@bettercms-ai/db 0.12.6 → 0.13.0

package/dist/index.js

@@ -11654,18 +11654,18 @@ var require_common = __commonJS({
           if (typeof args[0] !== "string") {
             args.unshift("%O");
           }
-          let index119 = 0;
+          let index120 = 0;
           args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
             if (match === "%%") {
               return "%";
             }
-            index119++;
+            index120++;
             const formatter = createDebug.formatters[format];
             if (typeof formatter === "function") {
-              const val = args[index119];
+              const val = args[index120];
               match = formatter.call(self2, val);
-              args.splice(index119, 1);
-              index119--;
+              args.splice(index120, 1);
+              index120--;
             }
             return match;
           });
@@ -11901,15 +11901,15 @@ var require_browser = __commonJS({
       }
       const c = "color: " + this.color;
       args.splice(1, 0, c, "color: inherit");
-      let index119 = 0;
+      let index120 = 0;
       let lastC = 0;
       args[0].replace(/%[a-zA-Z%]/g, (match) => {
         if (match === "%%") {
           return;
         }
-        index119++;
+        index120++;
         if (match === "%c") {
-          lastC = index119;
+          lastC = index120;
         }
       });
       args.splice(lastC, 0, c);
@@ -14470,10 +14470,10 @@ var require_axios = __commonJS({
             value = stringifyWithDepthLimit(value, 1);
           } else if (utils$1.isArray(value) && isFlatArray(value) || (utils$1.isFileList(value) || utils$1.endsWith(key, "[]")) && (arr = utils$1.toArray(value))) {
             key = removeBrackets(key);
-            arr.forEach(function each(el, index119) {
+            arr.forEach(function each(el, index120) {
               !(utils$1.isUndefined(el) || el === null) && formData.append(
                 // eslint-disable-next-line no-nested-ternary
-                indexes === true ? renderKey([key], index119, dots) : indexes === null ? key : key + "[]",
+                indexes === true ? renderKey([key], index120, dots) : indexes === null ? key : key + "[]",
                 convertValue(el)
               );
             });
@@ -14774,9 +14774,9 @@ var require_axios = __commonJS({
       });
     }
     var MAX_DEPTH = DEFAULT_FORM_DATA_MAX_DEPTH;
-    function throwIfDepthExceeded(index119) {
-      if (index119 > MAX_DEPTH) {
-        throw new AxiosError("FormData field is too deeply nested (" + index119 + " levels). Max depth: " + MAX_DEPTH, AxiosError.ERR_FORM_DATA_DEPTH_EXCEEDED);
+    function throwIfDepthExceeded(index120) {
+      if (index120 > MAX_DEPTH) {
+        throw new AxiosError("FormData field is too deeply nested (" + index120 + " levels). Max depth: " + MAX_DEPTH, AxiosError.ERR_FORM_DATA_DEPTH_EXCEEDED);
       }
     }
     function parsePropPath(name) {
@@ -14802,12 +14802,12 @@ var require_axios = __commonJS({
       return obj;
     }
     function formDataToJSON(formData) {
-      function buildPath(path2, value, target, index119) {
-        throwIfDepthExceeded(index119);
-        let name = path2[index119++];
+      function buildPath(path2, value, target, index120) {
+        throwIfDepthExceeded(index120);
+        let name = path2[index120++];
         if (name === "__proto__") return true;
         const isNumericKey = Number.isFinite(+name);
-        const isLast = index119 >= path2.length;
+        const isLast = index120 >= path2.length;
         name = !name && utils$1.isArray(target) ? target.length : name;
         if (isLast) {
           if (utils$1.hasOwnProp(target, name)) {
@@ -14820,7 +14820,7 @@ var require_axios = __commonJS({
         if (!utils$1.hasOwnProp(target, name) || !utils$1.isObject(target[name])) {
           target[name] = [];
         }
-        const result = buildPath(path2, value, target[name], index119);
+        const result = buildPath(path2, value, target[name], index120);
         if (result && utils$1.isArray(target[name])) {
           target[name] = arrayToObject(target[name]);
         }
@@ -15489,20 +15489,20 @@ var require_axios = __commonJS({
       if (parts[0] !== "127") return false;
       return parts.every((p) => /^\d+$/.test(p) && Number(p) >= 0 && Number(p) <= 255);
     };
-    var parseIPv4Octet = (text135) => {
-      if (/^0[xX][0-9a-fA-F]+$/.test(text135)) {
-        const n = parseInt(text135.slice(2), 16);
+    var parseIPv4Octet = (text136) => {
+      if (/^0[xX][0-9a-fA-F]+$/.test(text136)) {
+        const n = parseInt(text136.slice(2), 16);
         return Number.isFinite(n) ? n : null;
       }
-      if (text135.length > 1 && /^0[0-7]+$/.test(text135)) {
-        const n = parseInt(text135, 8);
+      if (text136.length > 1 && /^0[0-7]+$/.test(text136)) {
+        const n = parseInt(text136, 8);
         return Number.isFinite(n) ? n : null;
       }
-      if (text135.length > 1 && /^0[0-9]+$/.test(text135)) {
+      if (text136.length > 1 && /^0[0-9]+$/.test(text136)) {
         return null;
       }
-      if (/^[0-9]+$/.test(text135)) {
-        const n = parseInt(text135, 10);
+      if (/^[0-9]+$/.test(text136)) {
+        const n = parseInt(text136, 10);
         return Number.isFinite(n) ? n : null;
       }
       return null;
@@ -15840,12 +15840,12 @@ var require_axios = __commonJS({
       };
     }
     function throttle(fn, freq) {
-      let timestamp126 = 0;
+      let timestamp127 = 0;
       let threshold = 1e3 / freq;
       let lastArgs;
       let timer;
       const invoke = (args, now = Date.now()) => {
-        timestamp126 = now;
+        timestamp127 = now;
         lastArgs = null;
         if (timer) {
           clearTimeout(timer);
@@ -15855,7 +15855,7 @@ var require_axios = __commonJS({
       };
       const throttled = (...args) => {
         const now = Date.now();
-        const passed = now - timestamp126;
+        const passed = now - timestamp127;
         if (passed >= threshold) {
           invoke(args, now);
         } else {
@@ -18242,9 +18242,9 @@ var require_axios = __commonJS({
         if (!this._listeners) {
           return;
         }
-        const index119 = this._listeners.indexOf(listener);
-        if (index119 !== -1) {
-          this._listeners.splice(index119, 1);
+        const index120 = this._listeners.indexOf(listener);
+        if (index120 !== -1) {
+          this._listeners.splice(index120, 1);
         }
       }
       toAbortSignal() {
@@ -22036,6 +22036,8 @@ __export(index_exports, {
   customDomains: () => customDomains,
   deployTargets: () => deployTargets,
   deviceAuthorizations: () => deviceAuthorizations,
+  dockUiSourceVersions: () => dockUiSourceVersions,
+  dockUiSources: () => dockUiSources,
   emailSuppressions: () => emailSuppressions,
   entrySlotModels: () => entrySlotModels,
   externalDeployments: () => externalDeployments,
@@ -22838,6 +22840,13 @@ var contentModels = pgTable4(
     listPreview: jsonb5("list_preview").$type(),
     /** The entries list order when the request sends no `sort`. */
     defaultSort: jsonb5("default_sort").$type(),
+    /**
+     * V2 kit facets with no native column (0503; @bettercms-ai/types ContentModelV2): shape,
+     * placement, category, variant chrome. No published copy: a model has none. Null = unset.
+     */
+    v2: jsonb5("v2").$type(),
+    /** "v<N>:<sha256 hex>" over the canonical definition (0503). Written by the services; null until then. */
+    schemaHash: text5("schema_hash"),
     branchId: text5("branch_id"),
     originId: text5("origin_id"),
     createdAt: timestamp5("created_at").notNull().defaultNow(),
@@ -26911,6 +26920,16 @@ var componentVariantGroups = pgTable82(
      * reads as unset, and the first member stands in.
      */
     defaultComponentId: text83("default_component_id"),
+    /**
+     * V2 kit variant chrome (0503; @bettercms-ai/types VariantGroupV2): `{ variants: [{ componentId,
+     * icon?, description? }] }`, ORDER the array index. The live copy is taken by
+     * publish_component_family_contract with `published_canonical_inputs`. Null = unset.
+     */
+    v2: jsonb44("v2").$type(),
+    publishedV2: jsonb44("published_v2").$type(),
+    /** "v<N>:<sha256 hex>" over the canonical family definition (0503), and its live copy. */
+    schemaHash: text83("schema_hash"),
+    publishedSchemaHash: text83("published_schema_hash"),
     ...writeGovernanceColumns,
     ...auditColumns,
     ...softDeleteColumn
@@ -26976,7 +26995,8 @@ var components = pgTable84(
     baseVariantName: varchar64("base_variant_name", { length: 255 }).notNull().default("Default"),
     slug: varchar64("slug", { length: 255 }).notNull(),
     // ^[a-z0-9-]+$, unique per (workspace, project)
-    category: varchar64("category", { length: 20 }).$type().notNull().default("custom"),
+    // 32 since 0503: the kit catalogue's categories are stored verbatim ("Features & storytelling").
+    category: varchar64("category", { length: 32 }).$type().notNull().default("custom"),
     // Section library (migration 0156_component_section_type.sql): the family this component
     // is a LAYOUT of, e.g. "Hero". `name` is the layout label ("Centered"), so rows sharing a
     // sectionType are selectable variants of one section. NULL = an ordinary component, not
@@ -27077,6 +27097,14 @@ var components = pgTable84(
     // props[].target.blockId/path — a live tree paired with draft prop-defs mis-targets.
     publishedBlockJson: jsonb45("published_block_json").$type(),
     publishedProps: jsonb45("published_props").$type(),
+    // V2 kit facets with no native column (migration 0503; @bettercms-ai/types ComponentV2). The
+    // draft, and its live copy taken by the same publish statements as `props`. Null = unset.
+    v2: jsonb45("v2").$type(),
+    publishedV2: jsonb45("published_v2").$type(),
+    // "v<N>:<sha256 hex>" over the canonical definition (0503). Written by the services; null until
+    // then. Its live copy rides the publish with `publishedV2`.
+    schemaHash: text85("schema_hash"),
+    publishedSchemaHash: text85("published_schema_hash"),
     status: varchar64("status", { length: 20 }).$type().notNull().default("draft"),
     publishedAt: timestamp77("published_at"),
     // WHEN the live copy last changed: every publish, where `publishedAt` keeps the first (0454,
@@ -27552,30 +27580,75 @@ var schemaChangeSets = pgTable93(
   ]
 );
 
