auditable.
     unique7("orchestration_execution_approvals_attempt_unique").on(table.attemptId),
-    index71("orchestration_execution_approvals_run_created_idx").on(table.runId, table.createdAt),
+    index72("orchestration_execution_approvals_run_created_idx").on(table.runId, table.createdAt),
     check5(
       "orchestration_execution_approvals_idempotency_key_check",
       sql21`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
@@ -25742,26 +25817,26 @@ var orchestrationExecutionApprovals = pgTable83(
     )
   ]
 );
-var orchestrationExecutorLeases = pgTable83(
+var orchestrationExecutorLeases = pgTable84(
   "orchestration_executor_leases",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     sessionId: uuid4("session_id").notNull().references(() => orchestrationExecutorSessions.id, { onDelete: "cascade" }),
-    leaseEpoch: integer40("lease_epoch").notNull().default(1),
+    leaseEpoch: integer41("lease_epoch").notNull().default(1),
     state: varchar63("state", { length: 20 }).$type().notNull().default("active"),
-    heartbeatDeadline: timestamp76("heartbeat_deadline", { withTimezone: true }).notNull(),
-    acquiredAt: timestamp76("acquired_at", { withTimezone: true }).notNull().defaultNow(),
-    releasedAt: timestamp76("released_at", { withTimezone: true }),
+    heartbeatDeadline: timestamp77("heartbeat_deadline", { withTimezone: true }).notNull(),
+    acquiredAt: timestamp77("acquired_at", { withTimezone: true }).notNull().defaultNow(),
+    releasedAt: timestamp77("released_at", { withTimezone: true }),
     releaseReason: varchar63("release_reason", { length: 32 }).$type(),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationRuns.id,
@@ -25770,7 +25845,7 @@ var orchestrationExecutorLeases = pgTable83(
       ],
       name: "orchestration_executor_leases_run_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.attemptId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationImplementationAttempts.id,
@@ -25779,7 +25854,7 @@ var orchestrationExecutorLeases = pgTable83(
       ],
       name: "orchestration_executor_leases_attempt_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.sessionId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationExecutorSessions.id,
@@ -25796,7 +25871,7 @@ var orchestrationExecutorLeases = pgTable83(
     unique7("orchestration_executor_leases_epoch_unique").on(table.attemptId, table.leaseEpoch),
     // Plan invariant 6, enforced in the database: a run has at most one active executor lease.
     uniqueIndex37("orchestration_executor_leases_one_active_per_run").on(table.runId).where(sql21`${table.state} = 'active'`),
-    index71("orchestration_executor_leases_deadline_idx").on(table.heartbeatDeadline).where(sql21`${table.state} = 'active'`),
+    index72("orchestration_executor_leases_deadline_idx").on(table.heartbeatDeadline).where(sql21`${table.state} = 'active'`),
     check5("orchestration_executor_leases_epoch_check", sql21`${table.leaseEpoch} >= 1`),
     check5(
       "orchestration_executor_leases_state_check",
@@ -25816,35 +25891,35 @@ var orchestrationExecutorLeases = pgTable83(
     )
   ]
 );
-var orchestrationExecutorCommands = pgTable83(
+var orchestrationExecutorCommands = pgTable84(
   "orchestration_executor_commands",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     leaseId: uuid4("lease_id").references(() => orchestrationExecutorLeases.id, {
       onDelete: "set null"
     }),
-    leaseEpoch: integer40("lease_epoch"),
+    leaseEpoch: integer41("lease_epoch"),
     approvalId: uuid4("approval_id").references(() => orchestrationExecutionApprovals.id, {
       onDelete: "set null"
     }),
     sequence: bigint5("sequence", { mode: "number" }).notNull(),
     kind: varchar63("kind", { length: 32 }).$type().notNull(),
-    idempotencyKey: text84("idempotency_key").notNull(),
-    expectedRunVersion: integer40("expected_run_version").notNull(),
-    payload: jsonb44("payload").$type().notNull().default({}),
+    idempotencyKey: text85("idempotency_key").notNull(),
+    expectedRunVersion: integer41("expected_run_version").notNull(),
+    payload: jsonb46("payload").$type().notNull().default({}),
     payloadDigest: varchar63("payload_digest", { length: 71 }).generatedAlwaysAs(
       sql21`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
     ),
-    deliveredAt: timestamp76("delivered_at", { withTimezone: true }),
-    acknowledgedAt: timestamp76("acknowledged_at", { withTimezone: true }),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow()
+    deliveredAt: timestamp77("delivered_at", { withTimezone: true }),
+    acknowledgedAt: timestamp77("acknowledged_at", { withTimezone: true }),
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationRuns.id,
@@ -25853,7 +25928,7 @@ var orchestrationExecutorCommands = pgTable83(
       ],
       name: "orchestration_executor_commands_run_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.attemptId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationImplementationAttempts.id,
@@ -25867,9 +25942,9 @@ var orchestrationExecutorCommands = pgTable83(
       table.runId,
       table.idempotencyKey
     ),
-    index71("orchestration_executor_commands_run_sequence_idx").on(table.runId, table.sequence),
+    index72("orchestration_executor_commands_run_sequence_idx").on(table.runId, table.sequence),
     // The long-poll cursor read: unacknowledged commands for a run, in order.
-    index71("orchestration_executor_commands_pending_idx").on(table.runId, table.sequence).where(sql21`${table.acknowledgedAt} IS NULL`),
+    index72("orchestration_executor_commands_pending_idx").on(table.runId, table.sequence).where(sql21`${table.acknowledgedAt} IS NULL`),
     check5("orchestration_executor_commands_sequence_check", sql21`${table.sequence} >= 1`),
     check5(
       "orchestration_executor_commands_kind_check",
@@ -25899,28 +25974,28 @@ var orchestrationExecutorCommands = pgTable83(
   ]
 );
 var PATCH_OPERATIONS = ["create", "update", "delete"];
-var orchestrationPatchManifests = pgTable83(
+var orchestrationPatchManifests = pgTable84(
   "orchestration_patch_manifests",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     approvalId: uuid4("approval_id").references(() => orchestrationExecutionApprovals.id, {
       onDelete: "set null"
     }),
-    sequence: integer40("sequence").notNull(),
-    path: text84("path").notNull(),
+    sequence: integer41("sequence").notNull(),
+    path: text85("path").notNull(),
     operation: varchar63("operation", { length: 16 }).$type().notNull(),
     fileMode: varchar63("file_mode", { length: 6 }).notNull().default("100644"),
     expectedBefore: varchar63("expected_before", { length: 64 }),
     resultingBlobSha: varchar63("resulting_blob_sha", { length: 64 }),
     byteCount: bigint5("byte_count", { mode: "number" }).notNull().default(0),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationRuns.id,
@@ -25929,7 +26004,7 @@ var orchestrationPatchManifests = pgTable83(
       ],
       name: "orchestration_patch_manifests_run_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.attemptId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationImplementationAttempts.id,
@@ -25940,7 +26015,7 @@ var orchestrationPatchManifests = pgTable83(
     }).onDelete("cascade"),
     unique7("orchestration_patch_manifests_sequence_unique").on(table.attemptId, table.sequence),
     unique7("orchestration_patch_manifests_path_unique").on(table.attemptId, table.path),
-    index71("orchestration_patch_manifests_attempt_sequence_idx").on(table.attemptId, table.sequence),
+    index72("orchestration_patch_manifests_attempt_sequence_idx").on(table.attemptId, table.sequence),
     check5("orchestration_patch_manifests_sequence_check", sql21`${table.sequence} >= 1`),
     check5(
       "orchestration_patch_manifests_operation_check",
@@ -25966,19 +26041,19 @@ var orchestrationPatchManifests = pgTable83(
     check5("orchestration_patch_manifests_byte_count_check", sql21`${table.byteCount} >= 0`)
   ]
 );
-var orchestrationPullRequestReceipts = pgTable83(
+var orchestrationPullRequestReceipts = pgTable84(
   "orchestration_pull_request_receipts",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text84("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text84("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     repositoryId: bigint5("repository_id", { mode: "number" }).notNull(),
     installationId: bigint5("installation_id", { mode: "number" }),
     pullRequestId: bigint5("pull_request_id", { mode: "number" }).notNull(),
-    pullRequestNumber: integer40("pull_request_number").notNull(),
-    pullRequestUrl: text84("pull_request_url").notNull(),
+    pullRequestNumber: integer41("pull_request_number").notNull(),
+    pullRequestUrl: text85("pull_request_url").notNull(),
     baseRef: varchar63("base_ref", { length: 255 }).notNull(),
     baseSha: varchar63("base_sha", { length: 64 }).notNull(),
     headRef: varchar63("head_ref", { length: 255 }).notNull(),
@@ -25986,13 +26061,13 @@ var orchestrationPullRequestReceipts = pgTable83(
     /** True when BetterCMS created and owns the head branch. A head we do not own is observable
      *  but never advanceable by the adapter. */
     branchOwned: boolean29("branch_owned").notNull().default(true),
-    generation: integer40("generation").notNull().default(1),
+    generation: integer41("generation").notNull().default(1),
     isDraft: boolean29("is_draft").notNull().default(true),
-    createdAt: timestamp76("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp76("updated_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp77("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    foreignKey7({
+    foreignKey8({
       columns: [table.runId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationRuns.id,
@@ -26001,7 +26076,7 @@ var orchestrationPullRequestReceipts = pgTable83(
       ],
       name: "orchestration_pull_request_receipts_run_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey7({
+    foreignKey8({
       columns: [table.attemptId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationImplementationAttempts.id,
@@ -26014,11 +26089,11 @@ var orchestrationPullRequestReceipts = pgTable83(
       table.attemptId,
       table.generation
     ),
-    index71("orchestration_pull_request_receipts_attempt_generation_idx").on(
+    index72("orchestration_pull_request_receipts_attempt_generation_idx").on(
       table.attemptId,
       table.generation
     ),
-    index71("orchestration_pull_request_receipts_head_idx").on(table.repositoryId, table.headSha),
+    index72("orchestration_pull_request_receipts_head_idx").on(table.repositoryId, table.headSha),
     check5("orchestration_pull_request_receipts_generation_check", sql21`${table.generation} >= 1`),
     check5("orchestration_pull_request_receipts_number_check", sql21`${table.pullRequestNumber} >= 1`),
     check5(
@@ -26047,24 +26122,24 @@ var orchestrationPullRequestReceipts = pgTable83(
 
 // src/schema/conversion_proposals.ts
 import { sql as sql22 } from "drizzle-orm";
-import { check as check6, foreignKey as foreignKey8, index as index72, integer as integer41, jsonb as jsonb45, pgTable as pgTable84, text as text85, timestamp as timestamp77, unique as unique8, uuid as uuid5, varchar as varchar64 } from "drizzle-orm/pg-core";
+import { check as check6, foreignKey as foreignKey9, index as index73, integer as integer42, jsonb as jsonb47, pgTable as pgTable85, text as text86, timestamp as timestamp78, unique as unique8, uuid as uuid5, varchar as varchar64 } from "drizzle-orm/pg-core";
 var CONVERSION_PROPOSAL_STATUSES = ["draft", "approved", "superseded"];
-var conversionProposals = pgTable84(
+var conversionProposals = pgTable85(
   "conversion_proposals",
   {
     id: uuid5("id").primaryKey().defaultRandom(),
-    workspaceId: text85("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text85("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text86("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text86("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     /** The plan snapshot holding the proposed file contents. */
-    planDigest: text85("plan_digest").notNull().references(() => orchestrationPlanSnapshots.planDigest),
+    planDigest: text86("plan_digest").notNull().references(() => orchestrationPlanSnapshots.planDigest),
     /** sha256 of the canonical brief — what the CMS held when this was proposed. */
-    briefDigest: text85("brief_digest").notNull(),
+    briefDigest: text86("brief_digest").notNull(),
     baseHeadOid: varchar64("base_head_oid", { length: 64 }).notNull(),
-    baseBranch: text85("base_branch").notNull(),
+    baseBranch: text86("base_branch").notNull(),
     /** Brief paths whose `original` was not found in any source file. */
-    unlocated: jsonb45("unlocated").notNull().default(sql22`'[]'::jsonb`),
+    unlocated: jsonb47("unlocated").notNull().default(sql22`'[]'::jsonb`),
     /** Files that matched a brief original but fell outside the acquisition caps. */
-    omittedByCap: jsonb45("omitted_by_cap").notNull().default(sql22`'[]'::jsonb`),
+    omittedByCap: jsonb47("omitted_by_cap").notNull().default(sql22`'[]'::jsonb`),
     /**
      * The codemod's receipt (migration 0296) — every path it bound, and every one it could not.
      *
@@ -26072,27 +26147,27 @@ var conversionProposals = pgTable84(
      * pending list for those, which is exactly the silent "nothing left to do" this lane refuses.
      * Informative: `proposeConversion` re-derives every claim it acts on from the proposed files.
      */
-    receipt: jsonb45("receipt"),
-    status: text85("status").notNull().default("draft"),
-    version: integer41("version").notNull().default(1),
-    idempotencyKey: text85("idempotency_key").notNull(),
+    receipt: jsonb47("receipt"),
+    status: text86("status").notNull().default("draft"),
+    version: integer42("version").notNull().default(1),
+    idempotencyKey: text86("idempotency_key").notNull(),
     /**
      * The key of the transition that put this row in its CURRENT terminal state — the approve, or
      * the manual supersede. Separate from `idempotencyKey`, which belongs to the create: a client
      * retrying one act must never be answered with the result of another.
      */
-    transitionIdempotencyKey: text85("transition_idempotency_key"),
-    createdBy: text85("created_by").notNull(),
-    createdAt: timestamp77("created_at", { withTimezone: true }).notNull().defaultNow(),
-    approvedBy: text85("approved_by"),
-    approvedAt: timestamp77("approved_at", { withTimezone: true }),
-    supersededAt: timestamp77("superseded_at", { withTimezone: true }),
-    supersededReason: text85("superseded_reason")
+    transitionIdempotencyKey: text86("transition_idempotency_key"),
+    createdBy: text86("created_by").notNull(),
+    createdAt: timestamp78("created_at", { withTimezone: true }).notNull().defaultNow(),
+    approvedBy: text86("approved_by"),
+    approvedAt: timestamp78("approved_at", { withTimezone: true }),
+    supersededAt: timestamp78("superseded_at", { withTimezone: true }),
+    supersededReason: text86("superseded_reason")
   },
   (table) => [
-    index72("conversion_proposals_project_idx").on(table.workspaceId, table.projectId, table.createdAt),
+    index73("conversion_proposals_project_idx").on(table.workspaceId, table.projectId, table.createdAt),
     unique8("conversion_proposals_idempotency_unique").on(table.projectId, table.idempotencyKey),
-    foreignKey8({
+    foreignKey9({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "conversion_proposals_project_workspace_fkey"
@@ -26108,30 +26183,30 @@ var conversionProposals = pgTable84(
 