+// src/schema/dock_ui_sources.ts
+import { index as index82, integer as integer47, jsonb as jsonb53, pgTable as pgTable94, text as text95, timestamp as timestamp87, uniqueIndex as uniqueIndex40, varchar as varchar70 } from "drizzle-orm/pg-core";
+var dockUiSources = pgTable94(
+  "dock_ui_sources",
+  {
+    id: text95("id").primaryKey(),
+    workspaceId: text95("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text95("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    name: varchar70("name", { length: 64 }).notNull(),
+    scope: text95("scope").$type().notNull(),
+    kind: text95("kind").$type().notNull(),
+    target: jsonb53("target").$type().notNull().default({}),
+    headVersion: integer47("head_version").notNull().default(0),
+    publishedVersion: integer47("published_version"),
+    status: text95("status").$type().notNull().default("draft"),
+    approvedBy: text95("approved_by").references(() => users.id, { onDelete: "set null" }),
+    approvedAt: timestamp87("approved_at", { withTimezone: true }),
+    buildReceipt: jsonb53("build_receipt").$type(),
+    createdAt: timestamp87("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp87("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (t) => [
+    uniqueIndex40("dock_ui_sources_project_name_idx").on(t.projectId, t.name),
+    index82("dock_ui_sources_workspace_idx").on(t.workspaceId)
+  ]
+);
+var dockUiSourceVersions = pgTable94(
+  "dock_ui_source_versions",
+  {
+    id: text95("id").primaryKey(),
+    workspaceId: text95("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    sourceId: text95("source_id").notNull().references(() => dockUiSources.id, { onDelete: "cascade" }),
+    version: integer47("version").notNull(),
+    sourceText: text95("source_text").notNull(),
+    sourceSha: text95("source_sha").notNull(),
+    actorId: text95("actor_id").references(() => users.id, { onDelete: "set null" }),
+    origin: text95("origin").$type().notNull().default("dashboard"),
+    createdAt: timestamp87("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (t) => [
+    uniqueIndex40("dock_ui_source_versions_source_version_idx").on(t.sourceId, t.version),
+    index82("dock_ui_source_versions_workspace_idx").on(t.workspaceId)
+  ]
+);
+
 // src/schema/component_variants.ts
 import {
-  pgTable as pgTable94,
-  text as text95,
-  varchar as varchar70,
-  timestamp as timestamp87,
-  jsonb as jsonb53,
-  integer as integer47,
-  index as index82,
+  pgTable as pgTable95,
+  text as text96,
+  varchar as varchar71,
+  timestamp as timestamp88,
+  jsonb as jsonb54,
+  integer as integer48,
+  index as index83,
   unique as unique4,
-  uniqueIndex as uniqueIndex40
+  uniqueIndex as uniqueIndex41
 } from "drizzle-orm/pg-core";
 import { relations as relations15 } from "drizzle-orm/relations";
 import { sql as sql22 } from "drizzle-orm";
-var componentVariants = pgTable94(
+var componentVariants = pgTable95(
   "component_variants",
   {
-    id: text95("id").primaryKey(),
-    workspaceId: text95("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    componentId: text95("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    name: varchar70("name", { length: 255 }).notNull(),
+    id: text96("id").primaryKey(),
+    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    name: varchar71("name", { length: 255 }).notNull(),
     // `<component-root>-<variant-name>`, e.g. `footer-compact`.
-    key: varchar70("key", { length: 356 }).notNull(),
-    delta: jsonb53("delta").$type().notNull().default({
+    key: varchar71("key", { length: 356 }).notNull(),
+    delta: jsonb54("delta").$type().notNull().default({
       fieldOverrides: [],
       addedProps: [],
       removedFieldKeys: [],
@@ -27583,13 +27656,13 @@ var componentVariants = pgTable94(
       valueOverrides: {},
       addedBlocks: []
     }),
-    publishedDelta: jsonb53("published_delta").$type(),
-    status: varchar70("status", { length: 20 }).$type().notNull().default("draft"),
-    publishedAt: timestamp87("published_at"),
-    optimisticVersion: integer47("optimistic_version").notNull().default(0),
-    createdAt: timestamp87("created_at").notNull().defaultNow(),
-    updatedAt: timestamp87("updated_at").notNull().defaultNow(),
-    deletedAt: timestamp87("deleted_at")
+    publishedDelta: jsonb54("published_delta").$type(),
+    status: varchar71("status", { length: 20 }).$type().notNull().default("draft"),
+    publishedAt: timestamp88("published_at"),
+    optimisticVersion: integer48("optimistic_version").notNull().default(0),
+    createdAt: timestamp88("created_at").notNull().defaultNow(),
+    updatedAt: timestamp88("updated_at").notNull().defaultNow(),
+    deletedAt: timestamp88("deleted_at")
   },
   (table) => [
     unique4("component_variants_id_workspace_component_unique").on(
@@ -27597,9 +27670,9 @@ var componentVariants = pgTable94(
       table.workspaceId,
       table.componentId
     ),
-    index82("component_variants_workspace_idx").on(table.workspaceId),
-    index82("component_variants_component_idx").on(table.componentId),
-    uniqueIndex40("component_variants_component_key_unique").on(table.componentId, table.key).where(sql22`${table.deletedAt} IS NULL`)
+    index83("component_variants_workspace_idx").on(table.workspaceId),
+    index83("component_variants_component_idx").on(table.componentId),
+    uniqueIndex41("component_variants_component_key_unique").on(table.componentId, table.key).where(sql22`${table.deletedAt} IS NULL`)
   ]
 );
 var componentVariantsRelations = relations15(componentVariants, ({ one }) => ({
@@ -27617,37 +27690,37 @@ var componentVariantsRelations = relations15(componentVariants, ({ one }) => ({
 import {
   bigint as bigint6,
   foreignKey as foreignKey6,
-  index as index83,
-  integer as integer48,
-  jsonb as jsonb54,
-  pgTable as pgTable95,
-  text as text96,
-  timestamp as timestamp88,
+  index as index84,
+  integer as integer49,
+  jsonb as jsonb55,
+  pgTable as pgTable96,
+  text as text97,
+  timestamp as timestamp89,
   unique as unique5,
-  uniqueIndex as uniqueIndex41,
+  uniqueIndex as uniqueIndex42,
   uuid as uuid2,
-  varchar as varchar71
+  varchar as varchar72
 } from "drizzle-orm/pg-core";
 import { sql as sql23 } from "drizzle-orm";
-var componentImplementationCandidates = pgTable95(
+var componentImplementationCandidates = pgTable96(
   "component_implementation_candidates",
   {
-    id: text96("id").primaryKey(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    variantGroupId: text96("variant_group_id"),
-    familyKey: text96("family_key").notNull(),
-    familyContractHash: varchar71("family_contract_hash", { length: 64 }).notNull(),
+    id: text97("id").primaryKey(),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text97("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    variantGroupId: text97("variant_group_id"),
+    familyKey: text97("family_key").notNull(),
+    familyContractHash: varchar72("family_contract_hash", { length: 64 }).notNull(),
     // Exact value-bearing family contract. Unlike `contract.canonicalInputs` (the
     // renderer/schema projection), this snapshot deliberately retains defaults because it
     // becomes the immutable public-input source pinned by each published variant.
-    familyContract: jsonb54("family_contract").$type(),
-    schemaHash: varchar71("schema_hash", { length: 64 }).notNull(),
-    brandContractHash: varchar71("brand_contract_hash", { length: 64 }).notNull(),
-    contract: jsonb54("contract").$type().notNull(),
-    createdBy: text96("created_by"),
-    createdAt: timestamp88("created_at").notNull().defaultNow()
+    familyContract: jsonb55("family_contract").$type(),
+    schemaHash: varchar72("schema_hash", { length: 64 }).notNull(),
+    brandContractHash: varchar72("brand_contract_hash", { length: 64 }).notNull(),
+    contract: jsonb55("contract").$type().notNull(),
+    createdBy: text97("created_by"),
+    createdAt: timestamp89("created_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27658,7 +27731,7 @@ var componentImplementationCandidates = pgTable95(
     // v1 candidates (created before 0263) have no exact family-contract bytes. They must not
     // occupy the v2 tuple: validation needs to append an exact candidate beside the legacy
     // row instead of either mutating it or selecting it by matching hashes alone.
-    uniqueIndex41("component_implementation_candidate_exact_tuple_unique").on(
+    uniqueIndex42("component_implementation_candidate_exact_tuple_unique").on(
       table.projectId,
       table.componentId,
       table.schemaHash,
@@ -27666,26 +27739,26 @@ var componentImplementationCandidates = pgTable95(
       table.familyContractHash
     ).where(sql23`${table.familyContract} IS NOT NULL`),
     unique5("component_implementation_candidate_scope_unique").on(table.id, table.projectId, table.componentId),
-    index83("component_implementation_candidates_component_idx").on(table.projectId, table.componentId)
+    index84("component_implementation_candidates_component_idx").on(table.projectId, table.componentId)
   ]
 );
-var componentFamilyManifests = pgTable95(
+var componentFamilyManifests = pgTable96(
   "component_family_manifests",
   {
-    id: text96("id").primaryKey(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    familyKey: text96("family_key").notNull(),
-    familyContractHash: varchar71("family_contract_hash", { length: 64 }).notNull(),
-    familyContract: jsonb54("family_contract").$type(),
-    commitSha: varchar71("commit_sha", { length: 64 }).notNull(),
-    adapterHash: varchar71("adapter_hash", { length: 64 }).notNull(),
-    manifestHash: varchar71("manifest_hash", { length: 64 }).notNull(),
-    previewOrigin: text96("preview_origin").notNull(),
-    nativeViewports: jsonb54("native_viewports").$type().notNull(),
-    adapter: jsonb54("adapter").$type().notNull(),
-    createdBy: text96("created_by"),
-    createdAt: timestamp88("created_at").notNull().defaultNow()
+    id: text97("id").primaryKey(),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    familyKey: text97("family_key").notNull(),
+    familyContractHash: varchar72("family_contract_hash", { length: 64 }).notNull(),
+    familyContract: jsonb55("family_contract").$type(),
+    commitSha: varchar72("commit_sha", { length: 64 }).notNull(),
+    adapterHash: varchar72("adapter_hash", { length: 64 }).notNull(),
+    manifestHash: varchar72("manifest_hash", { length: 64 }).notNull(),
+    previewOrigin: text97("preview_origin").notNull(),
+    nativeViewports: jsonb55("native_viewports").$type().notNull(),
+    adapter: jsonb55("adapter").$type().notNull(),
+    createdBy: text97("created_by"),
+    createdAt: timestamp89("created_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27696,48 +27769,48 @@ var componentFamilyManifests = pgTable95(
     unique5("component_family_manifests_scope_unique").on(table.id, table.projectId, table.familyKey),
     unique5("component_family_manifests_id_project_unique").on(table.id, table.projectId),
     unique5("component_family_manifests_evidence_unique").on(table.id, table.projectId, table.manifestHash),
-    uniqueIndex41("component_family_manifest_tuple_unique").on(table.projectId, table.familyKey, table.manifestHash),
-    index83("component_family_manifests_family_idx").on(table.projectId, table.familyKey, table.createdAt)
+    uniqueIndex42("component_family_manifest_tuple_unique").on(table.projectId, table.familyKey, table.manifestHash),
+    index84("component_family_manifests_family_idx").on(table.projectId, table.familyKey, table.createdAt)
   ]
 );
-var componentImplementationRequests = pgTable95(
+var componentImplementationRequests = pgTable96(
   "component_implementation_requests",
   {
-    id: text96("id").primaryKey(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    candidateId: text96("candidate_id").notNull(),
-    componentVersion: integer48("component_version").notNull(),
-    provider: varchar71("provider", { length: 20 }).$type().notNull(),
-    status: varchar71("status", { length: 20 }).$type().notNull(),
-    familyKey: text96("family_key").notNull(),
-    familyContractHash: varchar71("family_contract_hash", { length: 64 }).notNull(),
-    schemaHash: varchar71("schema_hash", { length: 64 }).notNull(),
-    brandContractHash: varchar71("brand_contract_hash", { length: 64 }).notNull(),
-    dependenciesHash: varchar71("dependencies_hash", { length: 64 }).notNull(),
-    commitSha: varchar71("commit_sha", { length: 64 }),
-    adapterHash: varchar71("adapter_hash", { length: 64 }),
-    familyManifestHash: varchar71("family_manifest_hash", { length: 64 }),
-    previewOrigin: text96("preview_origin"),
-    nativeViewports: jsonb54("native_viewports").$type(),
-    adapter: jsonb54("adapter").$type(),
-    providerProvenance: jsonb54("provider_provenance").$type(),
-    claimedByApiKeyId: text96("claimed_by_api_key_id"),
-    claimCredentialHash: varchar71("claim_credential_hash", { length: 64 }),
-    claimCredentialExpiresAt: timestamp88("claim_credential_expires_at", { withTimezone: true }),
-    claimCredentialConsumedAt: timestamp88("claim_credential_consumed_at", { withTimezone: true }),
-    completionHash: varchar71("completion_hash", { length: 64 }),
-    evidenceId: text96("evidence_id"),
-    errorCode: text96("error_code"),
-    errorMessage: text96("error_message"),
-    requestedBy: text96("requested_by"),
-    createdAt: timestamp88("created_at", { withTimezone: true }).notNull().defaultNow(),
-    expiresAt: timestamp88("expires_at", { withTimezone: true }).notNull(),
-    claimedAt: timestamp88("claimed_at", { withTimezone: true }),
-    completedAt: timestamp88("completed_at", { withTimezone: true }),
-    failedAt: timestamp88("failed_at", { withTimezone: true }),
-    updatedAt: timestamp88("updated_at", { withTimezone: true }).notNull().defaultNow()
+    id: text97("id").primaryKey(),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text97("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    candidateId: text97("candidate_id").notNull(),
+    componentVersion: integer49("component_version").notNull(),
+    provider: varchar72("provider", { length: 20 }).$type().notNull(),
+    status: varchar72("status", { length: 20 }).$type().notNull(),
+    familyKey: text97("family_key").notNull(),
+    familyContractHash: varchar72("family_contract_hash", { length: 64 }).notNull(),
+    schemaHash: varchar72("schema_hash", { length: 64 }).notNull(),
+    brandContractHash: varchar72("brand_contract_hash", { length: 64 }).notNull(),
+    dependenciesHash: varchar72("dependencies_hash", { length: 64 }).notNull(),
+    commitSha: varchar72("commit_sha", { length: 64 }),
+    adapterHash: varchar72("adapter_hash", { length: 64 }),
+    familyManifestHash: varchar72("family_manifest_hash", { length: 64 }),
+    previewOrigin: text97("preview_origin"),
+    nativeViewports: jsonb55("native_viewports").$type(),
+    adapter: jsonb55("adapter").$type(),
+    providerProvenance: jsonb55("provider_provenance").$type(),
+    claimedByApiKeyId: text97("claimed_by_api_key_id"),
+    claimCredentialHash: varchar72("claim_credential_hash", { length: 64 }),
+    claimCredentialExpiresAt: timestamp89("claim_credential_expires_at", { withTimezone: true }),
+    claimCredentialConsumedAt: timestamp89("claim_credential_consumed_at", { withTimezone: true }),
+    completionHash: varchar72("completion_hash", { length: 64 }),
+    evidenceId: text97("evidence_id"),
+    errorCode: text97("error_code"),
+    errorMessage: text97("error_message"),
+    requestedBy: text97("requested_by"),
+    createdAt: timestamp89("created_at", { withTimezone: true }).notNull().defaultNow(),
+    expiresAt: timestamp89("expires_at", { withTimezone: true }).notNull(),
+    claimedAt: timestamp89("claimed_at", { withTimezone: true }),
+    completedAt: timestamp89("completed_at", { withTimezone: true }),
+    failedAt: timestamp89("failed_at", { withTimezone: true }),
+    updatedAt: timestamp89("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27751,36 +27824,36 @@ var componentImplementationRequests = pgTable95(
       name: "component_implementation_requests_candidate_fkey"
     }).onDelete("cascade"),
     unique5("component_implementation_requests_scope_unique").on(table.id, table.projectId, table.componentId),
-    uniqueIndex41("component_implementation_requests_active_unique").on(table.projectId, table.componentId).where(sql23`${table.status} IN ('pending', 'claimed')`),
-    index83("component_implementation_requests_claimable_idx").on(table.projectId, table.status, table.expiresAt, table.createdAt)
+    uniqueIndex42("component_implementation_requests_active_unique").on(table.projectId, table.componentId).where(sql23`${table.status} IN ('pending', 'claimed')`),
+    index84("component_implementation_requests_claimable_idx").on(table.projectId, table.status, table.expiresAt, table.createdAt)
   ]
 );
-var componentImplementationEvidence = pgTable95(
+var componentImplementationEvidence = pgTable96(
   "component_implementation_evidence",
   {
-    id: text96("id").primaryKey(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    candidateId: text96("candidate_id").notNull(),
-    familyManifestId: text96("family_manifest_id").notNull(),
-    familyManifestHash: varchar71("family_manifest_hash", { length: 64 }).notNull(),
-    variantBindingHash: varchar71("variant_binding_hash", { length: 64 }).notNull(),
-    variantBinding: jsonb54("variant_binding").$type().notNull(),
-    requestId: text96("request_id"),
-    schemaHash: varchar71("schema_hash", { length: 64 }).notNull(),
-    brandContractHash: varchar71("brand_contract_hash", { length: 64 }).notNull(),
-    commitSha: varchar71("commit_sha", { length: 64 }).notNull(),
-    adapterHash: varchar71("adapter_hash", { length: 64 }).notNull(),
-    previewOrigin: text96("preview_origin").notNull(),
-    nativeViewports: jsonb54("native_viewports").$type().notNull(),
-    adapter: jsonb54("adapter").$type().notNull(),
-    status: varchar71("status", { length: 20 }).$type().notNull(),
-    checks: jsonb54("checks").$type().notNull(),
-    evidenceDigest: varchar71("evidence_digest", { length: 128 }).notNull(),
-    evidenceTupleHash: varchar71("evidence_tuple_hash", { length: 64 }).notNull(),
-    createdBy: text96("created_by"),
-    createdAt: timestamp88("created_at").notNull().defaultNow()
+    id: text97("id").primaryKey(),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text97("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    candidateId: text97("candidate_id").notNull(),
+    familyManifestId: text97("family_manifest_id").notNull(),
+    familyManifestHash: varchar72("family_manifest_hash", { length: 64 }).notNull(),
+    variantBindingHash: varchar72("variant_binding_hash", { length: 64 }).notNull(),
+    variantBinding: jsonb55("variant_binding").$type().notNull(),
+    requestId: text97("request_id"),
+    schemaHash: varchar72("schema_hash", { length: 64 }).notNull(),
+    brandContractHash: varchar72("brand_contract_hash", { length: 64 }).notNull(),
+    commitSha: varchar72("commit_sha", { length: 64 }).notNull(),
+    adapterHash: varchar72("adapter_hash", { length: 64 }).notNull(),
+    previewOrigin: text97("preview_origin").notNull(),
+    nativeViewports: jsonb55("native_viewports").$type().notNull(),
+    adapter: jsonb55("adapter").$type().notNull(),
+    status: varchar72("status", { length: 20 }).$type().notNull(),
+    checks: jsonb55("checks").$type().notNull(),
+    evidenceDigest: varchar72("evidence_digest", { length: 128 }).notNull(),
+    evidenceTupleHash: varchar72("evidence_tuple_hash", { length: 64 }).notNull(),
+    createdBy: text97("created_by"),
+    createdAt: timestamp89("created_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27803,23 +27876,23 @@ var componentImplementationEvidence = pgTable95(
       foreignColumns: [componentImplementationRequests.id, componentImplementationRequests.projectId, componentImplementationRequests.componentId],
       name: "component_implementation_evidence_request_fkey"
     }).onDelete("restrict"),
-    uniqueIndex41("component_implementation_evidence_digest_unique").on(table.projectId, table.componentId, table.evidenceDigest),
-    uniqueIndex41("component_implementation_evidence_request_unique").on(table.requestId).where(sql23`${table.requestId} IS NOT NULL`),
+    uniqueIndex42("component_implementation_evidence_digest_unique").on(table.projectId, table.componentId, table.evidenceDigest),
+    uniqueIndex42("component_implementation_evidence_request_unique").on(table.requestId).where(sql23`${table.requestId} IS NOT NULL`),
     unique5("component_implementation_evidence_scope_unique").on(table.id, table.projectId, table.componentId),
-    index83("component_implementation_evidence_candidate_idx").on(table.candidateId, table.createdAt)
+    index84("component_implementation_evidence_candidate_idx").on(table.candidateId, table.createdAt)
   ]
 );
-var componentImplementationApprovals = pgTable95(
+var componentImplementationApprovals = pgTable96(
   "component_implementation_approvals",
   {
-    id: text96("id").primaryKey(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    candidateId: text96("candidate_id").notNull(),
-    evidenceId: text96("evidence_id").notNull(),
-    approvedBy: text96("approved_by").notNull(),
-    approvedAt: timestamp88("approved_at").notNull().defaultNow()
+    id: text97("id").primaryKey(),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text97("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    candidateId: text97("candidate_id").notNull(),
+    evidenceId: text97("evidence_id").notNull(),
+    approvedBy: text97("approved_by").notNull(),
+    approvedAt: timestamp89("approved_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27837,12 +27910,12 @@ var componentImplementationApprovals = pgTable95(
       foreignColumns: [componentImplementationEvidence.id, componentImplementationEvidence.projectId, componentImplementationEvidence.componentId],
       name: "component_implementation_approvals_evidence_fkey"
     }).onDelete("cascade"),
-    uniqueIndex41("component_implementation_approval_evidence_unique").on(table.evidenceId),
+    uniqueIndex42("component_implementation_approval_evidence_unique").on(table.evidenceId),
     unique5("component_implementation_approval_scope_unique").on(table.id, table.projectId, table.componentId),
-    index83("component_implementation_approvals_component_idx").on(table.projectId, table.componentId)
+    index84("component_implementation_approvals_component_idx").on(table.projectId, table.componentId)
   ]
 );
-var componentImplementationAdapters = pgTable95(
+var componentImplementationAdapters = pgTable96(
   "component_implementation_adapters",
   {
     // uuid generated BY THE DATABASE, unlike this file's older `text` ids with app-side prefixes.
@@ -27850,15 +27923,15 @@ var componentImplementationAdapters = pgTable95(
     // (project_id, component_id), which is unique — so there is nothing for a readable prefix to
     // help with, and one fewer identifier for a writer to have to mint correctly.
     id: uuid2("id").primaryKey().defaultRandom(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull(),
-    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    adapter: jsonb54("adapter").$type().notNull(),
-    adapterHash: varchar71("adapter_hash", { length: 64 }).notNull(),
-    source: varchar71("source", { length: 24 }).$type().notNull(),
-    declaredBy: text96("declared_by"),
-    declaredAt: timestamp88("declared_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp88("updated_at", { withTimezone: true }).notNull().defaultNow()
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull(),
+    componentId: text97("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    adapter: jsonb55("adapter").$type().notNull(),
+    adapterHash: varchar72("adapter_hash", { length: 64 }).notNull(),
+    source: varchar72("source", { length: 24 }).$type().notNull(),
+    declaredBy: text97("declared_by"),
+    declaredAt: timestamp89("declared_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp89("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27867,30 +27940,30 @@ var componentImplementationAdapters = pgTable95(
       name: "component_implementation_adapters_scope_fkey"
     }).onDelete("cascade"),
     unique5("component_implementation_adapters_component_unique").on(table.projectId, table.componentId),
-    index83("component_implementation_adapters_project_idx").on(table.projectId, table.componentId)
+    index84("component_implementation_adapters_project_idx").on(table.projectId, table.componentId)
   ]
 );
-var componentImplementationStates = pgTable95(
+var componentImplementationStates = pgTable96(
   "component_implementation_states",
   {
-    id: text96("id").primaryKey(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    selectedCandidateId: text96("selected_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
-    selectedEvidenceId: text96("selected_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
-    selectedApprovalId: text96("selected_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
-    publishedCandidateId: text96("published_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
-    publishedEvidenceId: text96("published_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
-    publishedApprovalId: text96("published_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
-    requestId: text96("request_id"),
-    requestProvider: varchar71("request_provider", { length: 20 }).$type(),
-    requestStatus: varchar71("request_status", { length: 20 }).$type().notNull().default("not-requested"),
-    requestErrorCode: text96("request_error_code"),
-    requestErrorMessage: text96("request_error_message"),
-    requestedBy: text96("requested_by"),
-    requestedAt: timestamp88("requested_at"),
-    updatedAt: timestamp88("updated_at").notNull().defaultNow()
+    id: text97("id").primaryKey(),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    componentId: text97("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    selectedCandidateId: text97("selected_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
+    selectedEvidenceId: text97("selected_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
+    selectedApprovalId: text97("selected_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
+    publishedCandidateId: text97("published_candidate_id").references(() => componentImplementationCandidates.id, { onDelete: "set null" }),
+    publishedEvidenceId: text97("published_evidence_id").references(() => componentImplementationEvidence.id, { onDelete: "set null" }),
+    publishedApprovalId: text97("published_approval_id").references(() => componentImplementationApprovals.id, { onDelete: "set null" }),
+    requestId: text97("request_id"),
+    requestProvider: varchar72("request_provider", { length: 20 }).$type(),
+    requestStatus: varchar72("request_status", { length: 20 }).$type().notNull().default("not-requested"),
+    requestErrorCode: text97("request_error_code"),
+    requestErrorMessage: text97("request_error_message"),
+    requestedBy: text97("requested_by"),
+    requestedAt: timestamp89("requested_at"),
+    updatedAt: timestamp89("updated_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27898,25 +27971,25 @@ var componentImplementationStates = pgTable95(
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_states_project_workspace_fkey"
     }).onDelete("cascade"),
-    uniqueIndex41("component_implementation_states_component_unique").on(table.projectId, table.componentId),
-    index83("component_implementation_states_workspace_idx").on(table.workspaceId)
+    uniqueIndex42("component_implementation_states_component_unique").on(table.projectId, table.componentId),
+    index84("component_implementation_states_workspace_idx").on(table.workspaceId)
   ]
 );
-var componentPreviewSources = pgTable95(
+var componentPreviewSources = pgTable96(
   "component_preview_sources",
   {
     id: uuid2("id").primaryKey().defaultRandom(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull(),
-    componentId: text96("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    sourcePath: text96("source_path").notNull(),
-    sourceExport: varchar71("source_export", { length: 128 }).notNull().default("default"),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull(),
+    componentId: text97("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    sourcePath: text97("source_path").notNull(),
+    sourceExport: varchar72("source_export", { length: 128 }).notNull().default("default"),
     /** `file`: props are the component's fields. `section`: codemod-extracted, props `{ blockId, bind, overrides, page }` (0321). */
-    sourceKind: varchar71("source_kind", { length: 16 }).$type().notNull().default("file"),
-    recordedBy: varchar71("recorded_by", { length: 24 }).$type().notNull().default("agent"),
-    updatedBy: text96("updated_by"),
-    createdAt: timestamp88("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp88("updated_at", { withTimezone: true }).notNull().defaultNow()
+    sourceKind: varchar72("source_kind", { length: 16 }).$type().notNull().default("file"),
+    recordedBy: varchar72("recorded_by", { length: 24 }).$type().notNull().default("agent"),
+    updatedBy: text97("updated_by"),
+    createdAt: timestamp89("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp89("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey6({
@@ -27925,28 +27998,28 @@ var componentPreviewSources = pgTable95(
       name: "component_preview_sources_scope_fkey"
     }).onDelete("cascade"),
     unique5("component_preview_sources_component_unique").on(table.projectId, table.componentId),
-    index83("component_preview_sources_project_idx").on(table.projectId)
+    index84("component_preview_sources_project_idx").on(table.projectId)
   ]
 );
-var componentPreviewBundles = pgTable95(
+var componentPreviewBundles = pgTable96(
   "component_preview_bundles",
   {
     id: uuid2("id").primaryKey().defaultRandom(),
-    workspaceId: text96("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text96("project_id").notNull(),
-    commitSha: varchar71("commit_sha", { length: 64 }).notNull(),
-    artifactKey: text96("artifact_key").notNull(),
-    checksum: varchar71("checksum", { length: 80 }).notNull(),
+    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text97("project_id").notNull(),
+    commitSha: varchar72("commit_sha", { length: 64 }).notNull(),
+    artifactKey: text97("artifact_key").notNull(),
+    checksum: varchar72("checksum", { length: 80 }).notNull(),
     sizeBytes: bigint6("size_bytes", { mode: "number" }).notNull(),
-    createdAt: timestamp88("created_at", { withTimezone: true }).notNull().defaultNow(),
+    createdAt: timestamp89("created_at", { withTimezone: true }).notNull().defaultNow(),
     /** The preview-runtime version that built this bundle (0330); null from a runner before 0.5.0. */
-    runtimeVersion: text96("runtime_version"),
+    runtimeVersion: text97("runtime_version"),
     /** The latest runtime refresh of this commit: rebuilt with a newer runner without re-validating (0330). */
     refreshId: uuid2("refresh_id"),
-    refreshStatus: text96("refresh_status"),
-    refreshErrorCode: text96("refresh_error_code"),
-    refreshErrorMessage: text96("refresh_error_message"),
-    refreshDispatchedAt: timestamp88("refresh_dispatched_at", { withTimezone: true })
+    refreshStatus: text97("refresh_status"),
+    refreshErrorCode: text97("refresh_error_code"),
+    refreshErrorMessage: text97("refresh_error_message"),
+    refreshDispatchedAt: timestamp89("refresh_dispatched_at", { withTimezone: true })
   },
   (table) => [
     foreignKey6({
@@ -27955,7 +28028,7 @@ var componentPreviewBundles = pgTable95(
       name: "component_preview_bundles_scope_fkey"
     }).onDelete("cascade"),
     unique5("component_preview_bundles_commit_unique").on(table.projectId, table.commitSha),
-    index83("component_preview_bundles_project_idx").on(table.projectId, table.createdAt)
+    index84("component_preview_bundles_project_idx").on(table.projectId, table.createdAt)
   ]
 );
 