 // src/schema/conversion_briefs_issued.ts
 import { sql as sql23 } from "drizzle-orm";
-import { check as check7, foreignKey as foreignKey9, index as index73, jsonb as jsonb46, pgTable as pgTable85, text as text86, timestamp as timestamp78, unique as unique9, uuid as uuid6 } from "drizzle-orm/pg-core";
-var conversionBriefsIssued = pgTable85(
+import { check as check7, foreignKey as foreignKey10, index as index74, jsonb as jsonb48, pgTable as pgTable86, text as text87, timestamp as timestamp79, unique as unique9, uuid as uuid6 } from "drizzle-orm/pg-core";
+var conversionBriefsIssued = pgTable86(
   "conversion_briefs_issued",
   {
     id: uuid6("id").primaryKey().defaultRandom(),
-    workspaceId: text86("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text86("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text87("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text87("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     /** sha256 of the canonical brief — `briefDigest`, computed identically by the codemod. */
-    briefDigest: text86("brief_digest").notNull(),
+    briefDigest: text87("brief_digest").notNull(),
     /** `[{ route, scope, path, kind, locator? }]` — every bindable path the brief listed. */
-    paths: jsonb46("paths").notNull().default(sql23`'[]'::jsonb`),
+    paths: jsonb48("paths").notNull().default(sql23`'[]'::jsonb`),
     /**
      * The codemod's account of the run against THIS digest (`submit_conversion_receipt`): which
      * paths it rewrote, which it could not, and why. Null until one is submitted — a hand
      * conversion never submits one and still counts toward coverage.
      */
-    receipt: jsonb46("receipt"),
+    receipt: jsonb48("receipt"),
     /** The LAST time this pin was issued. What a retention sweep keys on. */
-    issuedAt: timestamp78("issued_at", { withTimezone: true }).notNull().defaultNow()
+    issuedAt: timestamp79("issued_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    index73("conversion_briefs_issued_project_issued_idx").on(table.projectId, table.issuedAt),
+    index74("conversion_briefs_issued_project_issued_idx").on(table.projectId, table.issuedAt),
     unique9("conversion_briefs_issued_digest_unique").on(table.projectId, table.briefDigest),
-    foreignKey9({
+    foreignKey10({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "conversion_briefs_issued_project_workspace_fkey"
@@ -26146,13 +26221,13 @@ import { sql as sql24 } from "drizzle-orm";
 import {
   bigint as bigint6,
   check as check8,
-  foreignKey as foreignKey10,
-  index as index74,
-  integer as integer42,
-  jsonb as jsonb47,
-  pgTable as pgTable86,
-  text as text87,
-  timestamp as timestamp79,
+  foreignKey as foreignKey11,
+  index as index75,
+  integer as integer43,
+  jsonb as jsonb49,
+  pgTable as pgTable87,
+  text as text88,
+  timestamp as timestamp80,
   unique as unique10,
   uniqueIndex as uniqueIndex38,
   uuid as uuid7,
@@ -26169,24 +26244,24 @@ var VALIDATION_ENVELOPE_STATUSES = [
   "cancelled"
 ];
 var VALIDATION_LIVE_STATUSES = ["queued", "dispatched", "action_required"];
-var orchestrationValidationEnvelopes = pgTable86(
+var orchestrationValidationEnvelopes = pgTable87(
   "orchestration_validation_envelopes",
   {
     id: uuid7("id").primaryKey().defaultRandom(),
-    workspaceId: text87("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text87("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text88("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text88("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid7("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid7("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     /** Null until a receipt writer exists (Phase 6). The head below is pinned regardless. */
     receiptId: uuid7("receipt_id").references(() => orchestrationPullRequestReceipts.id, {
       onDelete: "set null"
     }),
-    receiptGeneration: integer42("receipt_generation").notNull().default(1),
+    receiptGeneration: integer43("receipt_generation").notNull().default(1),
     // The pinned tuple. Every field here is compared against returned evidence, and each mismatch
     // has its own error code — "wrong repository" and "wrong head" are different recoveries.
     repositoryId: bigint6("repository_id", { mode: "number" }).notNull(),
     pullRequestId: bigint6("pull_request_id", { mode: "number" }).notNull(),
-    pullRequestNumber: integer42("pull_request_number").notNull(),
+    pullRequestNumber: integer43("pull_request_number").notNull(),
     /** The exact commit this validation is about. A validation proves nothing about any other. */
     headSha: varchar65("head_sha", { length: 64 }).notNull(),
     baseSha: varchar65("base_sha", { length: 64 }).notNull(),
@@ -26195,25 +26270,25 @@ var orchestrationValidationEnvelopes = pgTable86(
     brandContractHash: varchar65("brand_contract_hash", { length: 64 }).notNull(),
     baselineDigest: varchar65("baseline_digest", { length: 71 }).notNull(),
     toolchainHash: varchar65("toolchain_hash", { length: 64 }).notNull(),
-    validatorVersion: text87("validator_version").notNull(),
+    validatorVersion: text88("validator_version").notNull(),
     workflowSha256: varchar65("workflow_sha256", { length: 64 }).notNull(),
     /** Digest only. The single-use credential itself is handed to the validator and never stored. */
     nonceHash: varchar65("nonce_hash", { length: 64 }).notNull(),
-    nonceExpiresAt: timestamp79("nonce_expires_at", { withTimezone: true }).notNull(),
-    nonceConsumedAt: timestamp79("nonce_consumed_at", { withTimezone: true }),
+    nonceExpiresAt: timestamp80("nonce_expires_at", { withTimezone: true }).notNull(),
+    nonceConsumedAt: timestamp80("nonce_consumed_at", { withTimezone: true }),
     status: varchar65("status", { length: 20 }).notNull().default("queued"),
-    errorCode: text87("error_code"),
-    errorMessage: text87("error_message"),
+    errorCode: text88("error_code"),
+    errorMessage: text88("error_message"),
     /** Composite-FK'd to (evidence.id, evidence.envelope_id) in 0273, so an envelope cannot be
      *  marked passed while pointing at a DIFFERENT envelope's evidence. */
     evidenceId: uuid7("evidence_id"),
     /** Written on pass, read by nothing. The unlock that consumes it is a later phase. */
     attestationDigest: varchar65("attestation_digest", { length: 71 }),
-    dispatchedAt: timestamp79("dispatched_at", { withTimezone: true }),
+    dispatchedAt: timestamp80("dispatched_at", { withTimezone: true }),
     /** A retry is a NEW row with a NEW nonce, linked back — never a status reset on this one. */
     retryOf: uuid7("retry_of"),
-    createdAt: timestamp79("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp79("updated_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp80("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp80("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     unique10("orchestration_validation_envelopes_scope_unique").on(
@@ -26221,7 +26296,7 @@ var orchestrationValidationEnvelopes = pgTable86(
       table.workspaceId,
       table.projectId
     ),
-    foreignKey10({
+    foreignKey11({
       columns: [table.attemptId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationImplementationAttempts.id,
@@ -26230,7 +26305,7 @@ var orchestrationValidationEnvelopes = pgTable86(
       ],
       name: "orchestration_validation_envelopes_attempt_scope_fkey"
     }).onDelete("cascade"),
-    foreignKey10({
+    foreignKey11({
       columns: [table.retryOf],
       foreignColumns: [table.id],
       name: "orchestration_validation_envelopes_retry_of_fkey"
@@ -26238,11 +26313,11 @@ var orchestrationValidationEnvelopes = pgTable86(
     // One live envelope per (attempt, head): two validators can never both be authoritative for
     // the same commit. The index arbitrates, so no read-then-write can lose the race.
     uniqueIndex38("orchestration_validation_envelopes_one_live_per_head").on(table.attemptId, table.headSha).where(sql24`status IN ('queued', 'dispatched', 'action_required')`),
-    index74("orchestration_validation_envelopes_attempt_idx").on(
+    index75("orchestration_validation_envelopes_attempt_idx").on(
       table.attemptId,
       table.createdAt.desc()
     ),
-    index74("orchestration_validation_envelopes_sweep_idx").on(table.status, table.nonceExpiresAt).where(sql24`status IN ('queued', 'dispatched')`),
+    index75("orchestration_validation_envelopes_sweep_idx").on(table.status, table.nonceExpiresAt).where(sql24`status IN ('queued', 'dispatched')`),
     check8(
       "orchestration_validation_envelopes_status_check",
       sql24`${table.status} IN ('queued', 'dispatched', 'action_required', 'passed', 'failed', 'superseded', 'timed_out', 'cancelled')`
@@ -26258,28 +26333,28 @@ var orchestrationValidationEnvelopes = pgTable86(
     )
   ]
 );
-var orchestrationValidationEvidence = pgTable86(
+var orchestrationValidationEvidence = pgTable87(
   "orchestration_validation_evidence",
   {
     id: uuid7("id").primaryKey().defaultRandom(),
-    workspaceId: text87("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text87("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text88("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text88("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid7("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid7("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     envelopeId: uuid7("envelope_id").notNull().references(() => orchestrationValidationEnvelopes.id, { onDelete: "cascade" }),
     headSha: varchar65("head_sha", { length: 64 }).notNull(),
     evidenceDigest: varchar65("evidence_digest", { length: 71 }).notNull(),
     artifactDigest: varchar65("artifact_digest", { length: 71 }).notNull(),
-    validatorVersion: text87("validator_version").notNull(),
+    validatorVersion: text88("validator_version").notNull(),
     /** The BrandKit contract this evidence is filed under. 0273 ties it to
      *  `checks->brandKit->contractHash`, so a payload cannot claim a different one. Comparing it
      *  against the ENVELOPE's hash is an ingest check — a CHECK cannot reach another table. */
     brandContractHash: varchar65("brand_contract_hash", { length: 64 }).notNull(),
     status: varchar65("status", { length: 10 }).notNull(),
     /** brandKit / runtime / visual. The shape is enforced by CHECK in 0273, not by the writer. */
-    checks: jsonb47("checks").notNull(),
-    createdBy: text87("created_by"),
-    createdAt: timestamp79("created_at", { withTimezone: true }).notNull().defaultNow()
+    checks: jsonb49("checks").notNull(),
+    createdBy: text88("created_by"),
+    createdAt: timestamp80("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     unique10("orchestration_validation_evidence_scope_unique").on(
@@ -26287,7 +26362,7 @@ var orchestrationValidationEvidence = pgTable86(
       table.workspaceId,
       table.projectId
     ),
-    foreignKey10({
+    foreignKey11({
       columns: [table.envelopeId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationValidationEnvelopes.id,
@@ -26306,7 +26381,7 @@ var orchestrationValidationEvidence = pgTable86(
       table.attemptId,
       table.evidenceDigest
     ),
-    index74("orchestration_validation_evidence_envelope_idx").on(table.envelopeId),
+    index75("orchestration_validation_evidence_envelope_idx").on(table.envelopeId),
     check8(
       "orchestration_validation_evidence_status_check",
       sql24`${table.status} IN ('passed', 'failed')`
@@ -26316,27 +26391,27 @@ var orchestrationValidationEvidence = pgTable86(
 
 // src/schema/orchestration_executor_grants.ts
 import { sql as sql25 } from "drizzle-orm";
-import { check as check9, foreignKey as foreignKey11, index as index75, integer as integer43, pgTable as pgTable87, text as text88, timestamp as timestamp80, unique as unique11, uniqueIndex as uniqueIndex39, uuid as uuid8, varchar as varchar66 } from "drizzle-orm/pg-core";
+import { check as check9, foreignKey as foreignKey12, index as index76, integer as integer44, pgTable as pgTable88, text as text89, timestamp as timestamp81, unique as unique11, uniqueIndex as uniqueIndex39, uuid as uuid8, varchar as varchar66 } from "drizzle-orm/pg-core";
 var EXECUTOR_GRANT_STATUSES = ["active", "revoked", "expired"];
-var orchestrationExecutorGrants = pgTable87(
+var orchestrationExecutorGrants = pgTable88(
   "orchestration_executor_grants",
   {
-    id: text88("id").primaryKey().default(sql25`gen_random_uuid()`),
-    workspaceId: text88("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text88("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    id: text89("id").primaryKey().default(sql25`gen_random_uuid()`),
+    workspaceId: text89("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text89("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     installationId: uuid8("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
     /** Digest only. The credential is returned once at mint and never stored. */
     credentialHash: varchar66("credential_hash", { length: 64 }).notNull(),
-    credentialAudience: text88("credential_audience").notNull(),
-    credentialExpiresAt: timestamp80("credential_expires_at", { withTimezone: true }).notNull(),
+    credentialAudience: text89("credential_audience").notNull(),
+    credentialExpiresAt: timestamp81("credential_expires_at", { withTimezone: true }).notNull(),
     /** The epoch this credential is valid for. A fenced session's credential dies before it expires. */
-    sessionEpoch: integer43("session_epoch").notNull(),
+    sessionEpoch: integer44("session_epoch").notNull(),
     status: varchar66("status", { length: 16 }).notNull().default("active"),
-    revokedAt: timestamp80("revoked_at", { withTimezone: true }),
-    revokedBy: text88("revoked_by"),
-    createdBy: text88("created_by"),
-    createdAt: timestamp80("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp80("updated_at", { withTimezone: true }).notNull().defaultNow()
+    revokedAt: timestamp81("revoked_at", { withTimezone: true }),
+    revokedBy: text89("revoked_by"),
+    createdBy: text89("created_by"),
+    createdAt: timestamp81("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp81("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     unique11("orchestration_executor_grants_scope_unique").on(
@@ -26344,7 +26419,7 @@ var orchestrationExecutorGrants = pgTable87(
       table.workspaceId,
       table.projectId
     ),
-    foreignKey11({
+    foreignKey12({
       columns: [table.installationId, table.workspaceId, table.projectId],
       foreignColumns: [
         orchestrationExecutorInstallations.id,
@@ -26356,7 +26431,7 @@ var orchestrationExecutorGrants = pgTable87(
     // One live credential per installation. Two would mean two processes can each present a valid
     // one, and the exclusion argument collapses before the lease layer is reached.
     uniqueIndex39("orchestration_executor_grants_one_active_per_installation").on(table.installationId).where(sql25`status = 'active'`),
-    index75("orchestration_executor_grants_credential_idx").on(table.workspaceId, table.credentialHash).where(sql25`status = 'active'`),
+    index76("orchestration_executor_grants_credential_idx").on(table.workspaceId, table.credentialHash).where(sql25`status = 'active'`),
     check9(
       "orchestration_executor_grants_status_check",
       sql25`${table.status} IN ('active', 'revoked', 'expired')`
@@ -26369,27 +26444,27 @@ var orchestrationExecutorGrants = pgTable87(
 );
 
 // src/schema/component_presets.ts
-import { pgTable as pgTable88, text as text89, varchar as varchar67, timestamp as timestamp81, jsonb as jsonb48, integer as integer44, index as index76, uniqueIndex as uniqueIndex40 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable89, text as text90, varchar as varchar67, timestamp as timestamp82, jsonb as jsonb50, integer as integer45, index as index77, uniqueIndex as uniqueIndex40 } from "drizzle-orm/pg-core";
 import { relations as relations16 } from "drizzle-orm";
-var componentPresets = pgTable88(
+var componentPresets = pgTable89(
   "component_presets",
   {
-    id: text89("id").primaryKey(),
-    workspaceId: text89("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    componentId: text89("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    id: text90("id").primaryKey(),
+    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    componentId: text90("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
     name: varchar67("name", { length: 255 }).notNull(),
     /** ^[a-z0-9-]+$, unique per component — stable across renames. */
     slug: varchar67("slug", { length: 255 }).notNull(),
     /** Prop key → value. Validated against the component's `props` on every write. */
-    values: jsonb48("values").$type().notNull().default({}),
-    position: integer44("position").notNull().default(0),
-    createdAt: timestamp81("created_at").notNull().defaultNow(),
-    updatedAt: timestamp81("updated_at").notNull().defaultNow(),
-    createdBy: text89("created_by"),
-    updatedBy: text89("updated_by")
+    values: jsonb50("values").$type().notNull().default({}),
+    position: integer45("position").notNull().default(0),
+    createdAt: timestamp82("created_at").notNull().defaultNow(),
+    updatedAt: timestamp82("updated_at").notNull().defaultNow(),
+    createdBy: text90("created_by"),
+    updatedBy: text90("updated_by")
   },
   (t) => [
-    index76("component_presets_component_position_idx").on(t.componentId, t.position, t.createdAt, t.id),
+    index77("component_presets_component_position_idx").on(t.componentId, t.position, t.createdAt, t.id),
     uniqueIndex40("component_presets_component_slug_key").on(t.componentId, t.slug)
   ]
 );
@@ -26402,13 +26477,13 @@ var componentPresetsRelations = relations16(componentPresets, ({ one }) => ({
 
 // src/schema/section_zones.ts
 import {
-  foreignKey as foreignKey12,
-  index as index77,
-  integer as integer45,
-  jsonb as jsonb49,
-  pgTable as pgTable89,
-  text as text90,
-  timestamp as timestamp82,
+  foreignKey as foreignKey13,
+  index as index78,
+  integer as integer46,
+  jsonb as jsonb51,
+  pgTable as pgTable90,
+  text as text91,
+  timestamp as timestamp83,
   unique as unique12,
   uniqueIndex as uniqueIndex41,
   varchar as varchar68
@@ -26422,50 +26497,50 @@ var SECTION_IMPLEMENTATION_REQUEST_STATUSES = [
   "passed",
   "failed"
 ];
-var sectionDefinitions = pgTable89(
+var sectionDefinitions = pgTable90(
   "section_definitions",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     apiId: varchar68("api_id", { length: 100 }).notNull(),
-    firstPublishedAt: timestamp82("first_published_at"),
-    archivedAt: timestamp82("archived_at"),
+    firstPublishedAt: timestamp83("first_published_at"),
+    archivedAt: timestamp83("archived_at"),
     ...auditColumns
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_definitions_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
     unique12("section_definitions_id_project_unique").on(table.id, table.projectId),
     uniqueIndex41("section_definitions_project_api_id_unique").on(table.projectId, table.apiId),
-    index77("section_definitions_workspace_idx").on(table.workspaceId),
-    index77("section_definitions_project_idx").on(table.projectId)
+    index78("section_definitions_workspace_idx").on(table.workspaceId),
+    index78("section_definitions_project_idx").on(table.projectId)
   ]
 );
-var sectionDefinitionVersions = pgTable89(
+var sectionDefinitionVersions = pgTable90(
   "section_definition_versions",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text90("section_definition_id").notNull(),
-    version: integer45("version").notNull(),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text91("section_definition_id").notNull(),
+    version: integer46("version").notNull(),
     label: varchar68("label", { length: 255 }).notNull(),
-    fields: jsonb49("fields").$type().notNull().default([]),
+    fields: jsonb51("fields").$type().notNull().default([]),
     schemaHash: varchar68("schema_hash", { length: 64 }).notNull(),
-    createdBy: text90("created_by"),
-    createdAt: timestamp82("created_at").notNull().defaultNow()
+    createdBy: text91("created_by"),
+    createdAt: timestamp83("created_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_definition_versions_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.projectId],
       foreignColumns: [sectionDefinitions.id, sectionDefinitions.projectId],
       name: "section_definition_versions_definition_project_fkey"
@@ -26476,63 +26551,63 @@ var sectionDefinitionVersions = pgTable89(
       table.version,
       table.projectId
     ),
-    index77("section_definition_versions_project_idx").on(table.projectId)
+    index78("section_definition_versions_project_idx").on(table.projectId)
   ]
 );
-var sectionZones = pgTable89(
+var sectionZones = pgTable90(
   "section_zones",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     schemaKind: varchar68("schema_kind", { length: 20 }).$type().notNull(),
-    schemaId: text90("schema_id").notNull(),
+    schemaId: text91("schema_id").notNull(),
     fieldKey: varchar68("field_key", { length: 255 }).notNull(),
-    draftRevision: integer45("draft_revision").notNull().default(1),
-    publishedRevision: integer45("published_revision"),
+    draftRevision: integer46("draft_revision").notNull().default(1),
+    publishedRevision: integer46("published_revision"),
     ...auditColumns
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_zones_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
     unique12("section_zones_id_project_unique").on(table.id, table.projectId),
     uniqueIndex41("section_zones_schema_owner_unique").on(table.projectId, table.schemaKind, table.schemaId),
-    index77("section_zones_workspace_idx").on(table.workspaceId)
+    index78("section_zones_workspace_idx").on(table.workspaceId)
   ]
 );
-var sectionZoneAttachments = pgTable89(
+var sectionZoneAttachments = pgTable90(
   "section_zone_attachments",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    zoneId: text90("zone_id").notNull(),
-    sectionDefinitionId: text90("section_definition_id").notNull(),
-    draftVersion: integer45("draft_version").notNull(),
-    publishedVersion: integer45("published_version"),
-    position: integer45("position").notNull().default(0),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    zoneId: text91("zone_id").notNull(),
+    sectionDefinitionId: text91("section_definition_id").notNull(),
+    draftVersion: integer46("draft_version").notNull(),
+    publishedVersion: integer46("published_version"),
+    position: integer46("position").notNull().default(0),
     ...auditColumns
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_zone_attachments_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.zoneId, table.projectId],
       foreignColumns: [sectionZones.id, sectionZones.projectId],
       name: "section_zone_attachments_zone_project_fkey"
     }).onDelete("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.projectId],
       foreignColumns: [sectionDefinitions.id, sectionDefinitions.projectId],
       name: "section_zone_attachments_definition_project_fkey"
     }).onDelete("restrict"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.draftVersion, table.projectId],
       foreignColumns: [
         sectionDefinitionVersions.sectionDefinitionId,
@@ -26541,7 +26616,7 @@ var sectionZoneAttachments = pgTable89(
       ],
       name: "section_zone_attachments_draft_version_fkey"
     }).onDelete("restrict"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.publishedVersion, table.projectId],
       foreignColumns: [
         sectionDefinitionVersions.sectionDefinitionId,
@@ -26551,31 +26626,31 @@ var sectionZoneAttachments = pgTable89(
       name: "section_zone_attachments_published_version_fkey"
     }).onDelete("restrict"),
     uniqueIndex41("section_zone_attachments_zone_definition_unique").on(table.zoneId, table.sectionDefinitionId),
-    index77("section_zone_attachments_zone_position_idx").on(table.zoneId, table.position, table.id)
+    index78("section_zone_attachments_zone_position_idx").on(table.zoneId, table.position, table.id)
   ]
 );
-var sectionManifests = pgTable89(
+var sectionManifests = pgTable90(
   "section_manifests",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text90("section_definition_id").notNull(),
-    sectionVersion: integer45("section_version").notNull(),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text91("section_definition_id").notNull(),
+    sectionVersion: integer46("section_version").notNull(),
     apiId: varchar68("api_id", { length: 100 }).notNull(),
     schemaHash: varchar68("schema_hash", { length: 64 }).notNull(),
     commitSha: varchar68("commit_sha", { length: 64 }).notNull(),
-    manifest: jsonb49("manifest").$type().notNull(),
-    createdBy: text90("created_by"),
-    createdAt: timestamp82("created_at").notNull().defaultNow()
+    manifest: jsonb51("manifest").$type().notNull(),
+    createdBy: text91("created_by"),
+    createdAt: timestamp83("created_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_manifests_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.sectionVersion, table.projectId],
       foreignColumns: [
         sectionDefinitionVersions.sectionDefinitionId,
@@ -26585,34 +26660,34 @@ var sectionManifests = pgTable89(
       name: "section_manifests_definition_version_project_fkey"
     }).onDelete("cascade"),
     unique12("section_manifests_id_project_unique").on(table.id, table.projectId),
-    index77("section_manifests_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
+    index78("section_manifests_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
   ]
 );
-var sectionValidationRuns = pgTable89(
+var sectionValidationRuns = pgTable90(
   "section_validation_runs",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text90("section_definition_id").notNull(),
-    sectionVersion: integer45("section_version").notNull(),
-    manifestId: text90("manifest_id").notNull(),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text91("section_definition_id").notNull(),
+    sectionVersion: integer46("section_version").notNull(),
+    manifestId: text91("manifest_id").notNull(),
     status: varchar68("status", { length: 20 }).$type().notNull(),
     schemaHash: varchar68("schema_hash", { length: 64 }).notNull(),
     commitSha: varchar68("commit_sha", { length: 64 }).notNull(),
     fixtureHash: varchar68("fixture_hash", { length: 64 }).notNull(),
     evidenceDigest: varchar68("evidence_digest", { length: 128 }).notNull(),
-    results: jsonb49("results").$type().notNull(),
-    createdBy: text90("created_by"),
-    createdAt: timestamp82("created_at").notNull().defaultNow()
+    results: jsonb51("results").$type().notNull(),
+    createdBy: text91("created_by"),
+    createdAt: timestamp83("created_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_validation_runs_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.sectionVersion, table.projectId],
       foreignColumns: [
         sectionDefinitionVersions.sectionDefinitionId,
@@ -26621,39 +26696,39 @@ var sectionValidationRuns = pgTable89(
       ],
       name: "section_validation_runs_definition_version_project_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.manifestId, table.projectId],
       foreignColumns: [sectionManifests.id, sectionManifests.projectId],
       name: "section_validation_runs_manifest_project_fkey"
     }).onDelete("restrict"),
     unique12("section_validation_runs_id_project_unique").on(table.id, table.projectId),
-    index77("section_validation_runs_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
+    index78("section_validation_runs_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
   ]
 );
-var sectionVisualApprovals = pgTable89(
+var sectionVisualApprovals = pgTable90(
   "section_visual_approvals",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text90("section_definition_id").notNull(),
-    sectionVersion: integer45("section_version").notNull(),
-    manifestId: text90("manifest_id").notNull(),
-    validationRunId: text90("validation_run_id").notNull(),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text91("section_definition_id").notNull(),
+    sectionVersion: integer46("section_version").notNull(),
+    manifestId: text91("manifest_id").notNull(),
+    validationRunId: text91("validation_run_id").notNull(),
     schemaHash: varchar68("schema_hash", { length: 64 }).notNull(),
     commitSha: varchar68("commit_sha", { length: 64 }).notNull(),
     fixtureHash: varchar68("fixture_hash", { length: 64 }).notNull(),
     evidenceDigest: varchar68("evidence_digest", { length: 128 }).notNull(),
-    approvedBy: text90("approved_by").notNull(),
-    createdAt: timestamp82("created_at").notNull().defaultNow()
+    approvedBy: text91("approved_by").notNull(),
+    createdAt: timestamp83("created_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_visual_approvals_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.sectionVersion, table.projectId],
       foreignColumns: [
         sectionDefinitionVersions.sectionDefinitionId,
@@ -26662,54 +26737,54 @@ var sectionVisualApprovals = pgTable89(
       ],
       name: "section_visual_approvals_definition_version_project_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.manifestId, table.projectId],
       foreignColumns: [sectionManifests.id, sectionManifests.projectId],
       name: "section_visual_approvals_manifest_project_fkey"
     }).onDelete("restrict"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.validationRunId, table.projectId],
       foreignColumns: [sectionValidationRuns.id, sectionValidationRuns.projectId],
       name: "section_visual_approvals_validation_project_fkey"
     }).onDelete("restrict"),
-    index77("section_visual_approvals_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
+    index78("section_visual_approvals_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
   ]
 );
-var sectionImplementationRequests = pgTable89(
+var sectionImplementationRequests = pgTable90(
   "section_implementation_requests",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text90("section_definition_id").notNull(),
-    sectionVersion: integer45("section_version").notNull(),
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text91("section_definition_id").notNull(),
+    sectionVersion: integer46("section_version").notNull(),
     provider: varchar68("provider", { length: 20 }).$type().notNull(),
     status: varchar68("status", { length: 20 }).$type().notNull().default("queued"),
     schemaHash: varchar68("schema_hash", { length: 64 }).notNull(),
     targetCommitSha: varchar68("target_commit_sha", { length: 64 }),
     providerRunId: varchar68("provider_run_id", { length: 255 }),
-    providerRunUrl: text90("provider_run_url"),
-    manifestId: text90("manifest_id"),
-    validationRunId: text90("validation_run_id"),
+    providerRunUrl: text91("provider_run_url"),
+    manifestId: text91("manifest_id"),
+    validationRunId: text91("validation_run_id"),
     /** SHA-256 of the request-scoped GitHub callback bearer. The plaintext is never persisted. */
     callbackTokenHash: varchar68("callback_token_hash", { length: 64 }),
-    requestedBy: text90("requested_by").notNull(),
-    claimedBy: text90("claimed_by"),
+    requestedBy: text91("requested_by").notNull(),
+    claimedBy: text91("claimed_by"),
     errorCode: varchar68("error_code", { length: 100 }),
-    errorMessage: text90("error_message"),
-    dispatchedAt: timestamp82("dispatched_at"),
-    startedAt: timestamp82("started_at"),
-    completedAt: timestamp82("completed_at"),
-    createdAt: timestamp82("created_at").notNull().defaultNow(),
-    updatedAt: timestamp82("updated_at").notNull().defaultNow()
+    errorMessage: text91("error_message"),
+    dispatchedAt: timestamp83("dispatched_at"),
+    startedAt: timestamp83("started_at"),
+    completedAt: timestamp83("completed_at"),
+    createdAt: timestamp83("created_at").notNull().defaultNow(),
+    updatedAt: timestamp83("updated_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_implementation_requests_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.sectionDefinitionId, table.sectionVersion, table.projectId],
       foreignColumns: [
         sectionDefinitionVersions.sectionDefinitionId,
@@ -26718,51 +26793,51 @@ var sectionImplementationRequests = pgTable89(
       ],
       name: "section_implementation_requests_definition_version_project_fkey"
     }).onDelete("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.manifestId, table.projectId],
       foreignColumns: [sectionManifests.id, sectionManifests.projectId],
       name: "section_implementation_requests_manifest_project_fkey"
     }).onDelete("restrict"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.validationRunId, table.projectId],
       foreignColumns: [sectionValidationRuns.id, sectionValidationRuns.projectId],
       name: "section_implementation_requests_validation_project_fkey"
     }).onDelete("restrict"),
     unique12("section_implementation_requests_id_project_unique").on(table.id, table.projectId),
     uniqueIndex41("section_implementation_requests_one_active_unique").on(table.projectId, table.sectionDefinitionId, table.sectionVersion, table.schemaHash).where(sql26`${table.status} IN ('queued', 'dispatching', 'dispatched', 'running')`),
-    index77("section_implementation_requests_project_created_idx").on(table.projectId, table.createdAt)
+    index78("section_implementation_requests_project_created_idx").on(table.projectId, table.createdAt)
   ]
 );
-var sectionZoneReleases = pgTable89(
+var sectionZoneReleases = pgTable90(
   "section_zone_releases",
   {
-    id: text90("id").primaryKey(),
-    workspaceId: text90("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text90("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    zoneId: text90("zone_id").notNull(),
-    revision: integer45("revision").notNull(),
-    snapshot: jsonb49("snapshot").$type().notNull(),
-    publishedBy: text90("published_by").notNull(),
-    publishedAt: timestamp82("published_at").notNull().defaultNow()
+    id: text91("id").primaryKey(),
+    workspaceId: text91("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text91("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    zoneId: text91("zone_id").notNull(),
+    revision: integer46("revision").notNull(),
+    snapshot: jsonb51("snapshot").$type().notNull(),
+    publishedBy: text91("published_by").notNull(),
+    publishedAt: timestamp83("published_at").notNull().defaultNow()
   },
   (table) => [
-    foreignKey12({
+    foreignKey13({
       columns: [table.projectId, table.workspaceId],
       foreignColumns: [projects.id, projects.workspaceId],
       name: "section_zone_releases_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
-    foreignKey12({
+    foreignKey13({
       columns: [table.zoneId, table.projectId],
       foreignColumns: [sectionZones.id, sectionZones.projectId],
       name: "section_zone_releases_zone_project_fkey"
     }).onDelete("cascade"),
     unique12("section_zone_releases_zone_revision_unique").on(table.zoneId, table.revision),
-    index77("section_zone_releases_project_published_idx").on(table.projectId, table.publishedAt)
+    index78("section_zone_releases_project_published_idx").on(table.projectId, table.publishedAt)
   ]
 );
 