@@ -27964,17 +28037,17 @@ import { sql as sql24 } from "drizzle-orm";
 import {
   check as check5,
   foreignKey as foreignKey7,
-  index as index84,
-  integer as integer49,
-  jsonb as jsonb55,
-  pgTable as pgTable96,
+  index as index85,
+  integer as integer50,
+  jsonb as jsonb56,
+  pgTable as pgTable97,
   primaryKey as primaryKey10,
-  text as text97,
-  timestamp as timestamp89,
+  text as text98,
+  timestamp as timestamp90,
   unique as unique6,
-  uniqueIndex as uniqueIndex42,
+  uniqueIndex as uniqueIndex43,
   uuid as uuid3,
-  varchar as varchar72
+  varchar as varchar73
 } from "drizzle-orm/pg-core";
 var ORCHESTRATION_RUN_STATUSES = [
   "open",
@@ -27984,15 +28057,15 @@ var ORCHESTRATION_RUN_STATUSES = [
   "completed",
   "abandoned"
 ];
-var projectOrchestrationStates = pgTable96(
+var projectOrchestrationStates = pgTable97(
   "project_orchestration_states",
   {
-    projectId: text97("project_id").primaryKey().references(() => projects.id, { onDelete: "cascade" }),
-    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    generation: integer49("generation").notNull().default(2),
-    enabledBy: text97("enabled_by").notNull(),
-    enabledAt: timestamp89("enabled_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp89("updated_at", { withTimezone: true }).notNull().defaultNow()
+    projectId: text98("project_id").primaryKey().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    generation: integer50("generation").notNull().default(2),
+    enabledBy: text98("enabled_by").notNull(),
+    enabledAt: timestamp90("enabled_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey7({
@@ -28002,31 +28075,31 @@ var projectOrchestrationStates = pgTable96(
     }).onDelete("cascade"),
     unique6("project_orchestration_states_scope_unique").on(table.projectId, table.workspaceId),
     check5("project_orchestration_states_generation_check", sql24`${table.generation} >= 2`),
-    index84("project_orchestration_states_workspace_idx").on(table.workspaceId)
+    index85("project_orchestration_states_workspace_idx").on(table.workspaceId)
   ]
 );
-var orchestrationRuns = pgTable96(
+var orchestrationRuns = pgTable97(
   "orchestration_runs",
   {
     id: uuid3("id").primaryKey().defaultRandom(),
-    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    projectGeneration: integer49("project_generation").notNull(),
-    startIdempotencyKey: text97("start_idempotency_key").notNull(),
-    targetKind: varchar72("target_kind", { length: 32 }).$type().notNull().default("component-variant"),
-    targetId: text97("target_id").notNull().references(() => components.id, { onDelete: "no action" }),
-    targetVariantId: text97("target_variant_id"),
-    targetMetadata: jsonb55("target_metadata").$type().notNull(),
-    status: varchar72("status", { length: 20 }).$type().notNull().default("open"),
-    activeStage: varchar72("active_stage", { length: 64 }).notNull().default("awaiting-executor"),
-    version: integer49("version").notNull().default(1),
-    preferredExecutorId: text97("preferred_executor_id"),
-    cancellationRequestedAt: timestamp89("cancellation_requested_at", { withTimezone: true }),
-    cancellationRequestedBy: text97("cancellation_requested_by"),
-    createdBy: text97("created_by").notNull(),
-    policyVersion: varchar72("policy_version", { length: 64 }).notNull().default("orchestration-v2"),
-    createdAt: timestamp89("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp89("updated_at", { withTimezone: true }).notNull().defaultNow()
+    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    projectGeneration: integer50("project_generation").notNull(),
+    startIdempotencyKey: text98("start_idempotency_key").notNull(),
+    targetKind: varchar73("target_kind", { length: 32 }).$type().notNull().default("component-variant"),
+    targetId: text98("target_id").notNull().references(() => components.id, { onDelete: "no action" }),
+    targetVariantId: text98("target_variant_id"),
+    targetMetadata: jsonb56("target_metadata").$type().notNull(),
+    status: varchar73("status", { length: 20 }).$type().notNull().default("open"),
+    activeStage: varchar73("active_stage", { length: 64 }).notNull().default("awaiting-executor"),
+    version: integer50("version").notNull().default(1),
+    preferredExecutorId: text98("preferred_executor_id"),
+    cancellationRequestedAt: timestamp90("cancellation_requested_at", { withTimezone: true }),
+    cancellationRequestedBy: text98("cancellation_requested_by"),
+    createdBy: text98("created_by").notNull(),
+    policyVersion: varchar73("policy_version", { length: 64 }).notNull().default("orchestration-v2"),
+    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey7({
@@ -28049,15 +28122,15 @@ var orchestrationRuns = pgTable96(
       table.projectId,
       table.startIdempotencyKey
     ),
-    uniqueIndex42("orchestration_runs_nonterminal_project_unique").on(table.projectId).where(sql24`${table.status} IN ('open', 'paused', 'cancelling')`),
-    index84("orchestration_runs_project_target_idx").on(
+    uniqueIndex43("orchestration_runs_nonterminal_project_unique").on(table.projectId).where(sql24`${table.status} IN ('open', 'paused', 'cancelling')`),
+    index85("orchestration_runs_project_target_idx").on(
       table.projectId,
       table.targetKind,
       table.targetId,
       table.targetVariantId,
       table.createdAt
     ),
-    index84("orchestration_runs_workspace_status_idx").on(
+    index85("orchestration_runs_workspace_status_idx").on(
       table.workspaceId,
       table.status,
       table.updatedAt
@@ -28144,14 +28217,14 @@ var orchestrationRuns = pgTable96(
     check5("orchestration_runs_timestamps_check", sql24`${table.updatedAt} >= ${table.createdAt}`)
   ]
 );
-var orchestrationRunStartKeys = pgTable96(
+var orchestrationRunStartKeys = pgTable97(
   "orchestration_run_start_keys",
   {
-    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    idempotencyKey: text97("idempotency_key").notNull(),
+    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    idempotencyKey: text98("idempotency_key").notNull(),
     runId: uuid3("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
-    createdAt: timestamp89("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     primaryKey10({ columns: [table.projectId, table.idempotencyKey] }),
@@ -28160,33 +28233,33 @@ var orchestrationRunStartKeys = pgTable96(
       foreignColumns: [orchestrationRuns.id, orchestrationRuns.workspaceId, orchestrationRuns.projectId],
       name: "orchestration_run_start_keys_run_scope_fkey"
     }).onDelete("cascade"),
-    index84("orchestration_run_start_keys_run_created_idx").on(table.runId, table.createdAt),
+    index85("orchestration_run_start_keys_run_created_idx").on(table.runId, table.createdAt),
     check5(
       "orchestration_run_start_keys_idempotency_key_check",
       sql24`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
     )
   ]
 );
-var orchestrationRunEvents = pgTable96(
+var orchestrationRunEvents = pgTable97(
   "orchestration_run_events",
   {
     id: uuid3("id").primaryKey().defaultRandom(),
     runId: uuid3("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
-    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sequence: integer49("sequence").notNull(),
-    schemaVersion: integer49("schema_version").notNull().default(1),
-    idempotencyKey: text97("idempotency_key").notNull(),
-    type: varchar72("type", { length: 100 }).notNull(),
-    actorType: varchar72("actor_type", { length: 32 }).notNull(),
-    actorId: text97("actor_id").notNull(),
-    causationId: text97("causation_id"),
-    correlationId: text97("correlation_id"),
-    payload: jsonb55("payload").$type().notNull().default({}),
-    payloadDigest: varchar72("payload_digest", { length: 71 }).generatedAlwaysAs(
+    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sequence: integer50("sequence").notNull(),
+    schemaVersion: integer50("schema_version").notNull().default(1),
+    idempotencyKey: text98("idempotency_key").notNull(),
+    type: varchar73("type", { length: 100 }).notNull(),
+    actorType: varchar73("actor_type", { length: 32 }).notNull(),
+    actorId: text98("actor_id").notNull(),
+    causationId: text98("causation_id"),
+    correlationId: text98("correlation_id"),
+    payload: jsonb56("payload").$type().notNull().default({}),
+    payloadDigest: varchar73("payload_digest", { length: 71 }).generatedAlwaysAs(
       sql24`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
     ),
-    createdAt: timestamp89("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey7({
@@ -28196,7 +28269,7 @@ var orchestrationRunEvents = pgTable96(
     }).onDelete("cascade"),
     unique6("orchestration_run_events_sequence_unique").on(table.runId, table.sequence),
     unique6("orchestration_run_events_idempotency_unique").on(table.runId, table.idempotencyKey),
-    index84("orchestration_run_events_project_created_idx").on(table.projectId, table.createdAt),
+    index85("orchestration_run_events_project_created_idx").on(table.projectId, table.createdAt),
     check5("orchestration_run_events_sequence_check", sql24`${table.sequence} >= 1`),
     check5("orchestration_run_events_schema_version_check", sql24`${table.schemaVersion} >= 1`),
     check5(
@@ -28212,20 +28285,20 @@ var orchestrationRunEvents = pgTable96(
     )
   ]
 );
-var orchestrationRunCommandResults = pgTable96(
+var orchestrationRunCommandResults = pgTable97(
   "orchestration_run_command_results",
   {
     commandId: uuid3("command_id").primaryKey(),
-    workspaceId: text97("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text97("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid3("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
-    command: varchar72("command", { length: 20 }).$type().notNull(),
-    expectedVersion: integer49("expected_version").notNull(),
-    resultingVersion: integer49("resulting_version").notNull(),
-    actorId: text97("actor_id").notNull(),
+    command: varchar73("command", { length: 20 }).$type().notNull(),
+    expectedVersion: integer50("expected_version").notNull(),
+    resultingVersion: integer50("resulting_version").notNull(),
+    actorId: text98("actor_id").notNull(),
     eventId: uuid3("event_id").notNull().references(() => orchestrationRunEvents.id, { onDelete: "cascade" }),
-    resultPayload: jsonb55("result_payload").$type().notNull(),
-    createdAt: timestamp89("created_at", { withTimezone: true }).notNull().defaultNow()
+    resultPayload: jsonb56("result_payload").$type().notNull(),
+    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey7({
@@ -28233,8 +28306,8 @@ var orchestrationRunCommandResults = pgTable96(
       foreignColumns: [orchestrationRuns.id, orchestrationRuns.workspaceId, orchestrationRuns.projectId],
       name: "orchestration_run_command_results_run_scope_fkey"
     }).onDelete("cascade"),
-    index84("orchestration_run_command_results_run_created_idx").on(table.runId, table.createdAt),
-    index84("orchestration_run_command_results_project_created_idx").on(
+    index85("orchestration_run_command_results_run_created_idx").on(table.runId, table.createdAt),
+    index85("orchestration_run_command_results_project_created_idx").on(
       table.projectId,
       table.createdAt
     ),
@@ -28268,16 +28341,16 @@ import {
   boolean as boolean32,
   check as check6,
   foreignKey as foreignKey8,
-  index as index85,
-  integer as integer50,
-  jsonb as jsonb56,
-  pgTable as pgTable97,
-  text as text98,
-  timestamp as timestamp90,
+  index as index86,
+  integer as integer51,
+  jsonb as jsonb57,
+  pgTable as pgTable98,
+  text as text99,
+  timestamp as timestamp91,
   unique as unique7,
-  uniqueIndex as uniqueIndex43,
+  uniqueIndex as uniqueIndex44,
   uuid as uuid4,
-  varchar as varchar73
+  varchar as varchar74
 } from "drizzle-orm/pg-core";
 var EXECUTOR_KINDS = ["dashboard-agent", "native-bridge"];
 var EXECUTOR_INSTALLATION_STATUSES = ["active", "revoked", "incompatible"];
@@ -28318,20 +28391,20 @@ var EXECUTOR_COMMAND_KINDS = [
   "cancel",
   "handoff"
 ];
-var orchestrationExecutorInstallations = pgTable97(
+var orchestrationExecutorInstallations = pgTable98(
   "orchestration_executor_installations",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    kind: varchar73("kind", { length: 24 }).$type().notNull(),
-    grantId: text98("grant_id").references(() => deviceAuthorizations.id, { onDelete: "cascade" }),
-    protocolVersion: varchar73("protocol_version", { length: 16 }).notNull(),
-    capabilityDigest: text98("capability_digest").notNull(),
-    repositoryClaim: jsonb56("repository_claim").$type().notNull().default({}),
-    status: varchar73("status", { length: 20 }).$type().notNull().default("active"),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    kind: varchar74("kind", { length: 24 }).$type().notNull(),
+    grantId: text99("grant_id").references(() => deviceAuthorizations.id, { onDelete: "cascade" }),
+    protocolVersion: varchar74("protocol_version", { length: 16 }).notNull(),
+    capabilityDigest: text99("capability_digest").notNull(),
+    repositoryClaim: jsonb57("repository_claim").$type().notNull().default({}),
+    status: varchar74("status", { length: 20 }).$type().notNull().default("active"),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -28344,12 +28417,12 @@ var orchestrationExecutorInstallations = pgTable97(
       table.workspaceId,
       table.projectId
     ),
-    index85("orchestration_executor_installations_project_status_idx").on(
+    index86("orchestration_executor_installations_project_status_idx").on(
       table.projectId,
       table.status
     ),
-    uniqueIndex43("orchestration_executor_installations_grant_unique").on(table.projectId, table.grantId).where(sql25`${table.grantId} IS NOT NULL AND ${table.status} = 'active'`),
-    uniqueIndex43("orchestration_executor_installations_dashboard_unique").on(table.projectId).where(sql25`${table.kind} = 'dashboard-agent' AND ${table.status} = 'active'`),
+    uniqueIndex44("orchestration_executor_installations_grant_unique").on(table.projectId, table.grantId).where(sql25`${table.grantId} IS NOT NULL AND ${table.status} = 'active'`),
+    uniqueIndex44("orchestration_executor_installations_dashboard_unique").on(table.projectId).where(sql25`${table.kind} = 'dashboard-agent' AND ${table.status} = 'active'`),
     check6(
       "orchestration_executor_installations_kind_check",
       sql25`${table.kind} IN ('dashboard-agent', 'native-bridge')`
@@ -28381,24 +28454,24 @@ var orchestrationExecutorInstallations = pgTable97(
     )
   ]
 );
-var orchestrationExecutorSessions = pgTable97(
+var orchestrationExecutorSessions = pgTable98(
   "orchestration_executor_sessions",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     installationId: uuid4("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
-    sessionEpoch: integer50("session_epoch").notNull().default(1),
-    credentialAudience: varchar73("credential_audience", { length: 64 }).notNull(),
-    state: varchar73("state", { length: 20 }).$type().notNull().default("open"),
+    sessionEpoch: integer51("session_epoch").notNull().default(1),
+    credentialAudience: varchar74("credential_audience", { length: 64 }).notNull(),
+    state: varchar74("state", { length: 20 }).$type().notNull().default("open"),
     clientCursor: bigint7("client_cursor", { mode: "number" }).notNull().default(0),
     serverCursor: bigint7("server_cursor", { mode: "number" }).notNull().default(0),
-    connectedAt: timestamp90("connected_at", { withTimezone: true }).notNull().defaultNow(),
-    lastHeartbeatAt: timestamp90("last_heartbeat_at", { withTimezone: true }),
-    serverReceivedAt: timestamp90("server_received_at", { withTimezone: true }),
-    closedAt: timestamp90("closed_at", { withTimezone: true }),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    connectedAt: timestamp91("connected_at", { withTimezone: true }).notNull().defaultNow(),
+    lastHeartbeatAt: timestamp91("last_heartbeat_at", { withTimezone: true }),
+    serverReceivedAt: timestamp91("server_received_at", { withTimezone: true }),
+    closedAt: timestamp91("closed_at", { withTimezone: true }),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -28419,11 +28492,11 @@ var orchestrationExecutorSessions = pgTable97(
       table.installationId,
       table.sessionEpoch
     ),
-    index85("orchestration_executor_sessions_installation_state_idx").on(
+    index86("orchestration_executor_sessions_installation_state_idx").on(
       table.installationId,
       table.state
     ),
-    index85("orchestration_executor_sessions_liveness_idx").on(table.serverReceivedAt).where(sql25`${table.state} = 'open'`),
+    index86("orchestration_executor_sessions_liveness_idx").on(table.serverReceivedAt).where(sql25`${table.state} = 'open'`),
     check6("orchestration_executor_sessions_epoch_check", sql25`${table.sessionEpoch} >= 1`),
     check6(
       "orchestration_executor_sessions_state_check",
@@ -28447,39 +28520,39 @@ var orchestrationExecutorSessions = pgTable97(
     )
   ]
 );
-var orchestrationImplementationAttempts = pgTable97(
+var orchestrationImplementationAttempts = pgTable98(
   "orchestration_implementation_attempts",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     installationId: uuid4("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
-    attemptNumber: integer50("attempt_number").notNull(),
-    targetKind: varchar73("target_kind", { length: 32 }).notNull().default("component-variant"),
-    targetId: text98("target_id").notNull(),
-    targetBindingDigest: text98("target_binding_digest").notNull(),
+    attemptNumber: integer51("attempt_number").notNull(),
+    targetKind: varchar74("target_kind", { length: 32 }).notNull().default("component-variant"),
+    targetId: text99("target_id").notNull(),
+    targetBindingDigest: text99("target_binding_digest").notNull(),
     repositoryId: bigint7("repository_id", { mode: "number" }),
-    baseBranch: varchar73("base_branch", { length: 255 }),
-    baseSha: varchar73("base_sha", { length: 64 }),
+    baseBranch: varchar74("base_branch", { length: 255 }),
+    baseSha: varchar74("base_sha", { length: 64 }),
     /**
      * The branch this attempt created, recorded BEFORE the first write lands on it. This is the
      * crash-safety line: if the process dies holding a branch, cancellation and reconciliation can
      * still find it. Null until the branch exists. Shape-checked to run branches only (0278).
      */
-    createdRef: text98("created_ref"),
-    status: varchar73("status", { length: 24 }).$type().notNull().default("preflight"),
+    createdRef: text99("created_ref"),
+    status: varchar74("status", { length: 24 }).$type().notNull().default("preflight"),
     supersededBy: uuid4("superseded_by"),
     /**
      * Withdrawal (0284): the three facts travel together or not at all, enforced by a CHECK. A
      * withdrawn attempt's pull request is kept BY URL, so a reader of the run never has to
      * discover from GitHub that one used to exist here.
      */
-    withdrawnAt: timestamp90("withdrawn_at", { withTimezone: true }),
-    withdrawnBy: text98("withdrawn_by"),
-    withdrawnPullRequestUrl: text98("withdrawn_pull_request_url"),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    withdrawnAt: timestamp91("withdrawn_at", { withTimezone: true }),
+    withdrawnBy: text99("withdrawn_by"),
+    withdrawnPullRequestUrl: text99("withdrawn_pull_request_url"),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -28514,7 +28587,7 @@ var orchestrationImplementationAttempts = pgTable97(
       table.runId,
       table.attemptNumber
     ),
-    index85("orchestration_implementation_attempts_run_created_idx").on(
+    index86("orchestration_implementation_attempts_run_created_idx").on(
       table.runId,
       table.createdAt
     ),
@@ -28545,135 +28618,135 @@ var orchestrationImplementationAttempts = pgTable97(
     )
   ]
 );
-var orchestrationPlanSnapshots = pgTable97(
+var orchestrationPlanSnapshots = pgTable98(
   "orchestration_plan_snapshots",
   {
-    planDigest: text98("plan_digest").primaryKey(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    baseHeadOid: varchar73("base_head_oid", { length: 64 }).notNull(),
-    budget: jsonb56("budget").notNull(),
-    files: jsonb56("files").notNull(),
-    fileCount: integer50("file_count").notNull(),
+    planDigest: text99("plan_digest").primaryKey(),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    baseHeadOid: varchar74("base_head_oid", { length: 64 }).notNull(),
+    budget: jsonb57("budget").notNull(),
+    files: jsonb57("files").notNull(),
+    fileCount: integer51("file_count").notNull(),
     byteCount: bigint7("byte_count", { mode: "number" }).notNull(),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow()
   },
-  (table) => [index85("orchestration_plan_snapshots_project_idx").on(table.workspaceId, table.projectId, table.createdAt)]
+  (table) => [index86("orchestration_plan_snapshots_project_idx").on(table.workspaceId, table.projectId, table.createdAt)]
 );
-var orchestrationVisualApprovals = pgTable97(
+var orchestrationVisualApprovals = pgTable98(
   "orchestration_visual_approvals",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
-    headSha: varchar73("head_sha", { length: 64 }).notNull(),
+    headSha: varchar74("head_sha", { length: 64 }).notNull(),
     evidenceId: uuid4("evidence_id").notNull(),
-    authorizedBy: text98("authorized_by").notNull(),
-    idempotencyKey: text98("idempotency_key").notNull(),
-    expiresAt: timestamp90("expires_at", { withTimezone: true }).notNull(),
-    consumedAt: timestamp90("consumed_at", { withTimezone: true }),
-    consumedByRef: text98("consumed_by_ref"),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    authorizedBy: text99("authorized_by").notNull(),
+    idempotencyKey: text99("idempotency_key").notNull(),
+    expiresAt: timestamp91("expires_at", { withTimezone: true }).notNull(),
+    consumedAt: timestamp91("consumed_at", { withTimezone: true }),
+    consumedByRef: text99("consumed_by_ref"),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationMergeAuthorizations = pgTable97(
+var orchestrationMergeAuthorizations = pgTable98(
   "orchestration_merge_authorizations",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
-    pullRequestNumber: integer50("pull_request_number").notNull(),
-    expectedHeadSha: varchar73("expected_head_sha", { length: 64 }).notNull(),
+    pullRequestNumber: integer51("pull_request_number").notNull(),
+    expectedHeadSha: varchar74("expected_head_sha", { length: 64 }).notNull(),
     visualApprovalId: uuid4("visual_approval_id").notNull(),
     /**
      * 0285. A void is a first-class END, not a consumption with a special ref: consumption records
      * what an authorization BOUGHT, and a void bought nothing. A CHECK keeps the three together and
      * forbids a row that is both spent and voided.
      */
-    voidedAt: timestamp90("voided_at", { withTimezone: true }),
-    voidedBy: text98("voided_by"),
-    voidReason: text98("void_reason"),
-    authorizedBy: text98("authorized_by").notNull(),
-    idempotencyKey: text98("idempotency_key").notNull(),
-    expiresAt: timestamp90("expires_at", { withTimezone: true }).notNull(),
-    consumedAt: timestamp90("consumed_at", { withTimezone: true }),
-    consumedByRef: text98("consumed_by_ref"),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    voidedAt: timestamp91("voided_at", { withTimezone: true }),
+    voidedBy: text99("voided_by"),
+    voidReason: text99("void_reason"),
+    authorizedBy: text99("authorized_by").notNull(),
+    idempotencyKey: text99("idempotency_key").notNull(),
+    expiresAt: timestamp91("expires_at", { withTimezone: true }).notNull(),
+    consumedAt: timestamp91("consumed_at", { withTimezone: true }),
+    consumedByRef: text99("consumed_by_ref"),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationDeploymentAuthorizations = pgTable97(
+var orchestrationDeploymentAuthorizations = pgTable98(
   "orchestration_deployment_authorizations",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
-    mergeSha: varchar73("merge_sha", { length: 64 }).notNull(),
-    artifactChecksum: varchar73("artifact_checksum", { length: 80 }).notNull(),
+    mergeSha: varchar74("merge_sha", { length: 64 }).notNull(),
+    artifactChecksum: varchar74("artifact_checksum", { length: 80 }).notNull(),
     mergeAuthorizationId: uuid4("merge_authorization_id").notNull(),
-    authorizedBy: text98("authorized_by").notNull(),
-    idempotencyKey: text98("idempotency_key").notNull(),
-    expiresAt: timestamp90("expires_at", { withTimezone: true }).notNull(),
-    consumedAt: timestamp90("consumed_at", { withTimezone: true }),
-    consumedByRef: text98("consumed_by_ref"),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    authorizedBy: text99("authorized_by").notNull(),
+    idempotencyKey: text99("idempotency_key").notNull(),
+    expiresAt: timestamp91("expires_at", { withTimezone: true }).notNull(),
+    consumedAt: timestamp91("consumed_at", { withTimezone: true }),
+    consumedByRef: text99("consumed_by_ref"),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationDeploymentRequests = pgTable97(
+var orchestrationDeploymentRequests = pgTable98(
   "orchestration_deployment_requests",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull(),
     attemptId: uuid4("attempt_id").notNull(),
     authorizationId: uuid4("authorization_id").notNull(),
-    expectedMergeSha: varchar73("expected_merge_sha", { length: 64 }).notNull(),
-    artifactChecksum: varchar73("artifact_checksum", { length: 80 }).notNull(),
-    state: varchar73("state", { length: 12 }).$type().notNull().default("live"),
-    voidReason: text98("void_reason"),
-    releaseId: text98("release_id"),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    expectedMergeSha: varchar74("expected_merge_sha", { length: 64 }).notNull(),
+    artifactChecksum: varchar74("artifact_checksum", { length: 80 }).notNull(),
+    state: varchar74("state", { length: 12 }).$type().notNull().default("live"),
+    voidReason: text99("void_reason"),
+    releaseId: text99("release_id"),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   }
 );
-var orchestrationExecutionApprovals = pgTable97(
+var orchestrationExecutionApprovals = pgTable98(
   "orchestration_execution_approvals",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     installationId: uuid4("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
-    idempotencyKey: text98("idempotency_key").notNull(),
-    approvedBy: text98("approved_by").notNull(),
-    targetKind: varchar73("target_kind", { length: 32 }).notNull().default("component-variant"),
-    targetId: text98("target_id").notNull(),
-    targetBindingDigest: text98("target_binding_digest").notNull(),
+    idempotencyKey: text99("idempotency_key").notNull(),
+    approvedBy: text99("approved_by").notNull(),
+    targetKind: varchar74("target_kind", { length: 32 }).notNull().default("component-variant"),
+    targetId: text99("target_id").notNull(),
+    targetBindingDigest: text99("target_binding_digest").notNull(),
     repositoryId: bigint7("repository_id", { mode: "number" }),
-    baseBranch: varchar73("base_branch", { length: 255 }),
-    baseSha: varchar73("base_sha", { length: 64 }),
+    baseBranch: varchar74("base_branch", { length: 255 }),
+    baseSha: varchar74("base_sha", { length: 64 }),
     /** Set when the approval is spent. 0274 grants UPDATE on THESE TWO COLUMNS ONLY, so every
      *  other field on a row a human signed stays as unwritable as it was before. */
-    consumedAt: timestamp90("consumed_at", { withTimezone: true }),
+    consumedAt: timestamp91("consumed_at", { withTimezone: true }),
     consumedByAttemptId: uuid4("consumed_by_attempt_id"),
-    pathPolicy: jsonb56("path_policy").$type().notNull().default({}),
-    operationClasses: jsonb56("operation_classes").$type().notNull().default([]),
-    mutationBudget: jsonb56("mutation_budget").$type().notNull().default({}),
-    planDigest: text98("plan_digest").notNull(),
-    capabilityDigest: text98("capability_digest").notNull(),
-    validationDigest: text98("validation_digest").notNull(),
-    expiresAt: timestamp90("expires_at", { withTimezone: true }).notNull(),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow()
+    pathPolicy: jsonb57("path_policy").$type().notNull().default({}),
+    operationClasses: jsonb57("operation_classes").$type().notNull().default([]),
+    mutationBudget: jsonb57("mutation_budget").$type().notNull().default({}),
+    planDigest: text99("plan_digest").notNull(),
+    capabilityDigest: text99("capability_digest").notNull(),
+    validationDigest: text99("validation_digest").notNull(),
+    expiresAt: timestamp91("expires_at", { withTimezone: true }).notNull(),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -28710,7 +28783,7 @@ var orchestrationExecutionApprovals = pgTable97(
     // One approval per attempt. A running implementation never introduces a second approval; a
     // changed binding requires a NEW attempt, which is what makes the authority auditable.
     unique7("orchestration_execution_approvals_attempt_unique").on(table.attemptId),
-    index85("orchestration_execution_approvals_run_created_idx").on(table.runId, table.createdAt),
+    index86("orchestration_execution_approvals_run_created_idx").on(table.runId, table.createdAt),
     check6(
       "orchestration_execution_approvals_idempotency_key_check",
       sql25`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
@@ -28757,23 +28830,23 @@ var orchestrationExecutionApprovals = pgTable97(
     )
   ]
 );
-var orchestrationExecutorLeases = pgTable97(
+var orchestrationExecutorLeases = pgTable98(
   "orchestration_executor_leases",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     sessionId: uuid4("session_id").notNull().references(() => orchestrationExecutorSessions.id, { onDelete: "cascade" }),
-    leaseEpoch: integer50("lease_epoch").notNull().default(1),
-    state: varchar73("state", { length: 20 }).$type().notNull().default("active"),
-    heartbeatDeadline: timestamp90("heartbeat_deadline", { withTimezone: true }).notNull(),
-    acquiredAt: timestamp90("acquired_at", { withTimezone: true }).notNull().defaultNow(),
-    releasedAt: timestamp90("released_at", { withTimezone: true }),
-    releaseReason: varchar73("release_reason", { length: 32 }).$type(),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    leaseEpoch: integer51("lease_epoch").notNull().default(1),
+    state: varchar74("state", { length: 20 }).$type().notNull().default("active"),
+    heartbeatDeadline: timestamp91("heartbeat_deadline", { withTimezone: true }).notNull(),
+    acquiredAt: timestamp91("acquired_at", { withTimezone: true }).notNull().defaultNow(),
+    releasedAt: timestamp91("released_at", { withTimezone: true }),
+    releaseReason: varchar74("release_reason", { length: 32 }).$type(),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -28810,8 +28883,8 @@ var orchestrationExecutorLeases = pgTable97(
     ),
     unique7("orchestration_executor_leases_epoch_unique").on(table.attemptId, table.leaseEpoch),
     // Plan invariant 6, enforced in the database: a run has at most one active executor lease.
-    uniqueIndex43("orchestration_executor_leases_one_active_per_run").on(table.runId).where(sql25`${table.state} = 'active'`),
-    index85("orchestration_executor_leases_deadline_idx").on(table.heartbeatDeadline).where(sql25`${table.state} = 'active'`),
+    uniqueIndex44("orchestration_executor_leases_one_active_per_run").on(table.runId).where(sql25`${table.state} = 'active'`),
+    index86("orchestration_executor_leases_deadline_idx").on(table.heartbeatDeadline).where(sql25`${table.state} = 'active'`),
     check6("orchestration_executor_leases_epoch_check", sql25`${table.leaseEpoch} >= 1`),
     check6(
       "orchestration_executor_leases_state_check",
@@ -28831,32 +28904,32 @@ var orchestrationExecutorLeases = pgTable97(
     )
   ]
 );
-var orchestrationExecutorCommands = pgTable97(
+var orchestrationExecutorCommands = pgTable98(
   "orchestration_executor_commands",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     leaseId: uuid4("lease_id").references(() => orchestrationExecutorLeases.id, {
       onDelete: "set null"
     }),
-    leaseEpoch: integer50("lease_epoch"),
+    leaseEpoch: integer51("lease_epoch"),
     approvalId: uuid4("approval_id").references(() => orchestrationExecutionApprovals.id, {
       onDelete: "set null"
     }),
     sequence: bigint7("sequence", { mode: "number" }).notNull(),
-    kind: varchar73("kind", { length: 32 }).$type().notNull(),
-    idempotencyKey: text98("idempotency_key").notNull(),
-    expectedRunVersion: integer50("expected_run_version").notNull(),
-    payload: jsonb56("payload").$type().notNull().default({}),
-    payloadDigest: varchar73("payload_digest", { length: 71 }).generatedAlwaysAs(
+    kind: varchar74("kind", { length: 32 }).$type().notNull(),
+    idempotencyKey: text99("idempotency_key").notNull(),
+    expectedRunVersion: integer51("expected_run_version").notNull(),
+    payload: jsonb57("payload").$type().notNull().default({}),
+    payloadDigest: varchar74("payload_digest", { length: 71 }).generatedAlwaysAs(
       sql25`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
     ),
-    deliveredAt: timestamp90("delivered_at", { withTimezone: true }),
-    acknowledgedAt: timestamp90("acknowledged_at", { withTimezone: true }),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow()
+    deliveredAt: timestamp91("delivered_at", { withTimezone: true }),
+    acknowledgedAt: timestamp91("acknowledged_at", { withTimezone: true }),
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -28882,9 +28955,9 @@ var orchestrationExecutorCommands = pgTable97(
       table.runId,
       table.idempotencyKey
     ),
-    index85("orchestration_executor_commands_run_sequence_idx").on(table.runId, table.sequence),
+    index86("orchestration_executor_commands_run_sequence_idx").on(table.runId, table.sequence),
     // The long-poll cursor read: unacknowledged commands for a run, in order.
-    index85("orchestration_executor_commands_pending_idx").on(table.runId, table.sequence).where(sql25`${table.acknowledgedAt} IS NULL`),
+    index86("orchestration_executor_commands_pending_idx").on(table.runId, table.sequence).where(sql25`${table.acknowledgedAt} IS NULL`),
     check6("orchestration_executor_commands_sequence_check", sql25`${table.sequence} >= 1`),
     check6(
       "orchestration_executor_commands_kind_check",
@@ -28914,25 +28987,25 @@ var orchestrationExecutorCommands = pgTable97(
   ]
 );
 var PATCH_OPERATIONS = ["create", "update", "delete"];
-var orchestrationPatchManifests = pgTable97(
+var orchestrationPatchManifests = pgTable98(
   "orchestration_patch_manifests",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     approvalId: uuid4("approval_id").references(() => orchestrationExecutionApprovals.id, {
       onDelete: "set null"
     }),
-    sequence: integer50("sequence").notNull(),
-    path: text98("path").notNull(),
-    operation: varchar73("operation", { length: 16 }).$type().notNull(),
-    fileMode: varchar73("file_mode", { length: 6 }).notNull().default("100644"),
-    expectedBefore: varchar73("expected_before", { length: 64 }),
-    resultingBlobSha: varchar73("resulting_blob_sha", { length: 64 }),
+    sequence: integer51("sequence").notNull(),
+    path: text99("path").notNull(),
+    operation: varchar74("operation", { length: 16 }).$type().notNull(),
+    fileMode: varchar74("file_mode", { length: 6 }).notNull().default("100644"),
+    expectedBefore: varchar74("expected_before", { length: 64 }),
+    resultingBlobSha: varchar74("resulting_blob_sha", { length: 64 }),
     byteCount: bigint7("byte_count", { mode: "number" }).notNull().default(0),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -28955,7 +29028,7 @@ var orchestrationPatchManifests = pgTable97(
     }).onDelete("cascade"),
     unique7("orchestration_patch_manifests_sequence_unique").on(table.attemptId, table.sequence),
     unique7("orchestration_patch_manifests_path_unique").on(table.attemptId, table.path),
-    index85("orchestration_patch_manifests_attempt_sequence_idx").on(table.attemptId, table.sequence),
+    index86("orchestration_patch_manifests_attempt_sequence_idx").on(table.attemptId, table.sequence),
     check6("orchestration_patch_manifests_sequence_check", sql25`${table.sequence} >= 1`),
     check6(
       "orchestration_patch_manifests_operation_check",
@@ -28981,30 +29054,30 @@ var orchestrationPatchManifests = pgTable97(
     check6("orchestration_patch_manifests_byte_count_check", sql25`${table.byteCount} >= 0`)
   ]
 );
-var orchestrationPullRequestReceipts = pgTable97(
+var orchestrationPullRequestReceipts = pgTable98(
   "orchestration_pull_request_receipts",
   {
     id: uuid4("id").primaryKey().defaultRandom(),
-    workspaceId: text98("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text98("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid4("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid4("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     repositoryId: bigint7("repository_id", { mode: "number" }).notNull(),
     installationId: bigint7("installation_id", { mode: "number" }),
     pullRequestId: bigint7("pull_request_id", { mode: "number" }).notNull(),
-    pullRequestNumber: integer50("pull_request_number").notNull(),
-    pullRequestUrl: text98("pull_request_url").notNull(),
-    baseRef: varchar73("base_ref", { length: 255 }).notNull(),
-    baseSha: varchar73("base_sha", { length: 64 }).notNull(),
-    headRef: varchar73("head_ref", { length: 255 }).notNull(),
-    headSha: varchar73("head_sha", { length: 64 }).notNull(),
+    pullRequestNumber: integer51("pull_request_number").notNull(),
+    pullRequestUrl: text99("pull_request_url").notNull(),
+    baseRef: varchar74("base_ref", { length: 255 }).notNull(),
+    baseSha: varchar74("base_sha", { length: 64 }).notNull(),
+    headRef: varchar74("head_ref", { length: 255 }).notNull(),
+    headSha: varchar74("head_sha", { length: 64 }).notNull(),
     /** True when BetterCMS created and owns the head branch. A head we do not own is observable
      *  but never advanceable by the adapter. */
     branchOwned: boolean32("branch_owned").notNull().default(true),
-    generation: integer50("generation").notNull().default(1),
+    generation: integer51("generation").notNull().default(1),
     isDraft: boolean32("is_draft").notNull().default(true),
-    createdAt: timestamp90("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp90("updated_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp91("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     foreignKey8({
@@ -29029,11 +29102,11 @@ var orchestrationPullRequestReceipts = pgTable97(
       table.attemptId,
       table.generation
     ),
-    index85("orchestration_pull_request_receipts_attempt_generation_idx").on(
+    index86("orchestration_pull_request_receipts_attempt_generation_idx").on(
       table.attemptId,
       table.generation
     ),
-    index85("orchestration_pull_request_receipts_head_idx").on(table.repositoryId, table.headSha),
+    index86("orchestration_pull_request_receipts_head_idx").on(table.repositoryId, table.headSha),
     check6("orchestration_pull_request_receipts_generation_check", sql25`${table.generation} >= 1`),
     check6("orchestration_pull_request_receipts_number_check", sql25`${table.pullRequestNumber} >= 1`),
     check6(
@@ -29062,24 +29135,24 @@ var orchestrationPullRequestReceipts = pgTable97(
 