 // src/schema/content_locks.ts
-import { check as check10, index as index78, jsonb as jsonb50, pgTable as pgTable90, text as text91, timestamp as timestamp83 } from "drizzle-orm/pg-core";
+import { check as check10, index as index79, jsonb as jsonb52, pgTable as pgTable91, text as text92, timestamp as timestamp84 } from "drizzle-orm/pg-core";
 import { sql as sql27 } from "drizzle-orm";
 var CONTENT_LOCK_TARGET_KINDS = [
   "page",
@@ -26771,30 +26846,30 @@ var CONTENT_LOCK_TARGET_KINDS = [
   "component_definition"
 ];
 var CONTENT_LOCK_MODES = ["all", "agents"];
-var contentLocks = pgTable90(
+var contentLocks = pgTable91(
   "content_locks",
   {
-    id: text91("id").primaryKey(),
-    workspaceId: text91("workspace_id").notNull(),
-    projectId: text91("project_id").notNull(),
-    targetKind: text91("target_kind").$type().notNull(),
-    targetId: text91("target_id").notNull(),
-    blockId: text91("block_id"),
+    id: text92("id").primaryKey(),
+    workspaceId: text92("workspace_id").notNull(),
+    projectId: text92("project_id").notNull(),
+    targetKind: text92("target_kind").$type().notNull(),
+    targetId: text92("target_id").notNull(),
+    blockId: text92("block_id"),
     // Deterministic structural path plus block ancestry captured when the lock is created.
     // Nullable so Wave 5 remains compatible with locks created before this fingerprint existed.
-    blockFingerprint: jsonb50("block_fingerprint").$type(),
-    fieldPath: text91("field_path").array(),
-    mode: text91("mode").$type().notNull().default("all"),
-    reason: text91("reason"),
-    createdBy: text91("created_by").notNull(),
-    createdAt: timestamp83("created_at").notNull().defaultNow(),
-    releasedBy: text91("released_by"),
-    releasedAt: timestamp83("released_at")
+    blockFingerprint: jsonb52("block_fingerprint").$type(),
+    fieldPath: text92("field_path").array(),
+    mode: text92("mode").$type().notNull().default("all"),
+    reason: text92("reason"),
+    createdBy: text92("created_by").notNull(),
+    createdAt: timestamp84("created_at").notNull().defaultNow(),
+    releasedBy: text92("released_by"),
+    releasedAt: timestamp84("released_at")
   },
   (table) => [
-    index78("content_locks_workspace_idx").on(table.workspaceId),
-    index78("content_locks_project_idx").on(table.projectId),
-    index78("content_locks_target_idx").on(table.targetKind, table.targetId).where(sql27`${table.releasedAt} IS NULL`),
+    index79("content_locks_workspace_idx").on(table.workspaceId),
+    index79("content_locks_project_idx").on(table.projectId),
+    index79("content_locks_target_idx").on(table.targetKind, table.targetId).where(sql27`${table.releasedAt} IS NULL`),
     check10("content_locks_target_kind_check", sql27`${table.targetKind} IN ('page','content_entry','singleton_entry','component_definition')`),
     check10("content_locks_mode_check", sql27`${table.mode} IN ('all','agents')`)
     // `content_locks_shape_check` lives in migration 0192 ONLY: it calls
@@ -26810,75 +26885,75 @@ var contentLocks = pgTable90(
 
 // src/schema/project_transfers.ts
 import {
-  pgTable as pgTable91,
-  text as text92,
+  pgTable as pgTable92,
+  text as text93,
   varchar as varchar69,
-  timestamp as timestamp84,
-  index as index79,
+  timestamp as timestamp85,
+  index as index80,
   uniqueIndex as uniqueIndex42
 } from "drizzle-orm/pg-core";
 import { sql as sql28 } from "drizzle-orm";
-var projectTransfers = pgTable91(
+var projectTransfers = pgTable92(
   "project_transfers",
   {
-    id: text92("id").primaryKey(),
+    id: text93("id").primaryKey(),
     // nanoid
-    token: text92("token").notNull(),
+    token: text93("token").notNull(),
     // nanoid(32) — recipient handshake / magic link
     status: varchar69("status", { length: 20 }).notNull().default("pending"),
     // pending | accepted (transient) | completed | declined | cancelled | expired | failed
-    projectId: text92("project_id").notNull(),
+    projectId: text93("project_id").notNull(),
     // FK → projects.id (ON DELETE CASCADE, via migration)
-    fromWorkspaceId: text92("from_workspace_id").notNull(),
+    fromWorkspaceId: text93("from_workspace_id").notNull(),
     // FK → workspaces.id (source)
-    toWorkspaceId: text92("to_workspace_id"),
+    toWorkspaceId: text93("to_workspace_id"),
     // FK → workspaces.id — resolved at accept (null while pending)
-    initiatedBy: text92("initiated_by").notNull(),
+    initiatedBy: text93("initiated_by").notNull(),
     // FK → users.id (source owner)
     recipientEmail: varchar69("recipient_email", { length: 255 }).notNull(),
     // lowercased
-    note: text92("note"),
+    note: text93("note"),
     // optional message to the recipient
-    resolvedAt: timestamp84("resolved_at"),
+    resolvedAt: timestamp85("resolved_at"),
     // set on accept/decline/cancel/expire
-    resolvedBy: text92("resolved_by"),
+    resolvedBy: text93("resolved_by"),
     // FK → users.id (accepter/decliner/canceller)
-    error: text92("error"),
+    error: text93("error"),
     // failure detail when status='failed'
-    expiresAt: timestamp84("expires_at").notNull(),
+    expiresAt: timestamp85("expires_at").notNull(),
     // createdAt + 7d
-    createdAt: timestamp84("created_at").notNull().defaultNow(),
-    updatedAt: timestamp84("updated_at").notNull().defaultNow()
+    createdAt: timestamp85("created_at").notNull().defaultNow(),
+    updatedAt: timestamp85("updated_at").notNull().defaultNow()
   },
   (table) => [
     // At most one OPEN transfer per project. Partial-unique so completed/declined/
     // cancelled/expired/failed rows never wedge a re-initiation.
     uniqueIndex42("project_transfers_one_pending_idx").on(table.projectId).where(sql28`${table.status} = 'pending'`),
     // Recipient inbox lookup (GET /me/transfers by email + status).
-    index79("project_transfers_recipient_idx").on(
+    index80("project_transfers_recipient_idx").on(
       table.recipientEmail,
       table.status
     ),
     // Source-side list (GET /projects/:id/transfers) + cancel.
-    index79("project_transfers_from_ws_idx").on(table.fromWorkspaceId),
-    index79("project_transfers_project_idx").on(table.projectId),
+    index80("project_transfers_from_ws_idx").on(table.fromWorkspaceId),
+    index80("project_transfers_project_idx").on(table.projectId),
     // Magic-link resolution.
     uniqueIndex42("project_transfers_token_idx").on(table.token),
     // Expiry sweep — only pending rows are ever candidates.
-    index79("project_transfers_expires_idx").on(table.expiresAt).where(sql28`${table.status} = 'pending'`)
+    index80("project_transfers_expires_idx").on(table.expiresAt).where(sql28`${table.status} = 'pending'`)
   ]
 );
 
 // src/schema/backups.ts
 import {
-  pgTable as pgTable92,
-  text as text93,
+  pgTable as pgTable93,
+  text as text94,
   varchar as varchar70,
-  integer as integer46,
+  integer as integer47,
   bigint as bigint7,
-  jsonb as jsonb51,
-  timestamp as timestamp85,
-  index as index80
+  jsonb as jsonb53,
+  timestamp as timestamp86,
+  index as index81
 } from "drizzle-orm/pg-core";
 var FULL_BACKUP_SCOPE = {
   content: true,
@@ -26887,261 +26962,261 @@ var FULL_BACKUP_SCOPE = {
   submissions: true,
   analytics: true
 };
-var backups = pgTable92(
+var backups = pgTable93(
   "backups",
   {
-    id: text93("id").primaryKey(),
+    id: text94("id").primaryKey(),
     // nanoid
-    workspaceId: text93("workspace_id").notNull(),
+    workspaceId: text94("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text93("project_id").notNull(),
+    projectId: text94("project_id").notNull(),
     // FK → projects.id
     name: varchar70("name", { length: 255 }).notNull(),
     source: varchar70("source", { length: 20 }).notNull().default("manual"),
     status: varchar70("status", { length: 20 }).notNull().default("pending"),
-    manifestKey: text93("manifest_key"),
+    manifestKey: text94("manifest_key"),
     // R2 key of the gzipped manifest; NULL until ready
-    manifestVersion: integer46("manifest_version").notNull().default(1),
+    manifestVersion: integer47("manifest_version").notNull().default(1),
     // forward-compat
     sizeBytes: bigint7("size_bytes", { mode: "number" }),
-    counts: jsonb51("counts").$type().notNull().default({}),
+    counts: jsonb53("counts").$type().notNull().default({}),
     // R2 object keys this snapshot references. Powers the media-GC hold:
     // `list_backup_referenced_media_keys()` keeps these keys alive while the
     // backup is live, so a restore never finds a garbage-collected object.
-    mediaKeys: jsonb51("media_keys").$type().notNull().default([]),
-    scope: jsonb51("scope").$type().notNull().default(FULL_BACKUP_SCOPE),
-    error: text93("error"),
-    createdBy: text93("created_by"),
+    mediaKeys: jsonb53("media_keys").$type().notNull().default([]),
+    scope: jsonb53("scope").$type().notNull().default(FULL_BACKUP_SCOPE),
+    error: text94("error"),
+    createdBy: text94("created_by"),
     // FK → users(id); NULL = system-initiated
-    createdAt: timestamp85("created_at").notNull().defaultNow(),
-    readyAt: timestamp85("ready_at"),
-    expiresAt: timestamp85("expires_at"),
+    createdAt: timestamp86("created_at").notNull().defaultNow(),
+    readyAt: timestamp86("ready_at"),
+    expiresAt: timestamp86("expires_at"),
     // retention horizon; NULL = keep until count-pruned
-    deletedAt: timestamp85("deleted_at")
+    deletedAt: timestamp86("deleted_at")
   },
   (t) => [
-    index80("backups_project_idx").on(t.projectId, t.createdAt),
-    index80("backups_workspace_idx").on(t.workspaceId)
+    index81("backups_project_idx").on(t.projectId, t.createdAt),
+    index81("backups_workspace_idx").on(t.workspaceId)
   ]
 );
 
 // src/schema/backup_jobs.ts
 import {
-  pgTable as pgTable93,
-  text as text94,
+  pgTable as pgTable94,
+  text as text95,
   varchar as varchar71,
-  integer as integer47,
-  jsonb as jsonb52,
-  timestamp as timestamp86,
-  index as index81
+  integer as integer48,
+  jsonb as jsonb54,
+  timestamp as timestamp87,
+  index as index82
 } from "drizzle-orm/pg-core";
-var backupJobs = pgTable93(
+var backupJobs = pgTable94(
   "backup_jobs",
   {
-    id: text94("id").primaryKey(),
+    id: text95("id").primaryKey(),
     // nanoid
-    workspaceId: text94("workspace_id").notNull(),
-    projectId: text94("project_id").notNull(),
+    workspaceId: text95("workspace_id").notNull(),
+    projectId: text95("project_id").notNull(),
     // create → the pending backups.id this job fills; restore → the source backup.
-    backupId: text94("backup_id"),
+    backupId: text95("backup_id"),
     operation: varchar71("operation", { length: 16 }).notNull(),
     status: varchar71("status", { length: 16 }).notNull().default("pending"),
-    progress: integer47("progress").notNull().default(0),
+    progress: integer48("progress").notNull().default(0),
     // 0–100
-    workingSince: timestamp86("working_since", { withTimezone: true }),
-    attempts: integer47("attempts").notNull().default(0),
-    error: text94("error"),
-    payload: jsonb52("payload").$type().notNull().default({}),
-    createdAt: timestamp86("created_at").notNull().defaultNow(),
-    updatedAt: timestamp86("updated_at").notNull().defaultNow()
+    workingSince: timestamp87("working_since", { withTimezone: true }),
+    attempts: integer48("attempts").notNull().default(0),
+    error: text95("error"),
+    payload: jsonb54("payload").$type().notNull().default({}),
+    createdAt: timestamp87("created_at").notNull().defaultNow(),
+    updatedAt: timestamp87("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index81("backup_jobs_drain_idx").on(t.status, t.createdAt),
-    index81("backup_jobs_project_idx").on(t.projectId)
+    index82("backup_jobs_drain_idx").on(t.status, t.createdAt),
+    index82("backup_jobs_project_idx").on(t.projectId)
   ]
 );
 
 // src/schema/clone_links.ts
-import { pgTable as pgTable94, text as text95, boolean as boolean30, jsonb as jsonb53, timestamp as timestamp87, index as index82 } from "drizzle-orm/pg-core";
-var cloneLinks = pgTable94(
+import { pgTable as pgTable95, text as text96, boolean as boolean30, jsonb as jsonb55, timestamp as timestamp88, index as index83 } from "drizzle-orm/pg-core";
+var cloneLinks = pgTable95(
   "clone_links",
   {
-    id: text95("id").primaryKey(),
+    id: text96("id").primaryKey(),
     // nanoid
-    workspaceId: text95("workspace_id").notNull(),
+    workspaceId: text96("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text95("project_id").notNull(),
+    projectId: text96("project_id").notNull(),
     // FK → projects.id
-    token: text95("token").notNull(),
+    token: text96("token").notNull(),
     // public share token (nanoid); unique among active links
     enabled: boolean30("enabled").notNull().default(true),
-    scope: jsonb53("scope").$type().notNull(),
-    createdBy: text95("created_by"),
+    scope: jsonb55("scope").$type().notNull(),
+    createdBy: text96("created_by"),
     // FK → users(id); NULL = system-initiated
-    createdAt: timestamp87("created_at").notNull().defaultNow(),
-    updatedAt: timestamp87("updated_at").notNull().defaultNow(),
-    revokedAt: timestamp87("revoked_at")
+    createdAt: timestamp88("created_at").notNull().defaultNow(),
+    updatedAt: timestamp88("updated_at").notNull().defaultNow(),
+    revokedAt: timestamp88("revoked_at")
     // set when the link is rotated/disabled
   },
   (t) => [
-    index82("clone_links_project_idx").on(t.projectId),
-    index82("clone_links_workspace_idx").on(t.workspaceId)
+    index83("clone_links_project_idx").on(t.projectId),
+    index83("clone_links_workspace_idx").on(t.workspaceId)
   ]
 );
 
 // src/schema/clone_jobs.ts
-import { pgTable as pgTable95, text as text96, varchar as varchar72, integer as integer48, jsonb as jsonb54, timestamp as timestamp88, index as index83 } from "drizzle-orm/pg-core";
-var cloneJobs = pgTable95(
+import { pgTable as pgTable96, text as text97, varchar as varchar72, integer as integer49, jsonb as jsonb56, timestamp as timestamp89, index as index84 } from "drizzle-orm/pg-core";
+var cloneJobs = pgTable96(
   "clone_jobs",
   {
-    id: text96("id").primaryKey(),
+    id: text97("id").primaryKey(),
     // nanoid
-    workspaceId: text96("workspace_id").notNull(),
+    workspaceId: text97("workspace_id").notNull(),
     // = targetWorkspaceId (RLS scope)
-    sourceProjectId: text96("source_project_id").notNull(),
-    sourceWorkspaceId: text96("source_workspace_id").notNull(),
-    targetProjectId: text96("target_project_id"),
+    sourceProjectId: text97("source_project_id").notNull(),
+    sourceWorkspaceId: text97("source_workspace_id").notNull(),
+    targetProjectId: text97("target_project_id"),
     // stamped on success
     requestedName: varchar72("requested_name", { length: 255 }),
     requestedSlug: varchar72("requested_slug", { length: 255 }),
     status: varchar72("status", { length: 16 }).notNull().default("pending"),
-    progress: integer48("progress").notNull().default(0),
+    progress: integer49("progress").notNull().default(0),
     // 0–100
-    workingSince: timestamp88("working_since", { withTimezone: true }),
-    attempts: integer48("attempts").notNull().default(0),
-    error: text96("error"),
-    payload: jsonb54("payload").$type().notNull().default({}),
-    initiatedBy: text96("initiated_by"),
+    workingSince: timestamp89("working_since", { withTimezone: true }),
+    attempts: integer49("attempts").notNull().default(0),
+    error: text97("error"),
+    payload: jsonb56("payload").$type().notNull().default({}),
+    initiatedBy: text97("initiated_by"),
     // FK → users(id); NULL = system/agent
-    createdAt: timestamp88("created_at").notNull().defaultNow(),
-    updatedAt: timestamp88("updated_at").notNull().defaultNow()
+    createdAt: timestamp89("created_at").notNull().defaultNow(),
+    updatedAt: timestamp89("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index83("clone_jobs_drain_idx").on(t.status, t.createdAt),
-    index83("clone_jobs_workspace_idx").on(t.workspaceId)
+    index84("clone_jobs_drain_idx").on(t.status, t.createdAt),
+    index84("clone_jobs_workspace_idx").on(t.workspaceId)
   ]
 );
 
 // src/schema/project_branches.ts
 import {
-  pgTable as pgTable96,
-  text as text97,
+  pgTable as pgTable97,
+  text as text98,
   varchar as varchar73,
-  timestamp as timestamp89,
-  index as index84,
+  timestamp as timestamp90,
+  index as index85,
   uniqueIndex as uniqueIndex43
 } from "drizzle-orm/pg-core";
 import { sql as sql29 } from "drizzle-orm";
-var projectBranches = pgTable96(
+var projectBranches = pgTable97(
   "project_branches",
   {
-    id: text97("id").primaryKey(),
-    workspaceId: text97("workspace_id").notNull(),
-    projectId: text97("project_id").notNull(),
+    id: text98("id").primaryKey(),
+    workspaceId: text98("workspace_id").notNull(),
+    projectId: text98("project_id").notNull(),
     name: varchar73("name", { length: 80 }).notNull(),
     slug: varchar73("slug", { length: 80 }).notNull(),
-    parentBranchId: text97("parent_branch_id"),
+    parentBranchId: text98("parent_branch_id"),
     status: varchar73("status", { length: 16 }).$type().notNull().default("open"),
-    appliedAt: timestamp89("applied_at"),
-    abandonedAt: timestamp89("abandoned_at"),
+    appliedAt: timestamp90("applied_at"),
+    abandonedAt: timestamp90("abandoned_at"),
     ...auditColumns
   },
   (t) => [
-    index84("project_branches_project_idx").on(t.projectId),
+    index85("project_branches_project_idx").on(t.projectId),
     uniqueIndex43("project_branches_project_slug_open_idx").on(t.projectId, t.slug).where(sql29`${t.status} = 'open'`)
   ]
 );
 
 // src/schema/branch_preview_share.ts
-import { pgTable as pgTable97, text as text98, boolean as boolean31, timestamp as timestamp90, index as index85, uniqueIndex as uniqueIndex44 } from "drizzle-orm/pg-core";
-var branchPreviewShares = pgTable97(
+import { pgTable as pgTable98, text as text99, boolean as boolean31, timestamp as timestamp91, index as index86, uniqueIndex as uniqueIndex44 } from "drizzle-orm/pg-core";
+var branchPreviewShares = pgTable98(
   "branch_preview_shares",
   {
-    id: text98("id").primaryKey(),
-    workspaceId: text98("workspace_id").notNull(),
-    projectId: text98("project_id").notNull(),
-    branchId: text98("branch_id").notNull(),
+    id: text99("id").primaryKey(),
+    workspaceId: text99("workspace_id").notNull(),
+    projectId: text99("project_id").notNull(),
+    branchId: text99("branch_id").notNull(),
     publicEnabled: boolean31("public_enabled").notNull().default(false),
-    publicToken: text98("public_token"),
-    createdBy: text98("created_by"),
-    createdAt: timestamp90("created_at").notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at").notNull().defaultNow()
+    publicToken: text99("public_token"),
+    createdBy: text99("created_by"),
+    createdAt: timestamp91("created_at").notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at").notNull().defaultNow()
   },
   (t) => [
     uniqueIndex44("branch_preview_shares_branch_idx").on(t.branchId),
     uniqueIndex44("branch_preview_shares_active_token_idx").on(t.publicToken),
-    index85("branch_preview_shares_project_idx").on(t.projectId),
-    index85("branch_preview_shares_workspace_idx").on(t.workspaceId)
+    index86("branch_preview_shares_project_idx").on(t.projectId),
+    index86("branch_preview_shares_workspace_idx").on(t.workspaceId)
   ]
 );
-var branchPreviewGrants = pgTable97(
+var branchPreviewGrants = pgTable98(
   "branch_preview_grants",
   {
-    id: text98("id").primaryKey(),
-    workspaceId: text98("workspace_id").notNull(),
-    projectId: text98("project_id").notNull(),
-    branchId: text98("branch_id").notNull(),
-    email: text98("email").notNull(),
-    invitedBy: text98("invited_by"),
-    createdAt: timestamp90("created_at").notNull().defaultNow()
+    id: text99("id").primaryKey(),
+    workspaceId: text99("workspace_id").notNull(),
+    projectId: text99("project_id").notNull(),
+    branchId: text99("branch_id").notNull(),
+    email: text99("email").notNull(),
+    invitedBy: text99("invited_by"),
+    createdAt: timestamp91("created_at").notNull().defaultNow()
   },
   (t) => [
     uniqueIndex44("branch_preview_grants_branch_email_idx").on(t.branchId, t.email),
-    index85("branch_preview_grants_project_idx").on(t.projectId)
+    index86("branch_preview_grants_project_idx").on(t.projectId)
   ]
 );
 
 // src/schema/share_links.ts
-import { pgTable as pgTable98, text as text99, boolean as boolean32, timestamp as timestamp91, index as index86 } from "drizzle-orm/pg-core";
-var shareLinks = pgTable98(
+import { pgTable as pgTable99, text as text100, boolean as boolean32, timestamp as timestamp92, index as index87 } from "drizzle-orm/pg-core";
+var shareLinks = pgTable99(
   "share_links",
   {
-    id: text99("id").primaryKey(),
+    id: text100("id").primaryKey(),
     // nanoid
-    workspaceId: text99("workspace_id").notNull(),
+    workspaceId: text100("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text99("project_id").notNull(),
+    projectId: text100("project_id").notNull(),
     // FK → projects.id
-    token: text99("token").notNull(),
+    token: text100("token").notNull(),
     // public share token (nanoid); unique among active links
     enabled: boolean32("enabled").notNull().default(true),
-    createdBy: text99("created_by"),
+    createdBy: text100("created_by"),
     // FK → users(id); NULL = system-initiated
-    createdAt: timestamp91("created_at").notNull().defaultNow(),
-    updatedAt: timestamp91("updated_at").notNull().defaultNow(),
-    revokedAt: timestamp91("revoked_at")
+    createdAt: timestamp92("created_at").notNull().defaultNow(),
+    updatedAt: timestamp92("updated_at").notNull().defaultNow(),
+    revokedAt: timestamp92("revoked_at")
     // set when the link is disabled
   },
   (t) => [
-    index86("share_links_project_idx").on(t.projectId),
-    index86("share_links_workspace_idx").on(t.workspaceId)
+    index87("share_links_project_idx").on(t.projectId),
+    index87("share_links_workspace_idx").on(t.workspaceId)
   ]
 );
 