 // src/schema/conversion_proposals.ts
 import { sql as sql26 } from "drizzle-orm";
-import { check as check7, foreignKey as foreignKey9, index as index86, integer as integer51, jsonb as jsonb57, pgTable as pgTable98, text as text99, timestamp as timestamp91, unique as unique8, uuid as uuid5, varchar as varchar74 } from "drizzle-orm/pg-core";
+import { check as check7, foreignKey as foreignKey9, index as index87, integer as integer52, jsonb as jsonb58, pgTable as pgTable99, text as text100, timestamp as timestamp92, unique as unique8, uuid as uuid5, varchar as varchar75 } from "drizzle-orm/pg-core";
 var CONVERSION_PROPOSAL_STATUSES = ["draft", "approved", "superseded"];
-var conversionProposals = pgTable98(
+var conversionProposals = pgTable99(
   "conversion_proposals",
   {
     id: uuid5("id").primaryKey().defaultRandom(),
-    workspaceId: text99("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text99("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text100("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text100("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     /** The plan snapshot holding the proposed file contents. */
-    planDigest: text99("plan_digest").notNull().references(() => orchestrationPlanSnapshots.planDigest),
+    planDigest: text100("plan_digest").notNull().references(() => orchestrationPlanSnapshots.planDigest),
     /** sha256 of the canonical brief — what the CMS held when this was proposed. */
-    briefDigest: text99("brief_digest").notNull(),
-    baseHeadOid: varchar74("base_head_oid", { length: 64 }).notNull(),
-    baseBranch: text99("base_branch").notNull(),
+    briefDigest: text100("brief_digest").notNull(),
+    baseHeadOid: varchar75("base_head_oid", { length: 64 }).notNull(),
+    baseBranch: text100("base_branch").notNull(),
     /** Brief paths whose `original` was not found in any source file. */
-    unlocated: jsonb57("unlocated").notNull().default(sql26`'[]'::jsonb`),
+    unlocated: jsonb58("unlocated").notNull().default(sql26`'[]'::jsonb`),
     /** Files that matched a brief original but fell outside the acquisition caps. */
-    omittedByCap: jsonb57("omitted_by_cap").notNull().default(sql26`'[]'::jsonb`),
+    omittedByCap: jsonb58("omitted_by_cap").notNull().default(sql26`'[]'::jsonb`),
     /**
      * The codemod's receipt (migration 0296) — every path it bound, and every one it could not.
      *
@@ -29087,25 +29160,25 @@ var conversionProposals = pgTable98(
      * pending list for those, which is exactly the silent "nothing left to do" this lane refuses.
      * Informative: `proposeConversion` re-derives every claim it acts on from the proposed files.
      */
-    receipt: jsonb57("receipt"),
-    status: text99("status").notNull().default("draft"),
-    version: integer51("version").notNull().default(1),
-    idempotencyKey: text99("idempotency_key").notNull(),
+    receipt: jsonb58("receipt"),
+    status: text100("status").notNull().default("draft"),
+    version: integer52("version").notNull().default(1),
+    idempotencyKey: text100("idempotency_key").notNull(),
     /**
      * The key of the transition that put this row in its CURRENT terminal state — the approve, or
      * the manual supersede. Separate from `idempotencyKey`, which belongs to the create: a client
      * retrying one act must never be answered with the result of another.
      */
-    transitionIdempotencyKey: text99("transition_idempotency_key"),
-    createdBy: text99("created_by").notNull(),
-    createdAt: timestamp91("created_at", { withTimezone: true }).notNull().defaultNow(),
-    approvedBy: text99("approved_by"),
-    approvedAt: timestamp91("approved_at", { withTimezone: true }),
-    supersededAt: timestamp91("superseded_at", { withTimezone: true }),
-    supersededReason: text99("superseded_reason")
+    transitionIdempotencyKey: text100("transition_idempotency_key"),
+    createdBy: text100("created_by").notNull(),
+    createdAt: timestamp92("created_at", { withTimezone: true }).notNull().defaultNow(),
+    approvedBy: text100("approved_by"),
+    approvedAt: timestamp92("approved_at", { withTimezone: true }),
+    supersededAt: timestamp92("superseded_at", { withTimezone: true }),
+    supersededReason: text100("superseded_reason")
   },
   (table) => [
-    index86("conversion_proposals_project_idx").on(table.workspaceId, table.projectId, table.createdAt),
+    index87("conversion_proposals_project_idx").on(table.workspaceId, table.projectId, table.createdAt),
     unique8("conversion_proposals_idempotency_unique").on(table.projectId, table.idempotencyKey),
     foreignKey9({
       columns: [table.projectId, table.workspaceId],
@@ -29123,28 +29196,28 @@ var conversionProposals = pgTable98(
 
 // src/schema/conversion_briefs_issued.ts
 import { sql as sql27 } from "drizzle-orm";
-import { check as check8, foreignKey as foreignKey10, index as index87, jsonb as jsonb58, pgTable as pgTable99, text as text100, timestamp as timestamp92, unique as unique9, uuid as uuid6 } from "drizzle-orm/pg-core";
-var conversionBriefsIssued = pgTable99(
+import { check as check8, foreignKey as foreignKey10, index as index88, jsonb as jsonb59, pgTable as pgTable100, text as text101, timestamp as timestamp93, unique as unique9, uuid as uuid6 } from "drizzle-orm/pg-core";
+var conversionBriefsIssued = pgTable100(
   "conversion_briefs_issued",
   {
     id: uuid6("id").primaryKey().defaultRandom(),
-    workspaceId: text100("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text100("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text101("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text101("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     /** sha256 of the canonical brief — `briefDigest`, computed identically by the codemod. */
-    briefDigest: text100("brief_digest").notNull(),
+    briefDigest: text101("brief_digest").notNull(),
     /** `[{ route, scope, path, kind, locator? }]` — every bindable path the brief listed. */
-    paths: jsonb58("paths").notNull().default(sql27`'[]'::jsonb`),
+    paths: jsonb59("paths").notNull().default(sql27`'[]'::jsonb`),
     /**
      * The codemod's account of the run against THIS digest (`submit_conversion_receipt`): which
      * paths it rewrote, which it could not, and why. Null until one is submitted — a hand
      * conversion never submits one and still counts toward coverage.
      */
-    receipt: jsonb58("receipt"),
+    receipt: jsonb59("receipt"),
     /** The LAST time this pin was issued. What a retention sweep keys on. */
-    issuedAt: timestamp92("issued_at", { withTimezone: true }).notNull().defaultNow()
+    issuedAt: timestamp93("issued_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    index87("conversion_briefs_issued_project_issued_idx").on(table.projectId, table.issuedAt),
+    index88("conversion_briefs_issued_project_issued_idx").on(table.projectId, table.issuedAt),
     unique9("conversion_briefs_issued_digest_unique").on(table.projectId, table.briefDigest),
     foreignKey10({
       columns: [table.projectId, table.workspaceId],
@@ -29158,40 +29231,40 @@ var conversionBriefsIssued = pgTable99(
 
 // src/schema/binding_decisions.ts
 import { sql as sql28 } from "drizzle-orm";
-import { index as index88, jsonb as jsonb59, pgTable as pgTable100, smallint as smallint2, text as text101, timestamp as timestamp93, uniqueIndex as uniqueIndex44, uuid as uuid7 } from "drizzle-orm/pg-core";
+import { index as index89, jsonb as jsonb60, pgTable as pgTable101, smallint as smallint2, text as text102, timestamp as timestamp94, uniqueIndex as uniqueIndex45, uuid as uuid7 } from "drizzle-orm/pg-core";
 var BINDING_DECISION_OPS = ["bind", "code", "reject"];
 var BINDING_DECISION_STATES = ["stored", "materialized", "proven", "live", "lost"];
-var bindingDecisions = pgTable100(
+var bindingDecisions = pgTable101(
   "binding_decisions",
   {
     id: uuid7("id").primaryKey().defaultRandom(),
-    workspaceId: text101("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text101("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text102("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text102("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     /** `current` | `staging` (CHECK in the migration): the slot the decision's release lands in. */
-    slot: text101("slot").notNull(),
-    target: text101("target").notNull(),
+    slot: text102("slot").notNull(),
+    target: text102("target").notNull(),
     /** `bind` | `code` | `reject` | `rule` (CHECK; `rule` since 0467, archive sites), and the editable plan's answers since 0495 (`logo`, `chrome`, `reserved-input`, `kit-entry`, `brand-kit`, `body`). An `accept` is stored as the op it expands to. */
-    op: text101("op").notNull(),
-    payload: jsonb59("payload").$type().notNull().default(sql28`'{}'::jsonb`),
+    op: text102("op").notNull(),
+    payload: jsonb60("payload").$type().notNull().default(sql28`'{}'::jsonb`),
     /** `person` | `ai` (CHECK), from the request's write origin only. */
-    byKind: text101("by_kind").notNull(),
-    by: text101("by"),
+    byKind: text102("by_kind").notNull(),
+    by: text102("by"),
     /** `stored` | `materialized` | `proven` | `live` | `lost` (CHECK). */
-    state: text101("state").notNull().default("stored"),
+    state: text102("state").notNull().default("stored"),
     /** The `force` reason an AI gave over a person's decision. */
-    reason: text101("reason"),
+    reason: text102("reason"),
     receiptsSeen: smallint2("receipts_seen").notNull().default(0),
-    materializedSha: text101("materialized_sha"),
-    provenSha: text101("proven_sha"),
+    materializedSha: text102("materialized_sha"),
+    provenSha: text102("proven_sha"),
     /** Non-null: no longer live (replaced, overridden or cleared), kept as the record. */
-    supersededReason: text101("superseded_reason"),
-    createdAt: timestamp93("created_at").notNull().defaultNow(),
-    updatedAt: timestamp93("updated_at").notNull().defaultNow()
+    supersededReason: text102("superseded_reason"),
+    createdAt: timestamp94("created_at").notNull().defaultNow(),
+    updatedAt: timestamp94("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex44("binding_decisions_target_op_unique").on(t.projectId, t.slot, t.target, t.op),
-    uniqueIndex44("binding_decisions_live_target_unique").on(t.projectId, t.slot, t.target).where(sql28`superseded_reason IS NULL`),
-    index88("binding_decisions_project_slot_state_idx").on(t.projectId, t.slot, t.state)
+    uniqueIndex45("binding_decisions_target_op_unique").on(t.projectId, t.slot, t.target, t.op),
+    uniqueIndex45("binding_decisions_live_target_unique").on(t.projectId, t.slot, t.target).where(sql28`superseded_reason IS NULL`),
+    index89("binding_decisions_project_slot_state_idx").on(t.projectId, t.slot, t.state)
   ]
 );
 