 // src/schema/templates.ts
 import {
-  pgTable as pgTable99,
-  text as text100,
+  pgTable as pgTable100,
+  text as text101,
   varchar as varchar74,
-  timestamp as timestamp92,
-  jsonb as jsonb55,
-  integer as integer49,
-  index as index87,
+  timestamp as timestamp93,
+  jsonb as jsonb57,
+  integer as integer50,
+  index as index88,
   uniqueIndex as uniqueIndex45
 } from "drizzle-orm/pg-core";
 import { relations as relations17 } from "drizzle-orm/relations";
 import { sql as sql30 } from "drizzle-orm";
-var templates = pgTable99(
+var templates = pgTable100(
   "templates",
   {
-    id: text100("id").primaryKey(),
+    id: text101("id").primaryKey(),
     // nanoid
-    workspaceId: text100("workspace_id").notNull(),
+    workspaceId: text101("workspace_id").notNull(),
     // FK to workspaces.id (RLS scope / owner)
     slug: varchar74("slug", { length: 255 }).notNull(),
     // ^[a-z0-9-]+$, unique per workspace
     name: varchar74("name", { length: 255 }).notNull(),
-    description: text100("description"),
+    description: text101("description"),
     scope: varchar74("scope", { length: 10 }).$type().notNull().default("project"),
     // 'demo' ships seed content; 'starter-kit' is the same schema with the content blanked.
     // Defaults to 'demo' because a user template is a frozen snapshot of a real project,
@@ -27152,25 +27227,25 @@ var templates = pgTable99(
     thumbnail: varchar74("thumbnail", { length: 2048 }),
     // Frozen snapshot manifest (stripped snapshot_project output). Never returned in
     // list/gallery responses — only read server-side to instantiate.
-    manifest: jsonb55("manifest").$type().notNull(),
+    manifest: jsonb57("manifest").$type().notNull(),
     visibility: varchar74("visibility", { length: 10 }).$type().notNull().default("private"),
-    sourceProjectId: text100("source_project_id"),
+    sourceProjectId: text101("source_project_id"),
     // provenance (nullable — source may be deleted later)
-    createdBy: text100("created_by"),
+    createdBy: text101("created_by"),
     // user id, or null for a management-key create
-    optimisticVersion: integer49("optimistic_version").notNull().default(0),
-    createdAt: timestamp92("created_at").notNull().defaultNow(),
-    updatedAt: timestamp92("updated_at").notNull().defaultNow(),
-    deletedAt: timestamp92("deleted_at")
+    optimisticVersion: integer50("optimistic_version").notNull().default(0),
+    createdAt: timestamp93("created_at").notNull().defaultNow(),
+    updatedAt: timestamp93("updated_at").notNull().defaultNow(),
+    deletedAt: timestamp93("deleted_at")
     // soft-delete
   },
   (table) => [
-    index87("templates_workspace_idx").on(table.workspaceId),
+    index88("templates_workspace_idx").on(table.workspaceId),
     // Partial: only live rows. A soft-deleted template frees its slug (mirrors
     // components_ws_proj_slug_idx / migration 0114).
     uniqueIndex45("templates_ws_slug_idx").on(table.workspaceId, table.slug).where(sql30`${table.deletedAt} IS NULL`),
     // Public gallery scan (created_at DESC over live public rows).
-    index87("templates_public_idx").on(table.visibility).where(sql30`${table.visibility} = 'public' AND ${table.deletedAt} IS NULL`)
+    index88("templates_public_idx").on(table.visibility).where(sql30`${table.visibility} = 'public' AND ${table.deletedAt} IS NULL`)
   ]
 );
 var templatesRelations = relations17(templates, ({ one }) => ({
@@ -27182,99 +27257,99 @@ var templatesRelations = relations17(templates, ({ one }) => ({
 
 // src/schema/payment_records.ts
 import {
-  pgTable as pgTable100,
-  text as text101,
+  pgTable as pgTable101,
+  text as text102,
   varchar as varchar75,
-  integer as integer50,
-  timestamp as timestamp93,
-  index as index88
+  integer as integer51,
+  timestamp as timestamp94,
+  index as index89
 } from "drizzle-orm/pg-core";
-var paymentRecords = pgTable100(
+var paymentRecords = pgTable101(
   "payment_records",
   {
-    id: text101("id").primaryKey(),
+    id: text102("id").primaryKey(),
     // nanoid
-    workspaceId: text101("workspace_id").notNull(),
+    workspaceId: text102("workspace_id").notNull(),
     // FK → workspaces.id
-    amountCents: integer50("amount_cents").notNull(),
+    amountCents: integer51("amount_cents").notNull(),
     // store money as integer cents
     currency: varchar75("currency", { length: 3 }).notNull().default("usd"),
     method: varchar75("method", { length: 50 }).notNull().default("manual"),
     // manual | stripe | wire | ...
-    note: text101("note"),
-    recordedBy: text101("recorded_by"),
+    note: text102("note"),
+    recordedBy: text102("recorded_by"),
     // FK → users.id (the admin who entered it)
-    createdAt: timestamp93("created_at").notNull().defaultNow()
+    createdAt: timestamp94("created_at").notNull().defaultNow()
   },
   (table) => [
-    index88("payment_records_workspace_idx").on(table.workspaceId, table.createdAt)
+    index89("payment_records_workspace_idx").on(table.workspaceId, table.createdAt)
   ]
 );
 
 // src/schema/plan_changes.ts
 import {
-  pgTable as pgTable101,
-  text as text102,
-  timestamp as timestamp94,
-  index as index89
+  pgTable as pgTable102,
+  text as text103,
+  timestamp as timestamp95,
+  index as index90
 } from "drizzle-orm/pg-core";
-var planChanges = pgTable101(
+var planChanges = pgTable102(
   "plan_changes",
   {
-    id: text102("id").primaryKey(),
+    id: text103("id").primaryKey(),
     // nanoid
-    workspaceId: text102("workspace_id").notNull(),
+    workspaceId: text103("workspace_id").notNull(),
     // FK → workspaces.id
-    fromPlan: text102("from_plan"),
+    fromPlan: text103("from_plan"),
     // plan_limits.id before the change (null if unknown)
-    toPlan: text102("to_plan").notNull(),
+    toPlan: text103("to_plan").notNull(),
     // plan_limits.id after the change
-    reason: text102("reason"),
-    changedBy: text102("changed_by"),
+    reason: text103("reason"),
+    changedBy: text103("changed_by"),
     // FK → users.id (the admin)
-    createdAt: timestamp94("created_at").notNull().defaultNow()
+    createdAt: timestamp95("created_at").notNull().defaultNow()
   },
   (table) => [
-    index89("plan_changes_workspace_idx").on(table.workspaceId, table.createdAt)
+    index90("plan_changes_workspace_idx").on(table.workspaceId, table.createdAt)
   ]
 );
 
 // src/schema/billing_addons.ts
-import { pgTable as pgTable102, text as text103, varchar as varchar76, integer as integer51, boolean as boolean33, jsonb as jsonb56, index as index90 } from "drizzle-orm/pg-core";
-var billingAddons = pgTable102(
+import { pgTable as pgTable103, text as text104, varchar as varchar76, integer as integer52, boolean as boolean33, jsonb as jsonb58, index as index91 } from "drizzle-orm/pg-core";
+var billingAddons = pgTable103(
   "billing_addons",
   {
-    id: text103("id").primaryKey(),
+    id: text104("id").primaryKey(),
     // stable slug, e.g. "developer", "ai-1000", "localization"
     kind: varchar76("kind", { length: 20 }).notNull(),
     // seat_role | ai_credits | localization | ab_testing
     name: varchar76("name", { length: 100 }).notNull(),
-    dodoProductId: text103("dodo_product_id"),
+    dodoProductId: text104("dodo_product_id"),
     // NULL until the Dodo product is created
-    unitPriceCents: integer51("unit_price_cents").notNull(),
+    unitPriceCents: integer52("unit_price_cents").notNull(),
     currency: varchar76("currency", { length: 8 }).notNull().default("usd"),
-    credits: integer51("credits"),
+    credits: integer52("credits"),
     // ai_credits packs only: credits granted per unit
     recurring: boolean33("recurring").notNull().default(false),
     // seats/localization/AB = true; credit packs = false
-    metadata: jsonb56("metadata").$type().default({})
+    metadata: jsonb58("metadata").$type().default({})
   },
-  (t) => [index90("billing_addons_kind_idx").on(t.kind)]
+  (t) => [index91("billing_addons_kind_idx").on(t.kind)]
 );
 
 // src/schema/billing_customers.ts
-import { pgTable as pgTable103, text as text104, varchar as varchar77, timestamp as timestamp95, uniqueIndex as uniqueIndex46 } from "drizzle-orm/pg-core";
-var billingCustomers = pgTable103(
+import { pgTable as pgTable104, text as text105, varchar as varchar77, timestamp as timestamp96, uniqueIndex as uniqueIndex46 } from "drizzle-orm/pg-core";
+var billingCustomers = pgTable104(
   "billing_customers",
   {
-    id: text104("id").primaryKey(),
+    id: text105("id").primaryKey(),
     // nanoid
-    workspaceId: text104("workspace_id").notNull(),
+    workspaceId: text105("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    dodoCustomerId: text104("dodo_customer_id").notNull(),
+    dodoCustomerId: text105("dodo_customer_id").notNull(),
     email: varchar77("email", { length: 255 }),
-    createdAt: timestamp95("created_at").notNull().defaultNow(),
-    updatedAt: timestamp95("updated_at").notNull().defaultNow()
+    createdAt: timestamp96("created_at").notNull().defaultNow(),
+    updatedAt: timestamp96("updated_at").notNull().defaultNow()
   },
   (t) => [
     uniqueIndex46("billing_customers_workspace_idx").on(t.workspaceId),
@@ -27283,34 +27358,34 @@ var billingCustomers = pgTable103(
 );
 
 // src/schema/subscriptions.ts
-import { pgTable as pgTable104, text as text105, varchar as varchar78, boolean as boolean34, timestamp as timestamp96, index as index91, uniqueIndex as uniqueIndex47 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable105, text as text106, varchar as varchar78, boolean as boolean34, timestamp as timestamp97, index as index92, uniqueIndex as uniqueIndex47 } from "drizzle-orm/pg-core";
 import { sql as sql31 } from "drizzle-orm";
-var subscriptions = pgTable104(
+var subscriptions = pgTable105(
   "subscriptions",
   {
-    id: text105("id").primaryKey(),
+    id: text106("id").primaryKey(),
     // nanoid
-    workspaceId: text105("workspace_id").notNull(),
+    workspaceId: text106("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text105("project_id"),
+    projectId: text106("project_id"),
     // NULL = workspace plan; set = site plan (FK → projects.id)
-    planId: text105("plan_id").notNull(),
+    planId: text106("plan_id").notNull(),
     // FK → plan_limits.id
-    dodoSubscriptionId: text105("dodo_subscription_id"),
-    dodoCustomerId: text105("dodo_customer_id"),
+    dodoSubscriptionId: text106("dodo_subscription_id"),
+    dodoCustomerId: text106("dodo_customer_id"),
     status: varchar78("status", { length: 20 }).notNull().default("active"),
     // active | on_hold | cancelled | expired | pending
     // Which of plan_limits' two prices this row is billed at. Without it the bill cannot tell
     // whether the owner pays price_cents or price_cents_yearly (0147).
     interval: varchar78("interval", { length: 10 }).notNull().default("month"),
     // month | year
-    currentPeriodEnd: timestamp96("current_period_end"),
+    currentPeriodEnd: timestamp97("current_period_end"),
     cancelAtPeriodEnd: boolean34("cancel_at_period_end").notNull().default(false),
-    createdAt: timestamp96("created_at").notNull().defaultNow(),
-    updatedAt: timestamp96("updated_at").notNull().defaultNow()
+    createdAt: timestamp97("created_at").notNull().defaultNow(),
+    updatedAt: timestamp97("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index91("subscriptions_workspace_idx").on(t.workspaceId),
+    index92("subscriptions_workspace_idx").on(t.workspaceId),
     uniqueIndex47("subscriptions_dodo_idx").on(t.dodoSubscriptionId).where(sql31`${t.dodoSubscriptionId} IS NOT NULL`),
     // At most one workspace-level subscription per workspace.
     uniqueIndex47("subscriptions_workspace_plan_unique").on(t.workspaceId).where(sql31`${t.projectId} IS NULL`),
@@ -27320,116 +27395,142 @@ var subscriptions = pgTable104(
 );
 
 // src/schema/subscription_addons.ts
-import { pgTable as pgTable105, text as text106, varchar as varchar79, integer as integer52, timestamp as timestamp97, index as index92, uniqueIndex as uniqueIndex48 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable106, text as text107, varchar as varchar79, integer as integer53, timestamp as timestamp98, index as index93, uniqueIndex as uniqueIndex48 } from "drizzle-orm/pg-core";
 import { sql as sql32 } from "drizzle-orm";
-var subscriptionAddons = pgTable105(
+var subscriptionAddons = pgTable106(
   "subscription_addons",
   {
-    id: text106("id").primaryKey(),
+    id: text107("id").primaryKey(),
     // nanoid
-    workspaceId: text106("workspace_id").notNull(),
+    workspaceId: text107("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    addonId: text106("addon_id").notNull(),
+    addonId: text107("addon_id").notNull(),
     // FK → billing_addons.id
-    quantity: integer52("quantity").notNull().default(1),
-    dodoSubscriptionId: text106("dodo_subscription_id"),
+    quantity: integer53("quantity").notNull().default(1),
+    dodoSubscriptionId: text107("dodo_subscription_id"),
     // NULL for a manual/admin grant
     status: varchar79("status", { length: 20 }).notNull().default("active"),
     // active | cancelled | expired
-    createdAt: timestamp97("created_at").notNull().defaultNow(),
-    updatedAt: timestamp97("updated_at").notNull().defaultNow()
+    createdAt: timestamp98("created_at").notNull().defaultNow(),
+    updatedAt: timestamp98("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index92("subscription_addons_workspace_idx").on(t.workspaceId),
+    index93("subscription_addons_workspace_idx").on(t.workspaceId),
     uniqueIndex48("subscription_addons_dodo_idx").on(t.dodoSubscriptionId).where(sql32`${t.dodoSubscriptionId} IS NOT NULL`)
   ]
 );
 
+// src/schema/billing_alerts.ts
+import { pgTable as pgTable107, text as text108, varchar as varchar80, timestamp as timestamp99, index as index94, uniqueIndex as uniqueIndex49 } from "drizzle-orm/pg-core";
+var billingAlerts = pgTable107(
+  "billing_alerts",
+  {
+    id: text108("id").primaryKey(),
+    // nanoid
+    workspaceId: text108("workspace_id").notNull(),
+    // FK → workspaces.id (internal table, no RLS)
+    kind: varchar80("kind", { length: 32 }).notNull(),
+    // renewal_due | bandwidth_80 | bandwidth_100
+    /**
+     * What "already sent" means for this alert, built by the caller (alerts.ts owns the spellings).
+     * Renewals key on the subscription + its period end, so one reminder per period survives a
+     * period-end change. Bandwidth keys on the threshold + calendar month, matching the window
+     * getUsage() measures — so the counter resetting on the 1st re-arms the alert.
+     */
+    dedupeKey: text108("dedupe_key").notNull(),
+    sentAt: timestamp99("sent_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (t) => [
+    uniqueIndex49("billing_alerts_dedupe_idx").on(t.dedupeKey),
+    index94("billing_alerts_workspace_idx").on(t.workspaceId, t.sentAt)
+  ]
+);
+
 // src/schema/ai_credit_ledger.ts
-import { pgTable as pgTable106, text as text107, varchar as varchar80, integer as integer53, timestamp as timestamp98, index as index93 } from "drizzle-orm/pg-core";
-var aiCreditLedger = pgTable106(
+import { pgTable as pgTable108, text as text109, varchar as varchar81, integer as integer54, timestamp as timestamp100, index as index95 } from "drizzle-orm/pg-core";
+var aiCreditLedger = pgTable108(
   "ai_credit_ledger",
   {
-    id: text107("id").primaryKey(),
+    id: text109("id").primaryKey(),
     // nanoid
-    workspaceId: text107("workspace_id").notNull(),
+    workspaceId: text109("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    delta: integer53("delta").notNull(),
+    delta: integer54("delta").notNull(),
     // signed: +purchase/grant, -consume/expire
-    reason: varchar80("reason", { length: 20 }).notNull(),
+    reason: varchar81("reason", { length: 20 }).notNull(),
     // purchase | consume | grant | expire
-    dodoPaymentId: text107("dodo_payment_id"),
+    dodoPaymentId: text109("dodo_payment_id"),
     // set for purchases
-    note: text107("note"),
-    createdAt: timestamp98("created_at").notNull().defaultNow()
+    note: text109("note"),
+    createdAt: timestamp100("created_at").notNull().defaultNow()
   },
-  (t) => [index93("ai_credit_ledger_workspace_idx").on(t.workspaceId, t.createdAt)]
+  (t) => [index95("ai_credit_ledger_workspace_idx").on(t.workspaceId, t.createdAt)]
 );
 
 // src/schema/support_tickets.ts
 import {
-  pgTable as pgTable107,
-  text as text108,
-  varchar as varchar81,
-  timestamp as timestamp99,
+  pgTable as pgTable109,
+  text as text110,
+  varchar as varchar82,
+  timestamp as timestamp101,
   boolean as boolean35,
-  jsonb as jsonb57,
-  index as index94
+  jsonb as jsonb59,
+  index as index96
 } from "drizzle-orm/pg-core";
-var supportTickets = pgTable107(
+var supportTickets = pgTable109(
   "support_tickets",
   {
-    id: text108("id").primaryKey(),
+    id: text110("id").primaryKey(),
     // nanoid
-    workspaceId: text108("workspace_id"),
+    workspaceId: text110("workspace_id"),
     // FK → workspaces.id (nullable: account-level tickets)
     // FK → users.id (the customer). NULL for a ticket Plain created: an email or Slack
     // sender has no BetterCMS account. visibleTicketWhere() compares this to the session
     // user, and NULL never matches, so those tickets stay invisible to every customer —
     // which is correct, since there is no dashboard reply transport for them.
-    userId: text108("user_id"),
+    userId: text110("user_id"),
     // The only identity a Plain-origin ticket has. The staff list coalesces it with
     // users.email; NULL whenever userId is set.
-    customerEmail: text108("customer_email"),
-    customerName: text108("customer_name"),
-    subject: varchar81("subject", { length: 255 }).notNull(),
-    body: text108("body").notNull(),
-    status: varchar81("status", { length: 20 }).notNull().default("open"),
+    customerEmail: text110("customer_email"),
+    customerName: text110("customer_name"),
+    subject: varchar82("subject", { length: 255 }).notNull(),
+    body: text110("body").notNull(),
+    status: varchar82("status", { length: 20 }).notNull().default("open"),
     // open | pending | closed
-    priority: varchar81("priority", { length: 20 }).notNull().default("normal"),
+    priority: varchar82("priority", { length: 20 }).notNull().default("normal"),
     // low | normal | high | urgent
-    assigneeId: text108("assignee_id"),
+    assigneeId: text110("assignee_id"),
     // FK → users.id (staff member handling it)
     // Plain's ThreadChannel, lowercased. 'api' is a ticket opened in the dashboard; the
     // rest arrive from Plain. The staff reply path branches on this: 'api' threads deliver
     // nothing to the customer so we send the email ourselves, every other channel is
     // delivered by Plain.
-    channel: text108("channel").notNull().default("api"),
+    channel: text110("channel").notNull().default("api"),
     // The Plain thread this ticket mirrors. NULL until the first outbound sync succeeds,
     // hence the partial unique index rather than a unique column.
-    plainThreadId: text108("plain_thread_id"),
+    plainThreadId: text110("plain_thread_id"),
     // Files attached when the case was opened, before any message row exists.
-    attachments: jsonb57("attachments").$type().notNull().default([]),
-    createdAt: timestamp99("created_at").notNull().defaultNow(),
-    updatedAt: timestamp99("updated_at").notNull().defaultNow()
+    attachments: jsonb59("attachments").$type().notNull().default([]),
+    createdAt: timestamp101("created_at").notNull().defaultNow(),
+    updatedAt: timestamp101("updated_at").notNull().defaultNow()
   },
   (table) => [
-    index94("support_tickets_status_idx").on(table.status, table.updatedAt),
-    index94("support_tickets_workspace_idx").on(table.workspaceId),
-    index94("support_tickets_user_idx").on(table.userId),
-    index94("support_tickets_channel_idx").on(table.channel, table.updatedAt)
+    index96("support_tickets_status_idx").on(table.status, table.updatedAt),
+    index96("support_tickets_workspace_idx").on(table.workspaceId),
+    index96("support_tickets_user_idx").on(table.userId),
+    index96("support_tickets_channel_idx").on(table.channel, table.updatedAt)
   ]
 );
-var supportTicketMessages = pgTable107(
+var supportTicketMessages = pgTable109(
   "support_ticket_messages",
   {
-    id: text108("id").primaryKey(),
+    id: text110("id").primaryKey(),
     // nanoid
-    ticketId: text108("ticket_id").notNull(),
+    ticketId: text110("ticket_id").notNull(),
     // FK → support_tickets.id
-    authorId: text108("author_id"),
+    authorId: text110("author_id"),
     // FK → users.id (staff or customer)
-    body: text108("body").notNull(),
+    body: text110("body").notNull(),
     isStaff: boolean35("is_staff").notNull().default(false),
     // true = team reply
     // Staff-only triage note. NEVER leaves the platform-admin lane: the customer read
@@ -27439,99 +27540,99 @@ var supportTicketMessages = pgTable107(
     // at-least-once webhook. NULL for anything Plain never saw, and for our own replies on
     // channels whose mutation returns no entry id — replyToThread returns only an error
     // slot, which is why the echo check keys on the actor and this is the backstop.
-    plainMessageId: text108("plain_message_id"),
-    attachments: jsonb57("attachments").$type().notNull().default([]),
-    createdAt: timestamp99("created_at").notNull().defaultNow()
+    plainMessageId: text110("plain_message_id"),
+    attachments: jsonb59("attachments").$type().notNull().default([]),
+    createdAt: timestamp101("created_at").notNull().defaultNow()
   },
   (table) => [
-    index94("support_ticket_messages_ticket_idx").on(table.ticketId, table.createdAt)
+    index96("support_ticket_messages_ticket_idx").on(table.ticketId, table.createdAt)
   ]
 );
 
 // src/schema/admin_action_logs.ts
 import {
-  pgTable as pgTable108,
-  text as text109,
-  varchar as varchar82,
-  jsonb as jsonb58,
-  timestamp as timestamp100,
-  index as index95
+  pgTable as pgTable110,
+  text as text111,
+  varchar as varchar83,
+  jsonb as jsonb60,
+  timestamp as timestamp102,
+  index as index97
 } from "drizzle-orm/pg-core";
-var adminActionLogs = pgTable108(
+var adminActionLogs = pgTable110(
   "admin_action_logs",
   {
-    id: text109("id").primaryKey(),
+    id: text111("id").primaryKey(),
     // nanoid
-    actorId: text109("actor_id"),
+    actorId: text111("actor_id"),
     // FK → users.id (the staff member)
-    actorEmail: varchar82("actor_email", { length: 320 }),
+    actorEmail: varchar83("actor_email", { length: 320 }),
     // denormalized for display
-    actorRole: varchar82("actor_role", { length: 40 }),
+    actorRole: varchar83("actor_role", { length: 40 }),
     // admin_role at action time
-    action: varchar82("action", { length: 80 }).notNull(),
+    action: varchar83("action", { length: 80 }).notNull(),
     // e.g. workspace.plan_change
-    targetType: varchar82("target_type", { length: 40 }),
+    targetType: varchar83("target_type", { length: 40 }),
     // workspace | user | plan | ticket
-    targetId: text109("target_id"),
-    reason: text109("reason"),
-    metadata: jsonb58("metadata").$type().notNull().default({}),
-    ipAddress: text109("ip_address"),
-    createdAt: timestamp100("created_at").notNull().defaultNow()
+    targetId: text111("target_id"),
+    reason: text111("reason"),
+    metadata: jsonb60("metadata").$type().notNull().default({}),
+    ipAddress: text111("ip_address"),
+    createdAt: timestamp102("created_at").notNull().defaultNow()
   },
   (table) => [
-    index95("admin_action_logs_created_idx").on(table.createdAt),
-    index95("admin_action_logs_action_idx").on(table.action, table.createdAt)
+    index97("admin_action_logs_created_idx").on(table.createdAt),
+    index97("admin_action_logs_action_idx").on(table.action, table.createdAt)
   ]
 );
 
 // src/schema/admin_notes.ts
-import { pgTable as pgTable109, text as text110, varchar as varchar83, boolean as boolean36, timestamp as timestamp101, index as index96 } from "drizzle-orm/pg-core";
-var adminNotes = pgTable109(
+import { pgTable as pgTable111, text as text112, varchar as varchar84, boolean as boolean36, timestamp as timestamp103, index as index98 } from "drizzle-orm/pg-core";
+var adminNotes = pgTable111(
   "admin_notes",
   {
-    id: text110("id").primaryKey(),
+    id: text112("id").primaryKey(),
     // nanoid
-    targetType: varchar83("target_type", { length: 20 }).notNull(),
+    targetType: varchar84("target_type", { length: 20 }).notNull(),
     // user | workspace | project
-    targetId: text110("target_id").notNull(),
-    body: text110("body").notNull(),
-    authorId: text110("author_id"),
+    targetId: text112("target_id").notNull(),
+    body: text112("body").notNull(),
+    authorId: text112("author_id"),
     // FK → users.id (the staff member)
-    authorEmail: varchar83("author_email", { length: 320 }),
+    authorEmail: varchar84("author_email", { length: 320 }),
     // denormalized for display
     pinned: boolean36("pinned").notNull().default(false),
-    createdAt: timestamp101("created_at").notNull().defaultNow(),
-    updatedAt: timestamp101("updated_at").notNull().defaultNow()
+    createdAt: timestamp103("created_at").notNull().defaultNow(),
+    updatedAt: timestamp103("updated_at").notNull().defaultNow()
   },
   (t) => [
     // Pinned first, then newest — the exact order the tab renders.
-    index96("admin_notes_target_idx").on(t.targetType, t.targetId, t.pinned, t.createdAt)
+    index98("admin_notes_target_idx").on(t.targetType, t.targetId, t.pinned, t.createdAt)
   ]
 );
 
 // src/schema/admin_agent_sessions.ts
-import { pgTable as pgTable110, text as text111, varchar as varchar84, doublePrecision as doublePrecision2, timestamp as timestamp102, index as index97 } from "drizzle-orm/pg-core";
-var adminAgentSessions = pgTable110(
+import { pgTable as pgTable112, text as text113, varchar as varchar85, doublePrecision as doublePrecision2, timestamp as timestamp104, index as index99 } from "drizzle-orm/pg-core";
+var adminAgentSessions = pgTable112(
   "admin_agent_sessions",
   {
-    id: text111("id").primaryKey(),
+    id: text113("id").primaryKey(),
     // nanoid
-    actorId: text111("actor_id").notNull(),
+    actorId: text113("actor_id").notNull(),
     // FK → users.id (the staff member)
-    actorEmail: varchar84("actor_email", { length: 320 }),
-    title: varchar84("title", { length: 200 }),
-    status: varchar84("status", { length: 20 }).notNull().default("active"),
+    actorEmail: varchar85("actor_email", { length: 320 }),
+    title: varchar85("title", { length: 200 }),
+    status: varchar85("status", { length: 20 }).notNull().default("active"),
     // active | error
     costUsd: doublePrecision2("cost_usd").notNull().default(0),
-    createdAt: timestamp102("created_at").notNull().defaultNow(),
-    updatedAt: timestamp102("updated_at").notNull().defaultNow(),
-    lastActiveAt: timestamp102("last_active_at").notNull().defaultNow()
+    createdAt: timestamp104("created_at").notNull().defaultNow(),
+    updatedAt: timestamp104("updated_at").notNull().defaultNow(),
+    lastActiveAt: timestamp104("last_active_at").notNull().defaultNow()
   },
-  (t) => [index97("admin_agent_sessions_actor_idx").on(t.actorId, t.lastActiveAt)]
+  (t) => [index99("admin_agent_sessions_actor_idx").on(t.actorId, t.lastActiveAt)]
 );
 