@@ -29201,16 +29274,16 @@ import {
   bigint as bigint8,
   check as check9,
   foreignKey as foreignKey11,
-  index as index89,
-  integer as integer52,
-  jsonb as jsonb60,
-  pgTable as pgTable101,
-  text as text102,
-  timestamp as timestamp94,
+  index as index90,
+  integer as integer53,
+  jsonb as jsonb61,
+  pgTable as pgTable102,
+  text as text103,
+  timestamp as timestamp95,
   unique as unique10,
-  uniqueIndex as uniqueIndex45,
+  uniqueIndex as uniqueIndex46,
   uuid as uuid8,
-  varchar as varchar75
+  varchar as varchar76
 } from "drizzle-orm/pg-core";
 var VALIDATION_ENVELOPE_STATUSES = [
   "queued",
@@ -29223,51 +29296,51 @@ var VALIDATION_ENVELOPE_STATUSES = [
   "cancelled"
 ];
 var VALIDATION_LIVE_STATUSES = ["queued", "dispatched", "action_required"];
-var orchestrationValidationEnvelopes = pgTable101(
+var orchestrationValidationEnvelopes = pgTable102(
   "orchestration_validation_envelopes",
   {
     id: uuid8("id").primaryKey().defaultRandom(),
-    workspaceId: text102("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text102("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text103("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text103("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid8("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid8("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     /** Null until a receipt writer exists (Phase 6). The head below is pinned regardless. */
     receiptId: uuid8("receipt_id").references(() => orchestrationPullRequestReceipts.id, {
       onDelete: "set null"
     }),
-    receiptGeneration: integer52("receipt_generation").notNull().default(1),
+    receiptGeneration: integer53("receipt_generation").notNull().default(1),
     // The pinned tuple. Every field here is compared against returned evidence, and each mismatch
     // has its own error code — "wrong repository" and "wrong head" are different recoveries.
     repositoryId: bigint8("repository_id", { mode: "number" }).notNull(),
     pullRequestId: bigint8("pull_request_id", { mode: "number" }).notNull(),
-    pullRequestNumber: integer52("pull_request_number").notNull(),
+    pullRequestNumber: integer53("pull_request_number").notNull(),
     /** The exact commit this validation is about. A validation proves nothing about any other. */
-    headSha: varchar75("head_sha", { length: 64 }).notNull(),
-    baseSha: varchar75("base_sha", { length: 64 }).notNull(),
-    bindingDigest: varchar75("binding_digest", { length: 71 }).notNull(),
-    schemaHash: varchar75("schema_hash", { length: 64 }).notNull(),
-    brandContractHash: varchar75("brand_contract_hash", { length: 64 }).notNull(),
-    baselineDigest: varchar75("baseline_digest", { length: 71 }).notNull(),
-    toolchainHash: varchar75("toolchain_hash", { length: 64 }).notNull(),
-    validatorVersion: text102("validator_version").notNull(),
-    workflowSha256: varchar75("workflow_sha256", { length: 64 }).notNull(),
+    headSha: varchar76("head_sha", { length: 64 }).notNull(),
+    baseSha: varchar76("base_sha", { length: 64 }).notNull(),
+    bindingDigest: varchar76("binding_digest", { length: 71 }).notNull(),
+    schemaHash: varchar76("schema_hash", { length: 64 }).notNull(),
+    brandContractHash: varchar76("brand_contract_hash", { length: 64 }).notNull(),
+    baselineDigest: varchar76("baseline_digest", { length: 71 }).notNull(),
+    toolchainHash: varchar76("toolchain_hash", { length: 64 }).notNull(),
+    validatorVersion: text103("validator_version").notNull(),
+    workflowSha256: varchar76("workflow_sha256", { length: 64 }).notNull(),
     /** Digest only. The single-use credential itself is handed to the validator and never stored. */
-    nonceHash: varchar75("nonce_hash", { length: 64 }).notNull(),
-    nonceExpiresAt: timestamp94("nonce_expires_at", { withTimezone: true }).notNull(),
-    nonceConsumedAt: timestamp94("nonce_consumed_at", { withTimezone: true }),
-    status: varchar75("status", { length: 20 }).notNull().default("queued"),
-    errorCode: text102("error_code"),
-    errorMessage: text102("error_message"),
+    nonceHash: varchar76("nonce_hash", { length: 64 }).notNull(),
+    nonceExpiresAt: timestamp95("nonce_expires_at", { withTimezone: true }).notNull(),
+    nonceConsumedAt: timestamp95("nonce_consumed_at", { withTimezone: true }),
+    status: varchar76("status", { length: 20 }).notNull().default("queued"),
+    errorCode: text103("error_code"),
+    errorMessage: text103("error_message"),
     /** Composite-FK'd to (evidence.id, evidence.envelope_id) in 0273, so an envelope cannot be
      *  marked passed while pointing at a DIFFERENT envelope's evidence. */
     evidenceId: uuid8("evidence_id"),
     /** Written on pass, read by nothing. The unlock that consumes it is a later phase. */
-    attestationDigest: varchar75("attestation_digest", { length: 71 }),
-    dispatchedAt: timestamp94("dispatched_at", { withTimezone: true }),
+    attestationDigest: varchar76("attestation_digest", { length: 71 }),
+    dispatchedAt: timestamp95("dispatched_at", { withTimezone: true }),
     /** A retry is a NEW row with a NEW nonce, linked back — never a status reset on this one. */
     retryOf: uuid8("retry_of"),
-    createdAt: timestamp94("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp94("updated_at", { withTimezone: true }).notNull().defaultNow()
+    createdAt: timestamp95("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp95("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     unique10("orchestration_validation_envelopes_scope_unique").on(
@@ -29291,12 +29364,12 @@ var orchestrationValidationEnvelopes = pgTable101(
     }).onDelete("set null"),
     // One live envelope per (attempt, head): two validators can never both be authoritative for
     // the same commit. The index arbitrates, so no read-then-write can lose the race.
-    uniqueIndex45("orchestration_validation_envelopes_one_live_per_head").on(table.attemptId, table.headSha).where(sql29`status IN ('queued', 'dispatched', 'action_required')`),
-    index89("orchestration_validation_envelopes_attempt_idx").on(
+    uniqueIndex46("orchestration_validation_envelopes_one_live_per_head").on(table.attemptId, table.headSha).where(sql29`status IN ('queued', 'dispatched', 'action_required')`),
+    index90("orchestration_validation_envelopes_attempt_idx").on(
       table.attemptId,
       table.createdAt.desc()
     ),
-    index89("orchestration_validation_envelopes_sweep_idx").on(table.status, table.nonceExpiresAt).where(sql29`status IN ('queued', 'dispatched')`),
+    index90("orchestration_validation_envelopes_sweep_idx").on(table.status, table.nonceExpiresAt).where(sql29`status IN ('queued', 'dispatched')`),
     check9(
       "orchestration_validation_envelopes_status_check",
       sql29`${table.status} IN ('queued', 'dispatched', 'action_required', 'passed', 'failed', 'superseded', 'timed_out', 'cancelled')`
@@ -29312,28 +29385,28 @@ var orchestrationValidationEnvelopes = pgTable101(
     )
   ]
 );
-var orchestrationValidationEvidence = pgTable101(
+var orchestrationValidationEvidence = pgTable102(
   "orchestration_validation_evidence",
   {
     id: uuid8("id").primaryKey().defaultRandom(),
-    workspaceId: text102("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text102("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    workspaceId: text103("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text103("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     runId: uuid8("run_id").notNull().references(() => orchestrationRuns.id, { onDelete: "cascade" }),
     attemptId: uuid8("attempt_id").notNull().references(() => orchestrationImplementationAttempts.id, { onDelete: "cascade" }),
     envelopeId: uuid8("envelope_id").notNull().references(() => orchestrationValidationEnvelopes.id, { onDelete: "cascade" }),
-    headSha: varchar75("head_sha", { length: 64 }).notNull(),
-    evidenceDigest: varchar75("evidence_digest", { length: 71 }).notNull(),
-    artifactDigest: varchar75("artifact_digest", { length: 71 }).notNull(),
-    validatorVersion: text102("validator_version").notNull(),
+    headSha: varchar76("head_sha", { length: 64 }).notNull(),
+    evidenceDigest: varchar76("evidence_digest", { length: 71 }).notNull(),
+    artifactDigest: varchar76("artifact_digest", { length: 71 }).notNull(),
+    validatorVersion: text103("validator_version").notNull(),
     /** The BrandKit contract this evidence is filed under. 0273 ties it to
      *  `checks->brandKit->contractHash`, so a payload cannot claim a different one. Comparing it
      *  against the ENVELOPE's hash is an ingest check — a CHECK cannot reach another table. */
-    brandContractHash: varchar75("brand_contract_hash", { length: 64 }).notNull(),
-    status: varchar75("status", { length: 10 }).notNull(),
+    brandContractHash: varchar76("brand_contract_hash", { length: 64 }).notNull(),
+    status: varchar76("status", { length: 10 }).notNull(),
     /** brandKit / runtime / visual. The shape is enforced by CHECK in 0273, not by the writer. */
-    checks: jsonb60("checks").notNull(),
-    createdBy: text102("created_by"),
-    createdAt: timestamp94("created_at", { withTimezone: true }).notNull().defaultNow()
+    checks: jsonb61("checks").notNull(),
+    createdBy: text103("created_by"),
+    createdAt: timestamp95("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     unique10("orchestration_validation_evidence_scope_unique").on(
@@ -29360,7 +29433,7 @@ var orchestrationValidationEvidence = pgTable101(
       table.attemptId,
       table.evidenceDigest
     ),
-    index89("orchestration_validation_evidence_envelope_idx").on(table.envelopeId),
+    index90("orchestration_validation_evidence_envelope_idx").on(table.envelopeId),
     check9(
       "orchestration_validation_evidence_status_check",
       sql29`${table.status} IN ('passed', 'failed')`
@@ -29370,27 +29443,27 @@ var orchestrationValidationEvidence = pgTable101(
 
 // src/schema/orchestration_executor_grants.ts
 import { sql as sql30 } from "drizzle-orm";
-import { check as check10, foreignKey as foreignKey12, index as index90, integer as integer53, pgTable as pgTable102, text as text103, timestamp as timestamp95, unique as unique11, uniqueIndex as uniqueIndex46, uuid as uuid9, varchar as varchar76 } from "drizzle-orm/pg-core";
+import { check as check10, foreignKey as foreignKey12, index as index91, integer as integer54, pgTable as pgTable103, text as text104, timestamp as timestamp96, unique as unique11, uniqueIndex as uniqueIndex47, uuid as uuid9, varchar as varchar77 } from "drizzle-orm/pg-core";
 var EXECUTOR_GRANT_STATUSES = ["active", "revoked", "expired"];
-var orchestrationExecutorGrants = pgTable102(
+var orchestrationExecutorGrants = pgTable103(
   "orchestration_executor_grants",
   {
-    id: text103("id").primaryKey().default(sql30`gen_random_uuid()`),
-    workspaceId: text103("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text103("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    id: text104("id").primaryKey().default(sql30`gen_random_uuid()`),
+    workspaceId: text104("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text104("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     installationId: uuid9("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
     /** Digest only. The credential is returned once at mint and never stored. */
-    credentialHash: varchar76("credential_hash", { length: 64 }).notNull(),
-    credentialAudience: text103("credential_audience").notNull(),
-    credentialExpiresAt: timestamp95("credential_expires_at", { withTimezone: true }).notNull(),
+    credentialHash: varchar77("credential_hash", { length: 64 }).notNull(),
+    credentialAudience: text104("credential_audience").notNull(),
+    credentialExpiresAt: timestamp96("credential_expires_at", { withTimezone: true }).notNull(),
     /** The epoch this credential is valid for. A fenced session's credential dies before it expires. */
-    sessionEpoch: integer53("session_epoch").notNull(),
-    status: varchar76("status", { length: 16 }).notNull().default("active"),
-    revokedAt: timestamp95("revoked_at", { withTimezone: true }),
-    revokedBy: text103("revoked_by"),
-    createdBy: text103("created_by"),
-    createdAt: timestamp95("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp95("updated_at", { withTimezone: true }).notNull().defaultNow()
+    sessionEpoch: integer54("session_epoch").notNull(),
+    status: varchar77("status", { length: 16 }).notNull().default("active"),
+    revokedAt: timestamp96("revoked_at", { withTimezone: true }),
+    revokedBy: text104("revoked_by"),
+    createdBy: text104("created_by"),
+    createdAt: timestamp96("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp96("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
     unique11("orchestration_executor_grants_scope_unique").on(
@@ -29409,8 +29482,8 @@ var orchestrationExecutorGrants = pgTable102(
     }).onDelete("cascade"),
     // One live credential per installation. Two would mean two processes can each present a valid
     // one, and the exclusion argument collapses before the lease layer is reached.
-    uniqueIndex46("orchestration_executor_grants_one_active_per_installation").on(table.installationId).where(sql30`status = 'active'`),
-    index90("orchestration_executor_grants_credential_idx").on(table.workspaceId, table.credentialHash).where(sql30`status = 'active'`),
+    uniqueIndex47("orchestration_executor_grants_one_active_per_installation").on(table.installationId).where(sql30`status = 'active'`),
+    index91("orchestration_executor_grants_credential_idx").on(table.workspaceId, table.credentialHash).where(sql30`status = 'active'`),
     check10(
       "orchestration_executor_grants_status_check",
       sql30`${table.status} IN ('active', 'revoked', 'expired')`
@@ -29423,28 +29496,28 @@ var orchestrationExecutorGrants = pgTable102(
 );
 
 // src/schema/component_presets.ts
-import { pgTable as pgTable103, text as text104, varchar as varchar77, timestamp as timestamp96, jsonb as jsonb61, integer as integer54, index as index91, uniqueIndex as uniqueIndex47 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable104, text as text105, varchar as varchar78, timestamp as timestamp97, jsonb as jsonb62, integer as integer55, index as index92, uniqueIndex as uniqueIndex48 } from "drizzle-orm/pg-core";
 import { relations as relations16 } from "drizzle-orm";
-var componentPresets = pgTable103(
+var componentPresets = pgTable104(
   "component_presets",
   {
-    id: text104("id").primaryKey(),
-    workspaceId: text104("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    componentId: text104("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
-    name: varchar77("name", { length: 255 }).notNull(),
+    id: text105("id").primaryKey(),
+    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    componentId: text105("component_id").notNull().references(() => components.id, { onDelete: "cascade" }),
+    name: varchar78("name", { length: 255 }).notNull(),
     /** ^[a-z0-9-]+$, unique per component — stable across renames. */
-    slug: varchar77("slug", { length: 255 }).notNull(),
+    slug: varchar78("slug", { length: 255 }).notNull(),
     /** Prop key → value. Validated against the component's `props` on every write. */
-    values: jsonb61("values").$type().notNull().default({}),
-    position: integer54("position").notNull().default(0),
-    createdAt: timestamp96("created_at").notNull().defaultNow(),
-    updatedAt: timestamp96("updated_at").notNull().defaultNow(),
-    createdBy: text104("created_by"),
-    updatedBy: text104("updated_by")
+    values: jsonb62("values").$type().notNull().default({}),
+    position: integer55("position").notNull().default(0),
+    createdAt: timestamp97("created_at").notNull().defaultNow(),
+    updatedAt: timestamp97("updated_at").notNull().defaultNow(),
+    createdBy: text105("created_by"),
+    updatedBy: text105("updated_by")
   },
   (t) => [
-    index91("component_presets_component_position_idx").on(t.componentId, t.position, t.createdAt, t.id),
-    uniqueIndex47("component_presets_component_slug_key").on(t.componentId, t.slug)
+    index92("component_presets_component_position_idx").on(t.componentId, t.position, t.createdAt, t.id),
+    uniqueIndex48("component_presets_component_slug_key").on(t.componentId, t.slug)
   ]
 );
 var componentPresetsRelations = relations16(componentPresets, ({ one }) => ({
@@ -29457,15 +29530,15 @@ var componentPresetsRelations = relations16(componentPresets, ({ one }) => ({
 // src/schema/section_zones.ts
 import {
   foreignKey as foreignKey13,
-  index as index92,
-  integer as integer55,
-  jsonb as jsonb62,
-  pgTable as pgTable104,
-  text as text105,
-  timestamp as timestamp97,
+  index as index93,
+  integer as integer56,
+  jsonb as jsonb63,
+  pgTable as pgTable105,
+  text as text106,
+  timestamp as timestamp98,
   unique as unique12,
-  uniqueIndex as uniqueIndex48,
-  varchar as varchar78
+  uniqueIndex as uniqueIndex49,
+  varchar as varchar79
 } from "drizzle-orm/pg-core";
 import { sql as sql31 } from "drizzle-orm";
 var SECTION_IMPLEMENTATION_REQUEST_STATUSES = [
@@ -29476,15 +29549,15 @@ var SECTION_IMPLEMENTATION_REQUEST_STATUSES = [
   "passed",
   "failed"
 ];
-var sectionDefinitions = pgTable104(
+var sectionDefinitions = pgTable105(
   "section_definitions",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    apiId: varchar78("api_id", { length: 100 }).notNull(),
-    firstPublishedAt: timestamp97("first_published_at"),
-    archivedAt: timestamp97("archived_at"),
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    apiId: varchar79("api_id", { length: 100 }).notNull(),
+    firstPublishedAt: timestamp98("first_published_at"),
+    archivedAt: timestamp98("archived_at"),
     ...auditColumns
   },
   (table) => [
@@ -29494,24 +29567,24 @@ var sectionDefinitions = pgTable104(
       name: "section_definitions_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
     unique12("section_definitions_id_project_unique").on(table.id, table.projectId),
-    uniqueIndex48("section_definitions_project_api_id_unique").on(table.projectId, table.apiId),
-    index92("section_definitions_workspace_idx").on(table.workspaceId),
-    index92("section_definitions_project_idx").on(table.projectId)
+    uniqueIndex49("section_definitions_project_api_id_unique").on(table.projectId, table.apiId),
+    index93("section_definitions_workspace_idx").on(table.workspaceId),
+    index93("section_definitions_project_idx").on(table.projectId)
   ]
 );
-var sectionDefinitionVersions = pgTable104(
+var sectionDefinitionVersions = pgTable105(
   "section_definition_versions",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text105("section_definition_id").notNull(),
-    version: integer55("version").notNull(),
-    label: varchar78("label", { length: 255 }).notNull(),
-    fields: jsonb62("fields").$type().notNull().default([]),
-    schemaHash: varchar78("schema_hash", { length: 64 }).notNull(),
-    createdBy: text105("created_by"),
-    createdAt: timestamp97("created_at").notNull().defaultNow()
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text106("section_definition_id").notNull(),
+    version: integer56("version").notNull(),
+    label: varchar79("label", { length: 255 }).notNull(),
+    fields: jsonb63("fields").$type().notNull().default([]),
+    schemaHash: varchar79("schema_hash", { length: 64 }).notNull(),
+    createdBy: text106("created_by"),
+    createdAt: timestamp98("created_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey13({
@@ -29530,20 +29603,20 @@ var sectionDefinitionVersions = pgTable104(
       table.version,
       table.projectId
     ),
-    index92("section_definition_versions_project_idx").on(table.projectId)
+    index93("section_definition_versions_project_idx").on(table.projectId)
   ]
 );
-var sectionZones = pgTable104(
+var sectionZones = pgTable105(
   "section_zones",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    schemaKind: varchar78("schema_kind", { length: 20 }).$type().notNull(),
-    schemaId: text105("schema_id").notNull(),
-    fieldKey: varchar78("field_key", { length: 255 }).notNull(),
-    draftRevision: integer55("draft_revision").notNull().default(1),
-    publishedRevision: integer55("published_revision"),
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    schemaKind: varchar79("schema_kind", { length: 20 }).$type().notNull(),
+    schemaId: text106("schema_id").notNull(),
+    fieldKey: varchar79("field_key", { length: 255 }).notNull(),
+    draftRevision: integer56("draft_revision").notNull().default(1),
+    publishedRevision: integer56("published_revision"),
     ...auditColumns
   },
   (table) => [
@@ -29553,21 +29626,21 @@ var sectionZones = pgTable104(
       name: "section_zones_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
     unique12("section_zones_id_project_unique").on(table.id, table.projectId),
-    uniqueIndex48("section_zones_schema_owner_unique").on(table.projectId, table.schemaKind, table.schemaId),
-    index92("section_zones_workspace_idx").on(table.workspaceId)
+    uniqueIndex49("section_zones_schema_owner_unique").on(table.projectId, table.schemaKind, table.schemaId),
+    index93("section_zones_workspace_idx").on(table.workspaceId)
   ]
 );
-var sectionZoneAttachments = pgTable104(
+var sectionZoneAttachments = pgTable105(
   "section_zone_attachments",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    zoneId: text105("zone_id").notNull(),
-    sectionDefinitionId: text105("section_definition_id").notNull(),
-    draftVersion: integer55("draft_version").notNull(),
-    publishedVersion: integer55("published_version"),
-    position: integer55("position").notNull().default(0),
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    zoneId: text106("zone_id").notNull(),
+    sectionDefinitionId: text106("section_definition_id").notNull(),
+    draftVersion: integer56("draft_version").notNull(),
+    publishedVersion: integer56("published_version"),
+    position: integer56("position").notNull().default(0),
     ...auditColumns
   },
   (table) => [
@@ -29604,24 +29677,24 @@ var sectionZoneAttachments = pgTable104(
       ],
       name: "section_zone_attachments_published_version_fkey"
     }).onDelete("restrict"),
-    uniqueIndex48("section_zone_attachments_zone_definition_unique").on(table.zoneId, table.sectionDefinitionId),
-    index92("section_zone_attachments_zone_position_idx").on(table.zoneId, table.position, table.id)
+    uniqueIndex49("section_zone_attachments_zone_definition_unique").on(table.zoneId, table.sectionDefinitionId),
+    index93("section_zone_attachments_zone_position_idx").on(table.zoneId, table.position, table.id)
   ]
 );
-var sectionManifests = pgTable104(
+var sectionManifests = pgTable105(
   "section_manifests",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text105("section_definition_id").notNull(),
-    sectionVersion: integer55("section_version").notNull(),
-    apiId: varchar78("api_id", { length: 100 }).notNull(),
-    schemaHash: varchar78("schema_hash", { length: 64 }).notNull(),
-    commitSha: varchar78("commit_sha", { length: 64 }).notNull(),
-    manifest: jsonb62("manifest").$type().notNull(),
-    createdBy: text105("created_by"),
-    createdAt: timestamp97("created_at").notNull().defaultNow()
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text106("section_definition_id").notNull(),
+    sectionVersion: integer56("section_version").notNull(),
+    apiId: varchar79("api_id", { length: 100 }).notNull(),
+    schemaHash: varchar79("schema_hash", { length: 64 }).notNull(),
+    commitSha: varchar79("commit_sha", { length: 64 }).notNull(),
+    manifest: jsonb63("manifest").$type().notNull(),
+    createdBy: text106("created_by"),
+    createdAt: timestamp98("created_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey13({
@@ -29639,26 +29712,26 @@ var sectionManifests = pgTable104(
       name: "section_manifests_definition_version_project_fkey"
     }).onDelete("cascade"),
     unique12("section_manifests_id_project_unique").on(table.id, table.projectId),
-    index92("section_manifests_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
+    index93("section_manifests_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
   ]
 );
-var sectionValidationRuns = pgTable104(
+var sectionValidationRuns = pgTable105(
   "section_validation_runs",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text105("section_definition_id").notNull(),
-    sectionVersion: integer55("section_version").notNull(),
-    manifestId: text105("manifest_id").notNull(),
-    status: varchar78("status", { length: 20 }).$type().notNull(),
-    schemaHash: varchar78("schema_hash", { length: 64 }).notNull(),
-    commitSha: varchar78("commit_sha", { length: 64 }).notNull(),
-    fixtureHash: varchar78("fixture_hash", { length: 64 }).notNull(),
-    evidenceDigest: varchar78("evidence_digest", { length: 128 }).notNull(),
-    results: jsonb62("results").$type().notNull(),
-    createdBy: text105("created_by"),
-    createdAt: timestamp97("created_at").notNull().defaultNow()
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text106("section_definition_id").notNull(),
+    sectionVersion: integer56("section_version").notNull(),
+    manifestId: text106("manifest_id").notNull(),
+    status: varchar79("status", { length: 20 }).$type().notNull(),
+    schemaHash: varchar79("schema_hash", { length: 64 }).notNull(),
+    commitSha: varchar79("commit_sha", { length: 64 }).notNull(),
+    fixtureHash: varchar79("fixture_hash", { length: 64 }).notNull(),
+    evidenceDigest: varchar79("evidence_digest", { length: 128 }).notNull(),
+    results: jsonb63("results").$type().notNull(),
+    createdBy: text106("created_by"),
+    createdAt: timestamp98("created_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey13({
@@ -29681,25 +29754,25 @@ var sectionValidationRuns = pgTable104(
       name: "section_validation_runs_manifest_project_fkey"
     }).onDelete("restrict"),
     unique12("section_validation_runs_id_project_unique").on(table.id, table.projectId),
-    index92("section_validation_runs_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
+    index93("section_validation_runs_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
   ]
 );
-var sectionVisualApprovals = pgTable104(
+var sectionVisualApprovals = pgTable105(
   "section_visual_approvals",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text105("section_definition_id").notNull(),
-    sectionVersion: integer55("section_version").notNull(),
-    manifestId: text105("manifest_id").notNull(),
-    validationRunId: text105("validation_run_id").notNull(),
-    schemaHash: varchar78("schema_hash", { length: 64 }).notNull(),
-    commitSha: varchar78("commit_sha", { length: 64 }).notNull(),
-    fixtureHash: varchar78("fixture_hash", { length: 64 }).notNull(),
-    evidenceDigest: varchar78("evidence_digest", { length: 128 }).notNull(),
-    approvedBy: text105("approved_by").notNull(),
-    createdAt: timestamp97("created_at").notNull().defaultNow()
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text106("section_definition_id").notNull(),
+    sectionVersion: integer56("section_version").notNull(),
+    manifestId: text106("manifest_id").notNull(),
+    validationRunId: text106("validation_run_id").notNull(),
+    schemaHash: varchar79("schema_hash", { length: 64 }).notNull(),
+    commitSha: varchar79("commit_sha", { length: 64 }).notNull(),
+    fixtureHash: varchar79("fixture_hash", { length: 64 }).notNull(),
+    evidenceDigest: varchar79("evidence_digest", { length: 128 }).notNull(),
+    approvedBy: text106("approved_by").notNull(),
+    createdAt: timestamp98("created_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey13({
@@ -29726,36 +29799,36 @@ var sectionVisualApprovals = pgTable104(
       foreignColumns: [sectionValidationRuns.id, sectionValidationRuns.projectId],
       name: "section_visual_approvals_validation_project_fkey"
     }).onDelete("restrict"),
-    index92("section_visual_approvals_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
+    index93("section_visual_approvals_definition_version_idx").on(table.sectionDefinitionId, table.sectionVersion, table.createdAt)
   ]
 );
-var sectionImplementationRequests = pgTable104(
+var sectionImplementationRequests = pgTable105(
   "section_implementation_requests",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    sectionDefinitionId: text105("section_definition_id").notNull(),
-    sectionVersion: integer55("section_version").notNull(),
-    provider: varchar78("provider", { length: 20 }).$type().notNull(),
-    status: varchar78("status", { length: 20 }).$type().notNull().default("queued"),
-    schemaHash: varchar78("schema_hash", { length: 64 }).notNull(),
-    targetCommitSha: varchar78("target_commit_sha", { length: 64 }),
-    providerRunId: varchar78("provider_run_id", { length: 255 }),
-    providerRunUrl: text105("provider_run_url"),
-    manifestId: text105("manifest_id"),
-    validationRunId: text105("validation_run_id"),
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    sectionDefinitionId: text106("section_definition_id").notNull(),
+    sectionVersion: integer56("section_version").notNull(),
+    provider: varchar79("provider", { length: 20 }).$type().notNull(),
+    status: varchar79("status", { length: 20 }).$type().notNull().default("queued"),
+    schemaHash: varchar79("schema_hash", { length: 64 }).notNull(),
+    targetCommitSha: varchar79("target_commit_sha", { length: 64 }),
+    providerRunId: varchar79("provider_run_id", { length: 255 }),
+    providerRunUrl: text106("provider_run_url"),
+    manifestId: text106("manifest_id"),
+    validationRunId: text106("validation_run_id"),
     /** SHA-256 of the request-scoped GitHub callback bearer. The plaintext is never persisted. */
-    callbackTokenHash: varchar78("callback_token_hash", { length: 64 }),
-    requestedBy: text105("requested_by").notNull(),
-    claimedBy: text105("claimed_by"),
-    errorCode: varchar78("error_code", { length: 100 }),
-    errorMessage: text105("error_message"),
-    dispatchedAt: timestamp97("dispatched_at"),
-    startedAt: timestamp97("started_at"),
-    completedAt: timestamp97("completed_at"),
-    createdAt: timestamp97("created_at").notNull().defaultNow(),
-    updatedAt: timestamp97("updated_at").notNull().defaultNow()
+    callbackTokenHash: varchar79("callback_token_hash", { length: 64 }),
+    requestedBy: text106("requested_by").notNull(),
+    claimedBy: text106("claimed_by"),
+    errorCode: varchar79("error_code", { length: 100 }),
+    errorMessage: text106("error_message"),
+    dispatchedAt: timestamp98("dispatched_at"),
+    startedAt: timestamp98("started_at"),
+    completedAt: timestamp98("completed_at"),
+    createdAt: timestamp98("created_at").notNull().defaultNow(),
+    updatedAt: timestamp98("updated_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey13({
@@ -29783,21 +29856,21 @@ var sectionImplementationRequests = pgTable104(
       name: "section_implementation_requests_validation_project_fkey"
     }).onDelete("restrict"),
     unique12("section_implementation_requests_id_project_unique").on(table.id, table.projectId),
-    uniqueIndex48("section_implementation_requests_one_active_unique").on(table.projectId, table.sectionDefinitionId, table.sectionVersion, table.schemaHash).where(sql31`${table.status} IN ('queued', 'dispatching', 'dispatched', 'running')`),
-    index92("section_implementation_requests_project_created_idx").on(table.projectId, table.createdAt)
+    uniqueIndex49("section_implementation_requests_one_active_unique").on(table.projectId, table.sectionDefinitionId, table.sectionVersion, table.schemaHash).where(sql31`${table.status} IN ('queued', 'dispatching', 'dispatched', 'running')`),
+    index93("section_implementation_requests_project_created_idx").on(table.projectId, table.createdAt)
   ]
 );
-var sectionZoneReleases = pgTable104(
+var sectionZoneReleases = pgTable105(
   "section_zone_releases",
   {
-    id: text105("id").primaryKey(),
-    workspaceId: text105("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
-    projectId: text105("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-    zoneId: text105("zone_id").notNull(),
-    revision: integer55("revision").notNull(),
-    snapshot: jsonb62("snapshot").$type().notNull(),
-    publishedBy: text105("published_by").notNull(),
-    publishedAt: timestamp97("published_at").notNull().defaultNow()
+    id: text106("id").primaryKey(),
+    workspaceId: text106("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
+    projectId: text106("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+    zoneId: text106("zone_id").notNull(),
+    revision: integer56("revision").notNull(),
+    snapshot: jsonb63("snapshot").$type().notNull(),
+    publishedBy: text106("published_by").notNull(),
+    publishedAt: timestamp98("published_at").notNull().defaultNow()
   },
   (table) => [
     foreignKey13({
@@ -29811,12 +29884,12 @@ var sectionZoneReleases = pgTable104(
       name: "section_zone_releases_zone_project_fkey"
     }).onDelete("cascade"),
     unique12("section_zone_releases_zone_revision_unique").on(table.zoneId, table.revision),
-    index92("section_zone_releases_project_published_idx").on(table.projectId, table.publishedAt)
+    index93("section_zone_releases_project_published_idx").on(table.projectId, table.publishedAt)
   ]
 );
 
 // src/schema/content_locks.ts
-import { check as check11, index as index93, jsonb as jsonb63, pgTable as pgTable105, text as text106, timestamp as timestamp98 } from "drizzle-orm/pg-core";
+import { check as check11, index as index94, jsonb as jsonb64, pgTable as pgTable106, text as text107, timestamp as timestamp99 } from "drizzle-orm/pg-core";
 import { sql as sql32 } from "drizzle-orm";
 var CONTENT_LOCK_TARGET_KINDS = [
   "page",
@@ -29825,30 +29898,30 @@ var CONTENT_LOCK_TARGET_KINDS = [
   "component_definition"
 ];
 var CONTENT_LOCK_MODES = ["all", "agents"];
-var contentLocks = pgTable105(
+var contentLocks = pgTable106(
   "content_locks",
   {
-    id: text106("id").primaryKey(),
-    workspaceId: text106("workspace_id").notNull(),
-    projectId: text106("project_id").notNull(),
-    targetKind: text106("target_kind").$type().notNull(),
-    targetId: text106("target_id").notNull(),
-    blockId: text106("block_id"),
+    id: text107("id").primaryKey(),
+    workspaceId: text107("workspace_id").notNull(),
+    projectId: text107("project_id").notNull(),
+    targetKind: text107("target_kind").$type().notNull(),
+    targetId: text107("target_id").notNull(),
+    blockId: text107("block_id"),
     // Deterministic structural path plus block ancestry captured when the lock is created.
     // Nullable so Wave 5 remains compatible with locks created before this fingerprint existed.
-    blockFingerprint: jsonb63("block_fingerprint").$type(),
-    fieldPath: text106("field_path").array(),
-    mode: text106("mode").$type().notNull().default("all"),
-    reason: text106("reason"),
-    createdBy: text106("created_by").notNull(),
-    createdAt: timestamp98("created_at").notNull().defaultNow(),
-    releasedBy: text106("released_by"),
-    releasedAt: timestamp98("released_at")
+    blockFingerprint: jsonb64("block_fingerprint").$type(),
+    fieldPath: text107("field_path").array(),
+    mode: text107("mode").$type().notNull().default("all"),
+    reason: text107("reason"),
+    createdBy: text107("created_by").notNull(),
+    createdAt: timestamp99("created_at").notNull().defaultNow(),
+    releasedBy: text107("released_by"),
+    releasedAt: timestamp99("released_at")
   },
   (table) => [
-    index93("content_locks_workspace_idx").on(table.workspaceId),
-    index93("content_locks_project_idx").on(table.projectId),
-    index93("content_locks_target_idx").on(table.targetKind, table.targetId).where(sql32`${table.releasedAt} IS NULL`),
+    index94("content_locks_workspace_idx").on(table.workspaceId),
+    index94("content_locks_project_idx").on(table.projectId),
+    index94("content_locks_target_idx").on(table.targetKind, table.targetId).where(sql32`${table.releasedAt} IS NULL`),
     check11("content_locks_target_kind_check", sql32`${table.targetKind} IN ('page','content_entry','singleton_entry','component_definition')`),
     check11("content_locks_mode_check", sql32`${table.mode} IN ('all','agents')`)
     // `content_locks_shape_check` lives in migration 0192 ONLY: it calls
@@ -29864,75 +29937,75 @@ var contentLocks = pgTable105(
 
 // src/schema/project_transfers.ts
 import {
-  pgTable as pgTable106,
-  text as text107,
-  varchar as varchar79,
-  timestamp as timestamp99,
-  index as index94,
-  uniqueIndex as uniqueIndex49
+  pgTable as pgTable107,
+  text as text108,
+  varchar as varchar80,
+  timestamp as timestamp100,
+  index as index95,
+  uniqueIndex as uniqueIndex50
 } from "drizzle-orm/pg-core";
 import { sql as sql33 } from "drizzle-orm";
-var projectTransfers = pgTable106(
+var projectTransfers = pgTable107(
   "project_transfers",
   {
-    id: text107("id").primaryKey(),
+    id: text108("id").primaryKey(),
     // nanoid
-    token: text107("token").notNull(),
+    token: text108("token").notNull(),
     // nanoid(32) — recipient handshake / magic link
-    status: varchar79("status", { length: 20 }).notNull().default("pending"),
+    status: varchar80("status", { length: 20 }).notNull().default("pending"),
     // pending | accepted (transient) | completed | declined | cancelled | expired | failed
-    projectId: text107("project_id").notNull(),
+    projectId: text108("project_id").notNull(),
     // FK → projects.id (ON DELETE CASCADE, via migration)
-    fromWorkspaceId: text107("from_workspace_id").notNull(),
+    fromWorkspaceId: text108("from_workspace_id").notNull(),
     // FK → workspaces.id (source)
-    toWorkspaceId: text107("to_workspace_id"),
+    toWorkspaceId: text108("to_workspace_id"),
     // FK → workspaces.id — resolved at accept (null while pending)
-    initiatedBy: text107("initiated_by").notNull(),
+    initiatedBy: text108("initiated_by").notNull(),
     // FK → users.id (source owner)
-    recipientEmail: varchar79("recipient_email", { length: 255 }).notNull(),
+    recipientEmail: varchar80("recipient_email", { length: 255 }).notNull(),
     // lowercased
-    note: text107("note"),
+    note: text108("note"),
     // optional message to the recipient
-    resolvedAt: timestamp99("resolved_at"),
+    resolvedAt: timestamp100("resolved_at"),
     // set on accept/decline/cancel/expire
-    resolvedBy: text107("resolved_by"),
+    resolvedBy: text108("resolved_by"),
     // FK → users.id (accepter/decliner/canceller)
-    error: text107("error"),
+    error: text108("error"),
     // failure detail when status='failed'
-    expiresAt: timestamp99("expires_at").notNull(),
+    expiresAt: timestamp100("expires_at").notNull(),
     // createdAt + 7d
-    createdAt: timestamp99("created_at").notNull().defaultNow(),
-    updatedAt: timestamp99("updated_at").notNull().defaultNow()
+    createdAt: timestamp100("created_at").notNull().defaultNow(),
+    updatedAt: timestamp100("updated_at").notNull().defaultNow()
   },
   (table) => [
     // At most one OPEN transfer per project. Partial-unique so completed/declined/
     // cancelled/expired/failed rows never wedge a re-initiation.
-    uniqueIndex49("project_transfers_one_pending_idx").on(table.projectId).where(sql33`${table.status} = 'pending'`),
+    uniqueIndex50("project_transfers_one_pending_idx").on(table.projectId).where(sql33`${table.status} = 'pending'`),
     // Recipient inbox lookup (GET /me/transfers by email + status).
-    index94("project_transfers_recipient_idx").on(
+    index95("project_transfers_recipient_idx").on(
       table.recipientEmail,
       table.status
     ),
     // Source-side list (GET /projects/:id/transfers) + cancel.
-    index94("project_transfers_from_ws_idx").on(table.fromWorkspaceId),
-    index94("project_transfers_project_idx").on(table.projectId),
+    index95("project_transfers_from_ws_idx").on(table.fromWorkspaceId),
+    index95("project_transfers_project_idx").on(table.projectId),
     // Magic-link resolution.
-    uniqueIndex49("project_transfers_token_idx").on(table.token),
+    uniqueIndex50("project_transfers_token_idx").on(table.token),
     // Expiry sweep — only pending rows are ever candidates.
-    index94("project_transfers_expires_idx").on(table.expiresAt).where(sql33`${table.status} = 'pending'`)
+    index95("project_transfers_expires_idx").on(table.expiresAt).where(sql33`${table.status} = 'pending'`)
   ]
 );
 
 // src/schema/backups.ts
 import {
-  pgTable as pgTable107,
-  text as text108,
-  varchar as varchar80,
-  integer as integer56,
+  pgTable as pgTable108,
+  text as text109,
+  varchar as varchar81,
+  integer as integer57,
   bigint as bigint9,
-  jsonb as jsonb64,
-  timestamp as timestamp100,
-  index as index95
+  jsonb as jsonb65,
+  timestamp as timestamp101,
+  index as index96
 } from "drizzle-orm/pg-core";
 var FULL_BACKUP_SCOPE = {
   content: true,
@@ -29941,315 +30014,315 @@ var FULL_BACKUP_SCOPE = {
   submissions: true,
   analytics: true
 };
-var backups = pgTable107(
+var backups = pgTable108(
   "backups",
   {
-    id: text108("id").primaryKey(),
+    id: text109("id").primaryKey(),
     // nanoid
-    workspaceId: text108("workspace_id").notNull(),
+    workspaceId: text109("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text108("project_id").notNull(),
+    projectId: text109("project_id").notNull(),
     // FK → projects.id
-    name: varchar80("name", { length: 255 }).notNull(),
-    source: varchar80("source", { length: 20 }).notNull().default("manual"),
-    status: varchar80("status", { length: 20 }).notNull().default("pending"),
-    manifestKey: text108("manifest_key"),
+    name: varchar81("name", { length: 255 }).notNull(),
+    source: varchar81("source", { length: 20 }).notNull().default("manual"),
+    status: varchar81("status", { length: 20 }).notNull().default("pending"),
+    manifestKey: text109("manifest_key"),
     // R2 key of the gzipped manifest; NULL until ready
-    manifestVersion: integer56("manifest_version").notNull().default(1),
+    manifestVersion: integer57("manifest_version").notNull().default(1),
     // forward-compat
     sizeBytes: bigint9("size_bytes", { mode: "number" }),
-    counts: jsonb64("counts").$type().notNull().default({}),
+    counts: jsonb65("counts").$type().notNull().default({}),
     // R2 object keys this snapshot references. Powers the media-GC hold:
     // `list_backup_referenced_media_keys()` keeps these keys alive while the
     // backup is live, so a restore never finds a garbage-collected object.
-    mediaKeys: jsonb64("media_keys").$type().notNull().default([]),
-    scope: jsonb64("scope").$type().notNull().default(FULL_BACKUP_SCOPE),
-    error: text108("error"),
-    createdBy: text108("created_by"),
+    mediaKeys: jsonb65("media_keys").$type().notNull().default([]),
+    scope: jsonb65("scope").$type().notNull().default(FULL_BACKUP_SCOPE),
+    error: text109("error"),
+    createdBy: text109("created_by"),
     // FK → users(id); NULL = system-initiated
-    createdAt: timestamp100("created_at").notNull().defaultNow(),
-    readyAt: timestamp100("ready_at"),
-    expiresAt: timestamp100("expires_at"),
+    createdAt: timestamp101("created_at").notNull().defaultNow(),
+    readyAt: timestamp101("ready_at"),
+    expiresAt: timestamp101("expires_at"),
     // retention horizon; NULL = keep until count-pruned
-    deletedAt: timestamp100("deleted_at")
+    deletedAt: timestamp101("deleted_at")
   },
   (t) => [
-    index95("backups_project_idx").on(t.projectId, t.createdAt),
-    index95("backups_workspace_idx").on(t.workspaceId)
+    index96("backups_project_idx").on(t.projectId, t.createdAt),
+    index96("backups_workspace_idx").on(t.workspaceId)
   ]
 );
 
 // src/schema/backup_jobs.ts
 import {
-  pgTable as pgTable108,
-  text as text109,
-  varchar as varchar81,
-  integer as integer57,
-  jsonb as jsonb65,
-  timestamp as timestamp101,
-  index as index96
+  pgTable as pgTable109,
+  text as text110,
+  varchar as varchar82,
+  integer as integer58,
+  jsonb as jsonb66,
+  timestamp as timestamp102,
+  index as index97
 } from "drizzle-orm/pg-core";
-var backupJobs = pgTable108(
+var backupJobs = pgTable109(
   "backup_jobs",
   {
-    id: text109("id").primaryKey(),
+    id: text110("id").primaryKey(),
     // nanoid
-    workspaceId: text109("workspace_id").notNull(),
-    projectId: text109("project_id").notNull(),
+    workspaceId: text110("workspace_id").notNull(),
+    projectId: text110("project_id").notNull(),
     // create → the pending backups.id this job fills; restore → the source backup.
-    backupId: text109("backup_id"),
-    operation: varchar81("operation", { length: 16 }).notNull(),
-    status: varchar81("status", { length: 16 }).notNull().default("pending"),
-    progress: integer57("progress").notNull().default(0),
+    backupId: text110("backup_id"),
+    operation: varchar82("operation", { length: 16 }).notNull(),
+    status: varchar82("status", { length: 16 }).notNull().default("pending"),
+    progress: integer58("progress").notNull().default(0),
     // 0–100
-    workingSince: timestamp101("working_since", { withTimezone: true }),
-    attempts: integer57("attempts").notNull().default(0),
-    error: text109("error"),
-    payload: jsonb65("payload").$type().notNull().default({}),
-    createdAt: timestamp101("created_at").notNull().defaultNow(),
-    updatedAt: timestamp101("updated_at").notNull().defaultNow()
+    workingSince: timestamp102("working_since", { withTimezone: true }),
+    attempts: integer58("attempts").notNull().default(0),
+    error: text110("error"),
+    payload: jsonb66("payload").$type().notNull().default({}),
+    createdAt: timestamp102("created_at").notNull().defaultNow(),
+    updatedAt: timestamp102("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index96("backup_jobs_drain_idx").on(t.status, t.createdAt),
-    index96("backup_jobs_project_idx").on(t.projectId)
+    index97("backup_jobs_drain_idx").on(t.status, t.createdAt),
+    index97("backup_jobs_project_idx").on(t.projectId)
   ]
 );
 
 // src/schema/clone_links.ts
-import { pgTable as pgTable109, text as text110, boolean as boolean33, jsonb as jsonb66, timestamp as timestamp102, index as index97 } from "drizzle-orm/pg-core";
-var cloneLinks = pgTable109(
+import { pgTable as pgTable110, text as text111, boolean as boolean33, jsonb as jsonb67, timestamp as timestamp103, index as index98 } from "drizzle-orm/pg-core";
+var cloneLinks = pgTable110(
   "clone_links",
   {
-    id: text110("id").primaryKey(),
+    id: text111("id").primaryKey(),
     // nanoid
-    workspaceId: text110("workspace_id").notNull(),
+    workspaceId: text111("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text110("project_id").notNull(),
+    projectId: text111("project_id").notNull(),
     // FK → projects.id
-    token: text110("token").notNull(),
+    token: text111("token").notNull(),
     // public share token (nanoid); unique among active links
     enabled: boolean33("enabled").notNull().default(true),
-    scope: jsonb66("scope").$type().notNull(),
-    createdBy: text110("created_by"),
+    scope: jsonb67("scope").$type().notNull(),
+    createdBy: text111("created_by"),
     // FK → users(id); NULL = system-initiated
-    createdAt: timestamp102("created_at").notNull().defaultNow(),
-    updatedAt: timestamp102("updated_at").notNull().defaultNow(),
-    revokedAt: timestamp102("revoked_at")
+    createdAt: timestamp103("created_at").notNull().defaultNow(),
+    updatedAt: timestamp103("updated_at").notNull().defaultNow(),
+    revokedAt: timestamp103("revoked_at")
     // set when the link is rotated/disabled
   },
   (t) => [
-    index97("clone_links_project_idx").on(t.projectId),
-    index97("clone_links_workspace_idx").on(t.workspaceId)
+    index98("clone_links_project_idx").on(t.projectId),
+    index98("clone_links_workspace_idx").on(t.workspaceId)
   ]
 );
 
 // src/schema/clone_jobs.ts
-import { pgTable as pgTable110, text as text111, varchar as varchar82, integer as integer58, jsonb as jsonb67, timestamp as timestamp103, index as index98, uniqueIndex as uniqueIndex50 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable111, text as text112, varchar as varchar83, integer as integer59, jsonb as jsonb68, timestamp as timestamp104, index as index99, uniqueIndex as uniqueIndex51 } from "drizzle-orm/pg-core";
 import { sql as sql34 } from "drizzle-orm";
-var cloneJobs = pgTable110(
+var cloneJobs = pgTable111(
   "clone_jobs",
   {
-    id: text111("id").primaryKey(),
+    id: text112("id").primaryKey(),
     // nanoid
-    workspaceId: text111("workspace_id").notNull(),
+    workspaceId: text112("workspace_id").notNull(),
     // = targetWorkspaceId (RLS scope)
-    sourceProjectId: text111("source_project_id").notNull(),
-    sourceWorkspaceId: text111("source_workspace_id").notNull(),
-    targetProjectId: text111("target_project_id"),
+    sourceProjectId: text112("source_project_id").notNull(),
+    sourceWorkspaceId: text112("source_workspace_id").notNull(),
+    targetProjectId: text112("target_project_id"),
     // stamped on success
-    requestedName: varchar82("requested_name", { length: 255 }),
-    requestedSlug: varchar82("requested_slug", { length: 255 }),
-    status: varchar82("status", { length: 16 }).notNull().default("pending"),
-    progress: integer58("progress").notNull().default(0),
+    requestedName: varchar83("requested_name", { length: 255 }),
+    requestedSlug: varchar83("requested_slug", { length: 255 }),
+    status: varchar83("status", { length: 16 }).notNull().default("pending"),
+    progress: integer59("progress").notNull().default(0),
     // 0–100
-    workingSince: timestamp103("working_since", { withTimezone: true }),
-    attempts: integer58("attempts").notNull().default(0),
-    error: text111("error"),
-    payload: jsonb67("payload").$type().notNull().default({}),
+    workingSince: timestamp104("working_since", { withTimezone: true }),
+    attempts: integer59("attempts").notNull().default(0),
+    error: text112("error"),
+    payload: jsonb68("payload").$type().notNull().default({}),
     // Which post-clone work the drain owes a finished job. 'clone' = none, today's behaviour.
     // Migration 0343.
-    purpose: varchar82("purpose", { length: 32 }).notNull().default("clone"),
-    initiatedBy: text111("initiated_by"),
+    purpose: varchar83("purpose", { length: 32 }).notNull().default("clone"),
+    initiatedBy: text112("initiated_by"),
     // FK → users(id); NULL = system/agent
-    createdAt: timestamp103("created_at").notNull().defaultNow(),
-    updatedAt: timestamp103("updated_at").notNull().defaultNow()
+    createdAt: timestamp104("created_at").notNull().defaultNow(),
+    updatedAt: timestamp104("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index98("clone_jobs_drain_idx").on(t.status, t.createdAt),
-    index98("clone_jobs_workspace_idx").on(t.workspaceId),
+    index99("clone_jobs_drain_idx").on(t.status, t.createdAt),
+    index99("clone_jobs_workspace_idx").on(t.workspaceId),
     // One unfinished hybrid→headless switch per source (0343). The route maps its 23505 to
     // SWITCH_ALREADY_PENDING.
-    uniqueIndex50("clone_jobs_mode_switch_active_uniq").on(t.sourceProjectId).where(sql34`${t.purpose} = 'mode_switch' AND ${t.status} IN ('pending', 'working')`)
+    uniqueIndex51("clone_jobs_mode_switch_active_uniq").on(t.sourceProjectId).where(sql34`${t.purpose} = 'mode_switch' AND ${t.status} IN ('pending', 'working')`)
   ]
 );
 