 // src/schema/crm_deals.ts
-import { pgTable as pgTable111, text as text112, varchar as varchar85, integer as integer54, timestamp as timestamp103, index as index98, unique as unique13 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable113, text as text114, varchar as varchar86, integer as integer55, timestamp as timestamp105, index as index100, unique as unique13 } from "drizzle-orm/pg-core";
 var CRM_STAGES = [
   "qualified",
   "conversation",
@@ -27539,136 +27640,210 @@ var CRM_STAGES = [
   "customer",
   "at_risk"
 ];
-var crmDeals = pgTable111(
+var crmDeals = pgTable113(
   "crm_deals",
   {
-    id: text112("id").primaryKey(),
+    id: text114("id").primaryKey(),
     // nanoid
-    workspaceId: text112("workspace_id").notNull(),
+    workspaceId: text114("workspace_id").notNull(),
     // FK → workspaces.id
-    stage: varchar85("stage", { length: 20 }).notNull().default("qualified").$type(),
-    valueCents: integer54("value_cents"),
+    stage: varchar86("stage", { length: 20 }).notNull().default("qualified").$type(),
+    valueCents: integer55("value_cents"),
     // annual contract value the rep is working toward
-    ownerId: text112("owner_id"),
+    ownerId: text114("owner_id"),
     // FK → users.id (the staff member on the account)
-    nextStep: text112("next_step"),
-    notes: text112("notes"),
-    lastTouchAt: timestamp103("last_touch_at"),
-    createdAt: timestamp103("created_at").notNull().defaultNow(),
-    updatedAt: timestamp103("updated_at").notNull().defaultNow()
+    nextStep: text114("next_step"),
+    notes: text114("notes"),
+    lastTouchAt: timestamp105("last_touch_at"),
+    createdAt: timestamp105("created_at").notNull().defaultNow(),
+    updatedAt: timestamp105("updated_at").notNull().defaultNow()
   },
   (t) => [
     unique13("crm_deals_workspace_id_key").on(t.workspaceId),
-    index98("crm_deals_stage_idx").on(t.stage, t.lastTouchAt),
-    index98("crm_deals_owner_idx").on(t.ownerId)
+    index100("crm_deals_stage_idx").on(t.stage, t.lastTouchAt),
+    index100("crm_deals_owner_idx").on(t.ownerId)
   ]
 );
 
 // src/schema/project_env_vars.ts
 import {
-  pgTable as pgTable112,
-  text as text113,
-  varchar as varchar86,
-  timestamp as timestamp104,
-  index as index99,
-  uniqueIndex as uniqueIndex49
+  pgTable as pgTable114,
+  text as text115,
+  varchar as varchar87,
+  timestamp as timestamp106,
+  index as index101,
+  uniqueIndex as uniqueIndex50
 } from "drizzle-orm/pg-core";
 var ENV_VAR_SCOPES = ["production", "preview", "development"];
-var projectEnvVars = pgTable112(
+var projectEnvVars = pgTable114(
   "project_env_vars",
   {
-    id: text113("id").primaryKey(),
+    id: text115("id").primaryKey(),
     // nanoid
-    projectId: text113("project_id").notNull(),
+    projectId: text115("project_id").notNull(),
     // FK to projects.id
-    workspaceId: text113("workspace_id").notNull(),
+    workspaceId: text115("workspace_id").notNull(),
     // FK to workspaces.id — RLS scope
-    key: varchar86("key", { length: 128 }).notNull(),
-    valueEnc: text113("value_enc").notNull(),
+    key: varchar87("key", { length: 128 }).notNull(),
+    valueEnc: text115("value_enc").notNull(),
     // AES-256-GCM, `iv:tag:ciphertext` hex
-    scope: varchar86("scope", { length: 16 }).$type().notNull(),
-    updatedBy: text113("updated_by"),
+    scope: varchar87("scope", { length: 16 }).$type().notNull(),
+    updatedBy: text115("updated_by"),
     // FK to users.id, nullable
-    updatedAt: timestamp104("updated_at", { withTimezone: true }).notNull().defaultNow(),
-    createdAt: timestamp104("created_at", { withTimezone: true }).notNull().defaultNow()
+    updatedAt: timestamp106("updated_at", { withTimezone: true }).notNull().defaultNow(),
+    createdAt: timestamp106("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     // One value per key per scope — the same key MAY exist in production and preview.
-    uniqueIndex49("project_env_vars_project_key_scope_idx").on(
+    uniqueIndex50("project_env_vars_project_key_scope_idx").on(
       table.projectId,
       table.key,
       table.scope
     ),
-    index99("project_env_vars_project_idx").on(table.projectId)
+    index101("project_env_vars_project_idx").on(table.projectId)
   ]
 );
 
 // src/schema/mcp_connections.ts
-import { pgTable as pgTable113, text as text114, varchar as varchar87, jsonb as jsonb59, timestamp as timestamp105, index as index100, uniqueIndex as uniqueIndex50 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable115, text as text116, varchar as varchar88, jsonb as jsonb61, timestamp as timestamp107, index as index102, uniqueIndex as uniqueIndex51 } from "drizzle-orm/pg-core";
 import { sql as sql33 } from "drizzle-orm";
-var mcpConnections = pgTable113(
+var mcpConnections = pgTable115(
   "mcp_connections",
   {
-    id: text114("id").primaryKey(),
+    id: text116("id").primaryKey(),
     // nanoid
-    workspaceId: text114("workspace_id").notNull(),
+    workspaceId: text116("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text114("project_id").notNull(),
+    projectId: text116("project_id").notNull(),
     // FK → projects.id (application-enforced)
     /** Catalog slug (`notion` | `linear` | `hubspot` | `figma`) or `custom` for a user-added server. */
-    providerSlug: varchar87("provider_slug", { length: 32 }).notNull(),
+    providerSlug: varchar88("provider_slug", { length: 32 }).notNull(),
     /** Where tools come from. See the header note — NOT interchangeable with authMode. */
-    kind: varchar87("kind", { length: 16 }).notNull().$type(),
+    kind: varchar88("kind", { length: 16 }).notNull().$type(),
     /** How the credential is obtained. See the header note. */
-    authMode: varchar87("auth_mode", { length: 24 }).notNull().$type(),
+    authMode: varchar88("auth_mode", { length: 24 }).notNull().$type(),
     /** Display name. The catalog's name for a known provider; user-supplied for a custom one. */
-    name: varchar87("name", { length: 120 }).notNull(),
+    name: varchar88("name", { length: 120 }).notNull(),
     /** Remote Streamable-HTTP endpoint. NULL for `kind: 'rest'`, which has no MCP server. */
-    serverUrl: text114("server_url"),
+    serverUrl: text116("server_url"),
     /** Display only — the connected Notion workspace / Linear org / Figma account. */
-    accountLabel: varchar87("account_label", { length: 255 }),
-    accessTokenEnc: text114("access_token_enc"),
-    refreshTokenEnc: text114("refresh_token_enc"),
-    expiresAt: timestamp105("expires_at", { withTimezone: true }),
+    accountLabel: varchar88("account_label", { length: 255 }),
+    accessTokenEnc: text116("access_token_enc"),
+    refreshTokenEnc: text116("refresh_token_enc"),
+    expiresAt: timestamp107("expires_at", { withTimezone: true }),
     /** `custom_headers` mode only: the encrypted header map a gateway requires on every call. */
-    headersEnc: text114("headers_enc"),
+    headersEnc: text116("headers_enc"),
     /** DCR-issued or statically configured — the same two columns serve both, deliberately. */
-    oauthClientId: varchar87("oauth_client_id", { length: 255 }),
-    oauthClientSecretEnc: text114("oauth_client_secret_enc"),
+    oauthClientId: varchar88("oauth_client_id", { length: 255 }),
+    oauthClientSecretEnc: text116("oauth_client_secret_enc"),
     /** Both cleared on a successful exchange; see the header note on why they must exist at all. */
-    oauthState: text114("oauth_state"),
-    pkceVerifierEnc: text114("pkce_verifier_enc"),
+    oauthState: text116("oauth_state"),
+    pkceVerifierEnc: text116("pkce_verifier_enc"),
     /** Discovery output: authorization server metadata, token endpoint, RFC 8707 resource. */
-    authMetadata: jsonb59("auth_metadata").$type(),
-    scopes: text114("scopes").array().$type(),
+    authMetadata: jsonb61("auth_metadata").$type(),
+    scopes: text116("scopes").array().$type(),
     /**
      * Full descriptors (name, description, inputSchema, annotations) — NOT just names. The
      * read-only boundary is decided from `annotations.readOnlyHint`, so the names alone would
      * force a live listTools on the turn path to answer a governance question.
      */
-    toolsCache: jsonb59("tools_cache").$type().notNull().default([]),
-    toolsCachedAt: timestamp105("tools_cached_at", { withTimezone: true }),
+    toolsCache: jsonb61("tools_cache").$type().notNull().default([]),
+    toolsCachedAt: timestamp107("tools_cached_at", { withTimezone: true }),
     /**
      * pending | ok | invalid | revoked. `pending` is the pre-consent row; `invalid` is set on a
      * provider 401 or a decrypt failure so the UI can say "reconnect" instead of replaying the
      * same auth error on every turn forever.
      */
-    status: varchar87("status", { length: 16 }).notNull().default("pending").$type(),
+    status: varchar88("status", { length: 16 }).notNull().default("pending").$type(),
     /** Machine-readable companion to `status`, e.g. `decrypt_failed`, `provider_401`. */
-    statusReason: varchar87("status_reason", { length: 64 }),
-    lastError: text114("last_error"),
-    lastUsedAt: timestamp105("last_used_at", { withTimezone: true }),
-    connectedBy: text114("connected_by"),
+    statusReason: varchar88("status_reason", { length: 64 }),
+    lastError: text116("last_error"),
+    lastUsedAt: timestamp107("last_used_at", { withTimezone: true }),
+    connectedBy: text116("connected_by"),
     // FK → users(id), added in migration
     ...auditColumns,
     ...softDeleteColumn
   },
   (t) => [
-    index100("mcp_connections_workspace_idx").on(t.workspaceId),
-    index100("mcp_connections_project_idx").on(t.projectId),
+    index102("mcp_connections_workspace_idx").on(t.workspaceId),
+    index102("mcp_connections_project_idx").on(t.projectId),
     // Reconnecting a catalog provider UPDATEs rather than accumulating a second live credential.
     // Custom connectors are excluded: a project may legitimately add many distinct MCP servers.
-    uniqueIndex50("mcp_connections_project_provider_unique").on(t.projectId, t.providerSlug).where(sql33`deleted_at IS NULL AND provider_slug <> 'custom'`)
+    uniqueIndex51("mcp_connections_project_provider_unique").on(t.projectId, t.providerSlug).where(sql33`deleted_at IS NULL AND provider_slug <> 'custom'`)
+  ]
+);
+
+// src/schema/crm_connections.ts
+import {
+  pgTable as pgTable116,
+  text as text117,
+  timestamp as timestamp108,
+  boolean as boolean37,
+  jsonb as jsonb62,
+  integer as integer56,
+  uniqueIndex as uniqueIndex52
+} from "drizzle-orm/pg-core";
+var crmConnections = pgTable116(
+  "crm_connections",
+  {
+    id: text117("id").primaryKey(),
+    workspaceId: text117("workspace_id").notNull(),
+    provider: text117("provider").$type().notNull(),
+    accountId: text117("account_id").notNull(),
+    accountName: text117("account_name").notNull(),
+    instanceUrl: text117("instance_url").notNull(),
+    sandbox: boolean37("sandbox").notNull().default(false),
+    status: text117("status").notNull().default("connected"),
+    accessToken: text117("access_token").notNull(),
+    refreshToken: text117("refresh_token").notNull(),
+    expiresAt: timestamp108("expires_at").notNull(),
+    createdAt: timestamp108("created_at").notNull().defaultNow(),
+    updatedAt: timestamp108("updated_at").notNull().defaultNow()
+  },
+  (t) => [
+    uniqueIndex52("crm_connection_account_uq").on(
+      t.workspaceId,
+      t.provider,
+      t.accountId
+    )
+  ]
+);
+var crmOauthStates = pgTable116("crm_oauth_states", {
+  id: text117("id").primaryKey(),
+  workspaceId: text117("workspace_id").notNull(),
+  userId: text117("user_id").notNull(),
+  provider: text117("provider").notNull(),
+  verifier: text117("verifier").notNull(),
+  returnPath: text117("return_path").notNull(),
+  sandbox: boolean37("sandbox").notNull(),
+  expiresAt: timestamp108("expires_at").notNull()
+});
+var formIntegrationDeliveries = pgTable116(
+  "form_integration_deliveries",
+  {
+    id: text117("id").primaryKey(),
+    workspaceId: text117("workspace_id").notNull(),
+    formId: text117("form_id").notNull(),
+    integrationId: text117("integration_id").notNull(),
+    eventId: text117("event_id").notNull(),
+    submissionId: text117("submission_id").notNull(),
+    snapshot: jsonb62("snapshot").$type().notNull(),
+    data: jsonb62("data").$type().notNull(),
+    status: text117("status").notNull().default("queued"),
+    attempts: integer56("attempts").notNull().default(0),
+    lastError: text117("last_error"),
+    remoteRecordId: text117("remote_record_id"),
+    nextAttemptAt: timestamp108("next_attempt_at").notNull().defaultNow(),
+    leaseUntil: timestamp108("lease_until"),
+    createdAt: timestamp108("created_at").notNull().defaultNow(),
+    updatedAt: timestamp108("updated_at").notNull().defaultNow()
+  },
+  (t) => [
+    uniqueIndex52("crm_delivery_event_uq").on(
+      t.workspaceId,
+      t.eventId,
+      t.integrationId
+    )
   ]
 );
 
@@ -28236,6 +28411,7 @@ export {
   bcmsMigrationFlags,
   betaWaitlist,
   billingAddons,
+  billingAlerts,
   billingCustomers,
   branchColumns,
   branchPreviewGrants,
@@ -28272,10 +28448,13 @@ export {
   contentLocks,
   contentModels,
   contentModelsRelations,
+  contentNavigation,
   contentVersions,
   conversionBriefsIssued,
   conversionProposals,
+  crmConnections,
   crmDeals,
+  crmOauthStates,
   customDomains,
   db,
   deployTargets,
@@ -28290,6 +28469,7 @@ export {
   foldersRelations,
   formContacts,
   formContactsRelations,
+  formIntegrationDeliveries,
   formIntegrations,
   formIntegrationsRelations,
   formSubmissions,