 // src/schema/project_branches.ts
 import {
   primaryKey as primaryKey11,
-  pgTable as pgTable111,
-  text as text112,
-  varchar as varchar83,
-  timestamp as timestamp104,
-  index as index99,
-  uniqueIndex as uniqueIndex51
+  pgTable as pgTable112,
+  text as text113,
+  varchar as varchar84,
+  timestamp as timestamp105,
+  index as index100,
+  uniqueIndex as uniqueIndex52
 } from "drizzle-orm/pg-core";
 import { sql as sql35 } from "drizzle-orm";
-var projectBranches = pgTable111(
+var projectBranches = pgTable112(
   "project_branches",
   {
-    id: text112("id").primaryKey(),
-    workspaceId: text112("workspace_id").notNull(),
-    projectId: text112("project_id").notNull(),
-    name: varchar83("name", { length: 80 }).notNull(),
-    slug: varchar83("slug", { length: 80 }).notNull(),
-    parentBranchId: text112("parent_branch_id"),
-    status: varchar83("status", { length: 16 }).$type().notNull().default("open"),
-    appliedAt: timestamp104("applied_at"),
-    abandonedAt: timestamp104("abandoned_at"),
+    id: text113("id").primaryKey(),
+    workspaceId: text113("workspace_id").notNull(),
+    projectId: text113("project_id").notNull(),
+    name: varchar84("name", { length: 80 }).notNull(),
+    slug: varchar84("slug", { length: 80 }).notNull(),
+    parentBranchId: text113("parent_branch_id"),
+    status: varchar84("status", { length: 16 }).$type().notNull().default("open"),
+    appliedAt: timestamp105("applied_at"),
+    abandonedAt: timestamp105("abandoned_at"),
     /** Set while an Apply/Pull runs (0374); a second one is refused. Stale after five minutes. */
-    applyingAt: timestamp104("applying_at"),
+    applyingAt: timestamp105("applying_at"),
     ...auditColumns
   },
   (t) => [
-    index99("project_branches_project_idx").on(t.projectId),
-    uniqueIndex51("project_branches_project_slug_open_idx").on(t.projectId, t.slug).where(sql35`${t.status} = 'open'`)
+    index100("project_branches_project_idx").on(t.projectId),
+    uniqueIndex52("project_branches_project_slug_open_idx").on(t.projectId, t.slug).where(sql35`${t.status} = 'open'`)
   ]
 );
-var branchRowSyncs = pgTable111(
+var branchRowSyncs = pgTable112(
   "branch_row_syncs",
   {
-    workspaceId: text112("workspace_id").notNull(),
-    projectId: text112("project_id").notNull(),
-    branchId: text112("branch_id").notNull(),
-    kind: text112("kind").notNull(),
-    parentRowId: text112("parent_row_id").notNull(),
-    syncedAt: timestamp104("synced_at").notNull().defaultNow()
+    workspaceId: text113("workspace_id").notNull(),
+    projectId: text113("project_id").notNull(),
+    branchId: text113("branch_id").notNull(),
+    kind: text113("kind").notNull(),
+    parentRowId: text113("parent_row_id").notNull(),
+    syncedAt: timestamp105("synced_at").notNull().defaultNow()
   },
   (t) => [
     primaryKey11({ columns: [t.branchId, t.kind, t.parentRowId] }),
-    index99("branch_row_syncs_project_idx").on(t.projectId)
+    index100("branch_row_syncs_project_idx").on(t.projectId)
   ]
 );
 
 // src/schema/branch_preview_share.ts
-import { pgTable as pgTable112, text as text113, boolean as boolean34, timestamp as timestamp105, index as index100, uniqueIndex as uniqueIndex52 } from "drizzle-orm/pg-core";
-var branchPreviewShares = pgTable112(
+import { pgTable as pgTable113, text as text114, boolean as boolean34, timestamp as timestamp106, index as index101, uniqueIndex as uniqueIndex53 } from "drizzle-orm/pg-core";
+var branchPreviewShares = pgTable113(
   "branch_preview_shares",
   {
-    id: text113("id").primaryKey(),
-    workspaceId: text113("workspace_id").notNull(),
-    projectId: text113("project_id").notNull(),
-    branchId: text113("branch_id").notNull(),
+    id: text114("id").primaryKey(),
+    workspaceId: text114("workspace_id").notNull(),
+    projectId: text114("project_id").notNull(),
+    branchId: text114("branch_id").notNull(),
     publicEnabled: boolean34("public_enabled").notNull().default(false),
-    publicToken: text113("public_token"),
-    createdBy: text113("created_by"),
-    createdAt: timestamp105("created_at").notNull().defaultNow(),
-    updatedAt: timestamp105("updated_at").notNull().defaultNow()
+    publicToken: text114("public_token"),
+    createdBy: text114("created_by"),
+    createdAt: timestamp106("created_at").notNull().defaultNow(),
+    updatedAt: timestamp106("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex52("branch_preview_shares_branch_idx").on(t.branchId),
-    uniqueIndex52("branch_preview_shares_active_token_idx").on(t.publicToken),
-    index100("branch_preview_shares_project_idx").on(t.projectId),
-    index100("branch_preview_shares_workspace_idx").on(t.workspaceId)
+    uniqueIndex53("branch_preview_shares_branch_idx").on(t.branchId),
+    uniqueIndex53("branch_preview_shares_active_token_idx").on(t.publicToken),
+    index101("branch_preview_shares_project_idx").on(t.projectId),
+    index101("branch_preview_shares_workspace_idx").on(t.workspaceId)
   ]
 );
-var branchPreviewGrants = pgTable112(
+var branchPreviewGrants = pgTable113(
   "branch_preview_grants",
   {
-    id: text113("id").primaryKey(),
-    workspaceId: text113("workspace_id").notNull(),
-    projectId: text113("project_id").notNull(),
-    branchId: text113("branch_id").notNull(),
-    email: text113("email").notNull(),
-    invitedBy: text113("invited_by"),
-    createdAt: timestamp105("created_at").notNull().defaultNow()
+    id: text114("id").primaryKey(),
+    workspaceId: text114("workspace_id").notNull(),
+    projectId: text114("project_id").notNull(),
+    branchId: text114("branch_id").notNull(),
+    email: text114("email").notNull(),
+    invitedBy: text114("invited_by"),
+    createdAt: timestamp106("created_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex52("branch_preview_grants_branch_email_idx").on(t.branchId, t.email),
-    index100("branch_preview_grants_project_idx").on(t.projectId)
+    uniqueIndex53("branch_preview_grants_branch_email_idx").on(t.branchId, t.email),
+    index101("branch_preview_grants_project_idx").on(t.projectId)
   ]
 );
 
 // src/schema/share_links.ts
-import { pgTable as pgTable113, text as text114, boolean as boolean35, timestamp as timestamp106, index as index101 } from "drizzle-orm/pg-core";
-var shareLinks = pgTable113(
+import { pgTable as pgTable114, text as text115, boolean as boolean35, timestamp as timestamp107, index as index102 } from "drizzle-orm/pg-core";
+var shareLinks = pgTable114(
   "share_links",
   {
-    id: text114("id").primaryKey(),
+    id: text115("id").primaryKey(),
     // nanoid
-    workspaceId: text114("workspace_id").notNull(),
+    workspaceId: text115("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text114("project_id").notNull(),
+    projectId: text115("project_id").notNull(),
     // FK → projects.id
-    token: text114("token").notNull(),
+    token: text115("token").notNull(),
     // public share token (nanoid); unique among active links
     enabled: boolean35("enabled").notNull().default(true),
-    createdBy: text114("created_by"),
+    createdBy: text115("created_by"),
     // FK → users(id); NULL = system-initiated
-    createdAt: timestamp106("created_at").notNull().defaultNow(),
-    updatedAt: timestamp106("updated_at").notNull().defaultNow(),
-    revokedAt: timestamp106("revoked_at")
+    createdAt: timestamp107("created_at").notNull().defaultNow(),
+    updatedAt: timestamp107("updated_at").notNull().defaultNow(),
+    revokedAt: timestamp107("revoked_at")
     // set when the link is disabled
   },
   (t) => [
-    index101("share_links_project_idx").on(t.projectId),
-    index101("share_links_workspace_idx").on(t.workspaceId)
+    index102("share_links_project_idx").on(t.projectId),
+    index102("share_links_workspace_idx").on(t.workspaceId)
   ]
 );
 
 // src/schema/templates.ts
 import {
-  pgTable as pgTable114,
-  text as text115,
-  varchar as varchar84,
-  timestamp as timestamp107,
-  jsonb as jsonb68,
-  integer as integer59,
-  index as index102,
-  uniqueIndex as uniqueIndex53
+  pgTable as pgTable115,
+  text as text116,
+  varchar as varchar85,
+  timestamp as timestamp108,
+  jsonb as jsonb69,
+  integer as integer60,
+  index as index103,
+  uniqueIndex as uniqueIndex54
 } from "drizzle-orm/pg-core";
 import { relations as relations17 } from "drizzle-orm/relations";
 import { sql as sql36 } from "drizzle-orm";
-var templates = pgTable114(
+var templates = pgTable115(
   "templates",
   {
-    id: text115("id").primaryKey(),
+    id: text116("id").primaryKey(),
     // nanoid
-    workspaceId: text115("workspace_id").notNull(),
+    workspaceId: text116("workspace_id").notNull(),
     // FK to workspaces.id (RLS scope / owner)
-    slug: varchar84("slug", { length: 255 }).notNull(),
+    slug: varchar85("slug", { length: 255 }).notNull(),
     // ^[a-z0-9-]+$, unique per workspace
-    name: varchar84("name", { length: 255 }).notNull(),
-    description: text115("description"),
-    scope: varchar84("scope", { length: 10 }).$type().notNull().default("project"),
+    name: varchar85("name", { length: 255 }).notNull(),
+    description: text116("description"),
+    scope: varchar85("scope", { length: 10 }).$type().notNull().default("project"),
     // 'demo' ships seed content; 'starter-kit' is the same schema with the content blanked.
     // Defaults to 'demo' because a user template is a frozen snapshot of a real project,
     // which always carries its source's content. Migration 0187.
-    category: varchar84("category", { length: 20 }).$type().notNull().default("demo"),
-    framework: varchar84("framework", { length: 20 }).$type(),
+    category: varchar85("category", { length: 20 }).$type().notNull().default("demo"),
+    framework: varchar85("framework", { length: 20 }).$type(),
     // metadata hint
-    thumbnail: varchar84("thumbnail", { length: 2048 }),
+    thumbnail: varchar85("thumbnail", { length: 2048 }),
     // Frozen snapshot manifest (stripped snapshot_project output). Never returned in
     // list/gallery responses — only read server-side to instantiate.
-    manifest: jsonb68("manifest").$type().notNull(),
-    visibility: varchar84("visibility", { length: 10 }).$type().notNull().default("private"),
-    sourceProjectId: text115("source_project_id"),
+    manifest: jsonb69("manifest").$type().notNull(),
+    visibility: varchar85("visibility", { length: 10 }).$type().notNull().default("private"),
+    sourceProjectId: text116("source_project_id"),
     // provenance (nullable — source may be deleted later)
-    createdBy: text115("created_by"),
+    createdBy: text116("created_by"),
     // user id, or null for a management-key create
-    optimisticVersion: integer59("optimistic_version").notNull().default(0),
-    createdAt: timestamp107("created_at").notNull().defaultNow(),
-    updatedAt: timestamp107("updated_at").notNull().defaultNow(),
-    deletedAt: timestamp107("deleted_at")
+    optimisticVersion: integer60("optimistic_version").notNull().default(0),
+    createdAt: timestamp108("created_at").notNull().defaultNow(),
+    updatedAt: timestamp108("updated_at").notNull().defaultNow(),
+    deletedAt: timestamp108("deleted_at")
     // soft-delete
   },
   (table) => [
-    index102("templates_workspace_idx").on(table.workspaceId),
+    index103("templates_workspace_idx").on(table.workspaceId),
     // Partial: only live rows. A soft-deleted template frees its slug (mirrors
     // components_ws_proj_slug_idx / migration 0114).
-    uniqueIndex53("templates_ws_slug_idx").on(table.workspaceId, table.slug).where(sql36`${table.deletedAt} IS NULL`),
+    uniqueIndex54("templates_ws_slug_idx").on(table.workspaceId, table.slug).where(sql36`${table.deletedAt} IS NULL`),
     // Public gallery scan (created_at DESC over live public rows).
-    index102("templates_public_idx").on(table.visibility).where(sql36`${table.visibility} = 'public' AND ${table.deletedAt} IS NULL`)
+    index103("templates_public_idx").on(table.visibility).where(sql36`${table.visibility} = 'public' AND ${table.deletedAt} IS NULL`)
   ]
 );
 var templatesRelations = relations17(templates, ({ one }) => ({
@@ -30261,186 +30334,186 @@ var templatesRelations = relations17(templates, ({ one }) => ({
 
 // src/schema/payment_records.ts
 import {
-  pgTable as pgTable115,
-  text as text116,
-  varchar as varchar85,
-  integer as integer60,
-  timestamp as timestamp108,
-  index as index103
+  pgTable as pgTable116,
+  text as text117,
+  varchar as varchar86,
+  integer as integer61,
+  timestamp as timestamp109,
+  index as index104
 } from "drizzle-orm/pg-core";
-var paymentRecords = pgTable115(
+var paymentRecords = pgTable116(
   "payment_records",
   {
-    id: text116("id").primaryKey(),
+    id: text117("id").primaryKey(),
     // nanoid
-    workspaceId: text116("workspace_id").notNull(),
+    workspaceId: text117("workspace_id").notNull(),
     // FK → workspaces.id
-    amountCents: integer60("amount_cents").notNull(),
+    amountCents: integer61("amount_cents").notNull(),
     // store money as integer cents
-    currency: varchar85("currency", { length: 3 }).notNull().default("usd"),
-    method: varchar85("method", { length: 50 }).notNull().default("manual"),
+    currency: varchar86("currency", { length: 3 }).notNull().default("usd"),
+    method: varchar86("method", { length: 50 }).notNull().default("manual"),
     // manual | stripe | wire | ...
-    note: text116("note"),
-    recordedBy: text116("recorded_by"),
+    note: text117("note"),
+    recordedBy: text117("recorded_by"),
     // FK → users.id (the admin who entered it)
-    createdAt: timestamp108("created_at").notNull().defaultNow()
+    createdAt: timestamp109("created_at").notNull().defaultNow()
   },
   (table) => [
-    index103("payment_records_workspace_idx").on(table.workspaceId, table.createdAt)
+    index104("payment_records_workspace_idx").on(table.workspaceId, table.createdAt)
   ]
 );
 
 // src/schema/plan_changes.ts
 import {
-  pgTable as pgTable116,
-  text as text117,
-  timestamp as timestamp109,
-  index as index104
+  pgTable as pgTable117,
+  text as text118,
+  timestamp as timestamp110,
+  index as index105
 } from "drizzle-orm/pg-core";
-var planChanges = pgTable116(
+var planChanges = pgTable117(
   "plan_changes",
   {
-    id: text117("id").primaryKey(),
+    id: text118("id").primaryKey(),
     // nanoid
-    workspaceId: text117("workspace_id").notNull(),
+    workspaceId: text118("workspace_id").notNull(),
     // FK → workspaces.id
-    fromPlan: text117("from_plan"),
+    fromPlan: text118("from_plan"),
     // plan_limits.id before the change (null if unknown)
-    toPlan: text117("to_plan").notNull(),
+    toPlan: text118("to_plan").notNull(),
     // plan_limits.id after the change
-    reason: text117("reason"),
-    changedBy: text117("changed_by"),
+    reason: text118("reason"),
+    changedBy: text118("changed_by"),
     // FK → users.id (the admin)
-    createdAt: timestamp109("created_at").notNull().defaultNow()
+    createdAt: timestamp110("created_at").notNull().defaultNow()
   },
   (table) => [
-    index104("plan_changes_workspace_idx").on(table.workspaceId, table.createdAt)
+    index105("plan_changes_workspace_idx").on(table.workspaceId, table.createdAt)
   ]
 );
 
 // src/schema/billing_addons.ts
-import { pgTable as pgTable117, text as text118, varchar as varchar86, integer as integer61, boolean as boolean36, jsonb as jsonb69, index as index105 } from "drizzle-orm/pg-core";
-var billingAddons = pgTable117(
+import { pgTable as pgTable118, text as text119, varchar as varchar87, integer as integer62, boolean as boolean36, jsonb as jsonb70, index as index106 } from "drizzle-orm/pg-core";
+var billingAddons = pgTable118(
   "billing_addons",
   {
-    id: text118("id").primaryKey(),
+    id: text119("id").primaryKey(),
     // stable slug, e.g. "developer", "ai-1000", "localization"
-    kind: varchar86("kind", { length: 20 }).notNull(),
+    kind: varchar87("kind", { length: 20 }).notNull(),
     // seat_role | ai_credits | localization | ab_testing
-    name: varchar86("name", { length: 100 }).notNull(),
-    dodoProductId: text118("dodo_product_id"),
+    name: varchar87("name", { length: 100 }).notNull(),
+    dodoProductId: text119("dodo_product_id"),
     // NULL until the Dodo product is created
-    unitPriceCents: integer61("unit_price_cents").notNull(),
-    currency: varchar86("currency", { length: 8 }).notNull().default("usd"),
-    credits: integer61("credits"),
+    unitPriceCents: integer62("unit_price_cents").notNull(),
+    currency: varchar87("currency", { length: 8 }).notNull().default("usd"),
+    credits: integer62("credits"),
     // ai_credits packs only: credits granted per unit
     recurring: boolean36("recurring").notNull().default(false),
     // seats/localization/AB = true; credit packs = false
-    metadata: jsonb69("metadata").$type().default({}),
+    metadata: jsonb70("metadata").$type().default({}),
     // Pricing v3 (0489): site (bought for one website) | workspace (members, credit packs).
-    scope: varchar86("scope", { length: 12 }).notNull().default("workspace"),
-    visibility: varchar86("visibility", { length: 8 }).notNull().default("public")
+    scope: varchar87("scope", { length: 12 }).notNull().default("workspace"),
+    visibility: varchar87("visibility", { length: 8 }).notNull().default("public")
   },
-  (t) => [index105("billing_addons_kind_idx").on(t.kind)]
+  (t) => [index106("billing_addons_kind_idx").on(t.kind)]
 );
 
 // src/schema/billing_customers.ts
-import { pgTable as pgTable118, text as text119, varchar as varchar87, timestamp as timestamp110, uniqueIndex as uniqueIndex54 } from "drizzle-orm/pg-core";
-var billingCustomers = pgTable118(
+import { pgTable as pgTable119, text as text120, varchar as varchar88, timestamp as timestamp111, uniqueIndex as uniqueIndex55 } from "drizzle-orm/pg-core";
+var billingCustomers = pgTable119(
   "billing_customers",
   {
-    id: text119("id").primaryKey(),
+    id: text120("id").primaryKey(),
     // nanoid
-    workspaceId: text119("workspace_id").notNull(),
+    workspaceId: text120("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    dodoCustomerId: text119("dodo_customer_id").notNull(),
-    email: varchar87("email", { length: 255 }),
-    createdAt: timestamp110("created_at").notNull().defaultNow(),
-    updatedAt: timestamp110("updated_at").notNull().defaultNow()
+    dodoCustomerId: text120("dodo_customer_id").notNull(),
+    email: varchar88("email", { length: 255 }),
+    createdAt: timestamp111("created_at").notNull().defaultNow(),
+    updatedAt: timestamp111("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex54("billing_customers_workspace_idx").on(t.workspaceId),
-    uniqueIndex54("billing_customers_dodo_idx").on(t.dodoCustomerId)
+    uniqueIndex55("billing_customers_workspace_idx").on(t.workspaceId),
+    uniqueIndex55("billing_customers_dodo_idx").on(t.dodoCustomerId)
   ]
 );
 
 // src/schema/subscriptions.ts
-import { pgTable as pgTable119, text as text120, varchar as varchar88, boolean as boolean37, timestamp as timestamp111, index as index106, uniqueIndex as uniqueIndex55 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable120, text as text121, varchar as varchar89, boolean as boolean37, timestamp as timestamp112, index as index107, uniqueIndex as uniqueIndex56 } from "drizzle-orm/pg-core";
 import { sql as sql37 } from "drizzle-orm";
-var subscriptions = pgTable119(
+var subscriptions = pgTable120(
   "subscriptions",
   {
-    id: text120("id").primaryKey(),
+    id: text121("id").primaryKey(),
     // nanoid
-    workspaceId: text120("workspace_id").notNull(),
+    workspaceId: text121("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text120("project_id"),
+    projectId: text121("project_id"),
     // NULL = workspace plan; set = site plan (FK → projects.id)
-    planId: text120("plan_id").notNull(),
+    planId: text121("plan_id").notNull(),
     // FK → plan_limits.id
-    dodoSubscriptionId: text120("dodo_subscription_id"),
-    dodoCustomerId: text120("dodo_customer_id"),
-    status: varchar88("status", { length: 20 }).notNull().default("active"),
+    dodoSubscriptionId: text121("dodo_subscription_id"),
+    dodoCustomerId: text121("dodo_customer_id"),
+    status: varchar89("status", { length: 20 }).notNull().default("active"),
     // active | on_hold | cancelled | expired | pending
     // Which of plan_limits' two prices this row is billed at. Without it the bill cannot tell
     // whether the owner pays price_cents or price_cents_yearly (0147).
-    interval: varchar88("interval", { length: 10 }).notNull().default("month"),
+    interval: varchar89("interval", { length: 10 }).notNull().default("month"),
     // month | year
-    currentPeriodEnd: timestamp111("current_period_end"),
+    currentPeriodEnd: timestamp112("current_period_end"),
     cancelAtPeriodEnd: boolean37("cancel_at_period_end").notNull().default(false),
-    foundingUntil: timestamp111("founding_until", { withTimezone: true }),
+    foundingUntil: timestamp112("founding_until", { withTimezone: true }),
     // founding price until (Pricing v3 §16)
-    createdAt: timestamp111("created_at").notNull().defaultNow(),
-    updatedAt: timestamp111("updated_at").notNull().defaultNow()
+    createdAt: timestamp112("created_at").notNull().defaultNow(),
+    updatedAt: timestamp112("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index106("subscriptions_workspace_idx").on(t.workspaceId),
-    uniqueIndex55("subscriptions_dodo_idx").on(t.dodoSubscriptionId).where(sql37`${t.dodoSubscriptionId} IS NOT NULL`),
+    index107("subscriptions_workspace_idx").on(t.workspaceId),
+    uniqueIndex56("subscriptions_dodo_idx").on(t.dodoSubscriptionId).where(sql37`${t.dodoSubscriptionId} IS NOT NULL`),
     // At most one workspace-level subscription per workspace.
-    uniqueIndex55("subscriptions_workspace_plan_unique").on(t.workspaceId).where(sql37`${t.projectId} IS NULL`),
+    uniqueIndex56("subscriptions_workspace_plan_unique").on(t.workspaceId).where(sql37`${t.projectId} IS NULL`),
     // At most one subscription per site.
-    uniqueIndex55("subscriptions_project_unique").on(t.projectId).where(sql37`${t.projectId} IS NOT NULL`)
+    uniqueIndex56("subscriptions_project_unique").on(t.projectId).where(sql37`${t.projectId} IS NOT NULL`)
   ]
 );
 
 // src/schema/subscription_addons.ts
-import { pgTable as pgTable120, text as text121, varchar as varchar89, integer as integer62, timestamp as timestamp112, index as index107, uniqueIndex as uniqueIndex56 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable121, text as text122, varchar as varchar90, integer as integer63, timestamp as timestamp113, index as index108, uniqueIndex as uniqueIndex57 } from "drizzle-orm/pg-core";
 import { sql as sql38 } from "drizzle-orm";
-var subscriptionAddons = pgTable120(
+var subscriptionAddons = pgTable121(
   "subscription_addons",
   {
-    id: text121("id").primaryKey(),
+    id: text122("id").primaryKey(),
     // nanoid
-    workspaceId: text121("workspace_id").notNull(),
+    workspaceId: text122("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    addonId: text121("addon_id").notNull(),
+    addonId: text122("addon_id").notNull(),
     // FK → billing_addons.id
-    projectId: text121("project_id"),
+    projectId: text122("project_id"),
     // the website a site add-on belongs to (Pricing v3); NULL = workspace-wide
-    quantity: integer62("quantity").notNull().default(1),
-    dodoSubscriptionId: text121("dodo_subscription_id"),
+    quantity: integer63("quantity").notNull().default(1),
+    dodoSubscriptionId: text122("dodo_subscription_id"),
     // NULL for a manual/admin grant
-    status: varchar89("status", { length: 20 }).notNull().default("active"),
+    status: varchar90("status", { length: 20 }).notNull().default("active"),
     // active | cancelled | expired
-    createdAt: timestamp112("created_at").notNull().defaultNow(),
-    updatedAt: timestamp112("updated_at").notNull().defaultNow()
+    createdAt: timestamp113("created_at").notNull().defaultNow(),
+    updatedAt: timestamp113("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index107("subscription_addons_workspace_idx").on(t.workspaceId),
-    uniqueIndex56("subscription_addons_dodo_idx").on(t.dodoSubscriptionId).where(sql38`${t.dodoSubscriptionId} IS NOT NULL`)
+    index108("subscription_addons_workspace_idx").on(t.workspaceId),
+    uniqueIndex57("subscription_addons_dodo_idx").on(t.dodoSubscriptionId).where(sql38`${t.dodoSubscriptionId} IS NOT NULL`)
   ]
 );
 
 // src/schema/billing_alerts.ts
-import { pgTable as pgTable121, text as text122, varchar as varchar90, timestamp as timestamp113, index as index108, uniqueIndex as uniqueIndex57 } from "drizzle-orm/pg-core";
-var billingAlerts = pgTable121(
+import { pgTable as pgTable122, text as text123, varchar as varchar91, timestamp as timestamp114, index as index109, uniqueIndex as uniqueIndex58 } from "drizzle-orm/pg-core";
+var billingAlerts = pgTable122(
   "billing_alerts",
   {
-    id: text122("id").primaryKey(),
+    id: text123("id").primaryKey(),
     // nanoid
-    workspaceId: text122("workspace_id").notNull(),
+    workspaceId: text123("workspace_id").notNull(),
     // FK → workspaces.id (internal table, no RLS)
-    kind: varchar90("kind", { length: 32 }).notNull(),
+    kind: varchar91("kind", { length: 32 }).notNull(),
     // renewal_due | bandwidth_80 | bandwidth_100
     /**
      * What "already sent" means for this alert, built by the caller (alerts.ts owns the spellings).
@@ -30448,104 +30521,104 @@ var billingAlerts = pgTable121(
      * period-end change. Bandwidth keys on the threshold + calendar month, matching the window
      * getUsage() measures — so the counter resetting on the 1st re-arms the alert.
      */
-    dedupeKey: text122("dedupe_key").notNull(),
-    sentAt: timestamp113("sent_at", { withTimezone: true }).notNull().defaultNow()
+    dedupeKey: text123("dedupe_key").notNull(),
+    sentAt: timestamp114("sent_at", { withTimezone: true }).notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex57("billing_alerts_dedupe_idx").on(t.dedupeKey),
-    index108("billing_alerts_workspace_idx").on(t.workspaceId, t.sentAt)
+    uniqueIndex58("billing_alerts_dedupe_idx").on(t.dedupeKey),
+    index109("billing_alerts_workspace_idx").on(t.workspaceId, t.sentAt)
   ]
 );
 
 // src/schema/ai_credit_ledger.ts
-import { pgTable as pgTable122, text as text123, varchar as varchar91, integer as integer63, timestamp as timestamp114, index as index109, uniqueIndex as uniqueIndex58 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable123, text as text124, varchar as varchar92, integer as integer64, timestamp as timestamp115, index as index110, uniqueIndex as uniqueIndex59 } from "drizzle-orm/pg-core";
 import { sql as sql39 } from "drizzle-orm";
-var aiCreditLedger = pgTable122(
+var aiCreditLedger = pgTable123(
   "ai_credit_ledger",
   {
-    id: text123("id").primaryKey(),
+    id: text124("id").primaryKey(),
     // nanoid
-    workspaceId: text123("workspace_id").notNull(),
+    workspaceId: text124("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    delta: integer63("delta").notNull(),
+    delta: integer64("delta").notNull(),
     // signed: +purchase/grant, -consume/expire
-    reason: varchar91("reason", { length: 20 }).notNull(),
+    reason: varchar92("reason", { length: 20 }).notNull(),
     // purchase | consume | grant | expire
-    dodoPaymentId: text123("dodo_payment_id"),
+    dodoPaymentId: text124("dodo_payment_id"),
     // set for purchases
-    note: text123("note"),
-    createdAt: timestamp114("created_at").notNull().defaultNow()
+    note: text124("note"),
+    createdAt: timestamp115("created_at").notNull().defaultNow()
   },
   (t) => [
-    index109("ai_credit_ledger_workspace_idx").on(t.workspaceId, t.createdAt),
-    uniqueIndex58("ai_credit_ledger_custom_agent_run_unique").on(t.note).where(sql39`${t.reason} = 'consume' AND ${t.note} LIKE 'custom-agent-run:%'`)
+    index110("ai_credit_ledger_workspace_idx").on(t.workspaceId, t.createdAt),
+    uniqueIndex59("ai_credit_ledger_custom_agent_run_unique").on(t.note).where(sql39`${t.reason} = 'consume' AND ${t.note} LIKE 'custom-agent-run:%'`)
   ]
 );
 
 // src/schema/support_tickets.ts
 import {
-  pgTable as pgTable123,
-  text as text124,
-  varchar as varchar92,
-  timestamp as timestamp115,
+  pgTable as pgTable124,
+  text as text125,
+  varchar as varchar93,
+  timestamp as timestamp116,
   boolean as boolean38,
-  jsonb as jsonb70,
-  index as index110
+  jsonb as jsonb71,
+  index as index111
 } from "drizzle-orm/pg-core";
-var supportTickets = pgTable123(
+var supportTickets = pgTable124(
   "support_tickets",
   {
-    id: text124("id").primaryKey(),
+    id: text125("id").primaryKey(),
     // nanoid
-    workspaceId: text124("workspace_id"),
+    workspaceId: text125("workspace_id"),
     // FK → workspaces.id (nullable: account-level tickets)
     // FK → users.id (the customer). NULL for a ticket Plain created: an email or Slack
     // sender has no BetterCMS account. visibleTicketWhere() compares this to the session
     // user, and NULL never matches, so those tickets stay invisible to every customer —
     // which is correct, since there is no dashboard reply transport for them.
-    userId: text124("user_id"),
+    userId: text125("user_id"),
     // The only identity a Plain-origin ticket has. The staff list coalesces it with
     // users.email; NULL whenever userId is set.
-    customerEmail: text124("customer_email"),
-    customerName: text124("customer_name"),
-    subject: varchar92("subject", { length: 255 }).notNull(),
-    body: text124("body").notNull(),
-    status: varchar92("status", { length: 20 }).notNull().default("open"),
+    customerEmail: text125("customer_email"),
+    customerName: text125("customer_name"),
+    subject: varchar93("subject", { length: 255 }).notNull(),
+    body: text125("body").notNull(),
+    status: varchar93("status", { length: 20 }).notNull().default("open"),
     // open | pending | closed
-    priority: varchar92("priority", { length: 20 }).notNull().default("normal"),
+    priority: varchar93("priority", { length: 20 }).notNull().default("normal"),
     // low | normal | high | urgent
-    assigneeId: text124("assignee_id"),
+    assigneeId: text125("assignee_id"),
     // FK → users.id (staff member handling it)
     // Plain's ThreadChannel, lowercased. 'api' is a ticket opened in the dashboard; the
     // rest arrive from Plain. The staff reply path branches on this: 'api' threads deliver
     // nothing to the customer so we send the email ourselves, every other channel is
     // delivered by Plain.
-    channel: text124("channel").notNull().default("api"),
+    channel: text125("channel").notNull().default("api"),
     // The Plain thread this ticket mirrors. NULL until the first outbound sync succeeds,
     // hence the partial unique index rather than a unique column.
-    plainThreadId: text124("plain_thread_id"),
+    plainThreadId: text125("plain_thread_id"),
     // Files attached when the case was opened, before any message row exists.
-    attachments: jsonb70("attachments").$type().notNull().default([]),
-    createdAt: timestamp115("created_at").notNull().defaultNow(),
-    updatedAt: timestamp115("updated_at").notNull().defaultNow()
+    attachments: jsonb71("attachments").$type().notNull().default([]),
+    createdAt: timestamp116("created_at").notNull().defaultNow(),
+    updatedAt: timestamp116("updated_at").notNull().defaultNow()
   },
   (table) => [
-    index110("support_tickets_status_idx").on(table.status, table.updatedAt),
-    index110("support_tickets_workspace_idx").on(table.workspaceId),
-    index110("support_tickets_user_idx").on(table.userId),
-    index110("support_tickets_channel_idx").on(table.channel, table.updatedAt)
+    index111("support_tickets_status_idx").on(table.status, table.updatedAt),
+    index111("support_tickets_workspace_idx").on(table.workspaceId),
+    index111("support_tickets_user_idx").on(table.userId),
+    index111("support_tickets_channel_idx").on(table.channel, table.updatedAt)
   ]
 );
-var supportTicketMessages = pgTable123(
+var supportTicketMessages = pgTable124(
   "support_ticket_messages",
   {
-    id: text124("id").primaryKey(),
+    id: text125("id").primaryKey(),
     // nanoid
-    ticketId: text124("ticket_id").notNull(),
+    ticketId: text125("ticket_id").notNull(),
     // FK → support_tickets.id
-    authorId: text124("author_id"),
+    authorId: text125("author_id"),
     // FK → users.id (staff or customer)
-    body: text124("body").notNull(),
+    body: text125("body").notNull(),
     isStaff: boolean38("is_staff").notNull().default(false),
     // true = team reply
     // Staff-only triage note. NEVER leaves the platform-admin lane: the customer read
@@ -30555,99 +30628,99 @@ var supportTicketMessages = pgTable123(
     // at-least-once webhook. NULL for anything Plain never saw, and for our own replies on
     // channels whose mutation returns no entry id — replyToThread returns only an error
     // slot, which is why the echo check keys on the actor and this is the backstop.
-    plainMessageId: text124("plain_message_id"),
-    attachments: jsonb70("attachments").$type().notNull().default([]),
-    createdAt: timestamp115("created_at").notNull().defaultNow()
+    plainMessageId: text125("plain_message_id"),
+    attachments: jsonb71("attachments").$type().notNull().default([]),
+    createdAt: timestamp116("created_at").notNull().defaultNow()
   },
   (table) => [
-    index110("support_ticket_messages_ticket_idx").on(table.ticketId, table.createdAt)
+    index111("support_ticket_messages_ticket_idx").on(table.ticketId, table.createdAt)
   ]
 );
 
 // src/schema/admin_action_logs.ts
 import {
-  pgTable as pgTable124,
-  text as text125,
-  varchar as varchar93,
-  jsonb as jsonb71,
-  timestamp as timestamp116,
-  index as index111
+  pgTable as pgTable125,
+  text as text126,
+  varchar as varchar94,
+  jsonb as jsonb72,
+  timestamp as timestamp117,
+  index as index112
 } from "drizzle-orm/pg-core";
-var adminActionLogs = pgTable124(
+var adminActionLogs = pgTable125(
   "admin_action_logs",
   {
-    id: text125("id").primaryKey(),
+    id: text126("id").primaryKey(),
     // nanoid
-    actorId: text125("actor_id"),
+    actorId: text126("actor_id"),
     // FK → users.id (the staff member)
-    actorEmail: varchar93("actor_email", { length: 320 }),
+    actorEmail: varchar94("actor_email", { length: 320 }),
     // denormalized for display
-    actorRole: varchar93("actor_role", { length: 40 }),
+    actorRole: varchar94("actor_role", { length: 40 }),
     // admin_role at action time
-    action: varchar93("action", { length: 80 }).notNull(),
+    action: varchar94("action", { length: 80 }).notNull(),
     // e.g. workspace.plan_change
-    targetType: varchar93("target_type", { length: 40 }),
+    targetType: varchar94("target_type", { length: 40 }),
     // workspace | user | plan | ticket
-    targetId: text125("target_id"),
-    reason: text125("reason"),
-    metadata: jsonb71("metadata").$type().notNull().default({}),
-    ipAddress: text125("ip_address"),
-    createdAt: timestamp116("created_at").notNull().defaultNow()
+    targetId: text126("target_id"),
+    reason: text126("reason"),
+    metadata: jsonb72("metadata").$type().notNull().default({}),
+    ipAddress: text126("ip_address"),
+    createdAt: timestamp117("created_at").notNull().defaultNow()
   },
   (table) => [
-    index111("admin_action_logs_created_idx").on(table.createdAt),
-    index111("admin_action_logs_action_idx").on(table.action, table.createdAt)
+    index112("admin_action_logs_created_idx").on(table.createdAt),
+    index112("admin_action_logs_action_idx").on(table.action, table.createdAt)
   ]
 );
 
 // src/schema/admin_notes.ts
-import { pgTable as pgTable125, text as text126, varchar as varchar94, boolean as boolean39, timestamp as timestamp117, index as index112 } from "drizzle-orm/pg-core";
-var adminNotes = pgTable125(
+import { pgTable as pgTable126, text as text127, varchar as varchar95, boolean as boolean39, timestamp as timestamp118, index as index113 } from "drizzle-orm/pg-core";
+var adminNotes = pgTable126(
   "admin_notes",
   {
-    id: text126("id").primaryKey(),
+    id: text127("id").primaryKey(),
     // nanoid
-    targetType: varchar94("target_type", { length: 20 }).notNull(),
+    targetType: varchar95("target_type", { length: 20 }).notNull(),
     // user | workspace | project
-    targetId: text126("target_id").notNull(),
-    body: text126("body").notNull(),
-    authorId: text126("author_id"),
+    targetId: text127("target_id").notNull(),
+    body: text127("body").notNull(),
+    authorId: text127("author_id"),
     // FK → users.id (the staff member)
-    authorEmail: varchar94("author_email", { length: 320 }),
+    authorEmail: varchar95("author_email", { length: 320 }),
     // denormalized for display
     pinned: boolean39("pinned").notNull().default(false),
-    createdAt: timestamp117("created_at").notNull().defaultNow(),
-    updatedAt: timestamp117("updated_at").notNull().defaultNow()
+    createdAt: timestamp118("created_at").notNull().defaultNow(),
+    updatedAt: timestamp118("updated_at").notNull().defaultNow()
   },
   (t) => [
     // Pinned first, then newest — the exact order the tab renders.
-    index112("admin_notes_target_idx").on(t.targetType, t.targetId, t.pinned, t.createdAt)
+    index113("admin_notes_target_idx").on(t.targetType, t.targetId, t.pinned, t.createdAt)
   ]
 );
 
 // src/schema/admin_agent_sessions.ts
-import { pgTable as pgTable126, text as text127, varchar as varchar95, doublePrecision as doublePrecision2, timestamp as timestamp118, index as index113 } from "drizzle-orm/pg-core";
-var adminAgentSessions = pgTable126(
+import { pgTable as pgTable127, text as text128, varchar as varchar96, doublePrecision as doublePrecision2, timestamp as timestamp119, index as index114 } from "drizzle-orm/pg-core";
+var adminAgentSessions = pgTable127(
   "admin_agent_sessions",
   {
-    id: text127("id").primaryKey(),
+    id: text128("id").primaryKey(),
     // nanoid
-    actorId: text127("actor_id").notNull(),
+    actorId: text128("actor_id").notNull(),
     // FK → users.id (the staff member)
-    actorEmail: varchar95("actor_email", { length: 320 }),
-    title: varchar95("title", { length: 200 }),
-    status: varchar95("status", { length: 20 }).notNull().default("active"),
+    actorEmail: varchar96("actor_email", { length: 320 }),
+    title: varchar96("title", { length: 200 }),
+    status: varchar96("status", { length: 20 }).notNull().default("active"),
     // active | error
     costUsd: doublePrecision2("cost_usd").notNull().default(0),
-    createdAt: timestamp118("created_at").notNull().defaultNow(),
-    updatedAt: timestamp118("updated_at").notNull().defaultNow(),
-    lastActiveAt: timestamp118("last_active_at").notNull().defaultNow()
+    createdAt: timestamp119("created_at").notNull().defaultNow(),
+    updatedAt: timestamp119("updated_at").notNull().defaultNow(),
+    lastActiveAt: timestamp119("last_active_at").notNull().defaultNow()
   },
-  (t) => [index113("admin_agent_sessions_actor_idx").on(t.actorId, t.lastActiveAt)]
+  (t) => [index114("admin_agent_sessions_actor_idx").on(t.actorId, t.lastActiveAt)]
 );
 
 // src/schema/crm_deals.ts
-import { pgTable as pgTable127, text as text128, varchar as varchar96, integer as integer64, timestamp as timestamp119, index as index114, unique as unique13 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable128, text as text129, varchar as varchar97, integer as integer65, timestamp as timestamp120, index as index115, unique as unique13 } from "drizzle-orm/pg-core";
 var CRM_STAGES = [
   "qualified",
   "conversation",
@@ -30655,212 +30728,212 @@ var CRM_STAGES = [
   "customer",
   "at_risk"
 ];
-var crmDeals = pgTable127(
+var crmDeals = pgTable128(
   "crm_deals",
   {
-    id: text128("id").primaryKey(),
+    id: text129("id").primaryKey(),
     // nanoid
-    workspaceId: text128("workspace_id").notNull(),
+    workspaceId: text129("workspace_id").notNull(),
     // FK → workspaces.id
-    stage: varchar96("stage", { length: 20 }).notNull().default("qualified").$type(),
-    valueCents: integer64("value_cents"),
+    stage: varchar97("stage", { length: 20 }).notNull().default("qualified").$type(),
+    valueCents: integer65("value_cents"),
     // annual contract value the rep is working toward
-    ownerId: text128("owner_id"),
+    ownerId: text129("owner_id"),
     // FK → users.id (the staff member on the account)
-    nextStep: text128("next_step"),
-    notes: text128("notes"),
-    lastTouchAt: timestamp119("last_touch_at"),
-    createdAt: timestamp119("created_at").notNull().defaultNow(),
-    updatedAt: timestamp119("updated_at").notNull().defaultNow()
+    nextStep: text129("next_step"),
+    notes: text129("notes"),
+    lastTouchAt: timestamp120("last_touch_at"),
+    createdAt: timestamp120("created_at").notNull().defaultNow(),
+    updatedAt: timestamp120("updated_at").notNull().defaultNow()
   },
   (t) => [
     unique13("crm_deals_workspace_id_key").on(t.workspaceId),
-    index114("crm_deals_stage_idx").on(t.stage, t.lastTouchAt),
-    index114("crm_deals_owner_idx").on(t.ownerId)
+    index115("crm_deals_stage_idx").on(t.stage, t.lastTouchAt),
+    index115("crm_deals_owner_idx").on(t.ownerId)
   ]
 );
 
 // src/schema/project_env_vars.ts
 import {
-  pgTable as pgTable128,
-  text as text129,
-  varchar as varchar97,
-  timestamp as timestamp120,
-  index as index115,
-  uniqueIndex as uniqueIndex59
+  pgTable as pgTable129,
+  text as text130,
+  varchar as varchar98,
+  timestamp as timestamp121,
+  index as index116,
+  uniqueIndex as uniqueIndex60
 } from "drizzle-orm/pg-core";
 var ENV_VAR_SCOPES = ["production", "preview", "development"];
-var projectEnvVars = pgTable128(
+var projectEnvVars = pgTable129(
   "project_env_vars",
   {
-    id: text129("id").primaryKey(),
+    id: text130("id").primaryKey(),
     // nanoid
-    projectId: text129("project_id").notNull(),
+    projectId: text130("project_id").notNull(),
     // FK to projects.id
-    workspaceId: text129("workspace_id").notNull(),
+    workspaceId: text130("workspace_id").notNull(),
     // FK to workspaces.id — RLS scope
-    key: varchar97("key", { length: 128 }).notNull(),
-    valueEnc: text129("value_enc").notNull(),
+    key: varchar98("key", { length: 128 }).notNull(),
+    valueEnc: text130("value_enc").notNull(),
     // AES-256-GCM, `iv:tag:ciphertext` hex
-    scope: varchar97("scope", { length: 16 }).$type().notNull(),
-    updatedBy: text129("updated_by"),
+    scope: varchar98("scope", { length: 16 }).$type().notNull(),
+    updatedBy: text130("updated_by"),
     // FK to users.id, nullable
-    updatedAt: timestamp120("updated_at", { withTimezone: true }).notNull().defaultNow(),
-    createdAt: timestamp120("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp121("updated_at", { withTimezone: true }).notNull().defaultNow(),
+    createdAt: timestamp121("created_at", { withTimezone: true }).notNull().defaultNow(),
     /** Last read by an integration's vendor call (0473; written at most hourly). */
-    lastUsedAt: timestamp120("last_used_at", { withTimezone: true }),
+    lastUsedAt: timestamp121("last_used_at", { withTimezone: true }),
     /** Rotation (0473): the value before the last rotate, accepted until `previousExpiresAt` only
      *  where a vendor signs with it (webhook verification). Outbound calls use the current value. */
-    previousValueEnc: text129("previous_value_enc"),
-    previousExpiresAt: timestamp120("previous_expires_at", { withTimezone: true })
+    previousValueEnc: text130("previous_value_enc"),
+    previousExpiresAt: timestamp121("previous_expires_at", { withTimezone: true })
   },
   (table) => [
     // One value per key per scope — the same key MAY exist in production and preview.
-    uniqueIndex59("project_env_vars_project_key_scope_idx").on(
+    uniqueIndex60("project_env_vars_project_key_scope_idx").on(
       table.projectId,
       table.key,
       table.scope
     ),
-    index115("project_env_vars_project_idx").on(table.projectId)
+    index116("project_env_vars_project_idx").on(table.projectId)
   ]
 );
 
 // src/schema/mcp_connections.ts
-import { pgTable as pgTable129, text as text130, varchar as varchar98, jsonb as jsonb72, timestamp as timestamp121, index as index116, uniqueIndex as uniqueIndex60 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable130, text as text131, varchar as varchar99, jsonb as jsonb73, timestamp as timestamp122, index as index117, uniqueIndex as uniqueIndex61 } from "drizzle-orm/pg-core";
 import { sql as sql40 } from "drizzle-orm";
-var mcpConnections = pgTable129(
+var mcpConnections = pgTable130(
   "mcp_connections",
   {
-    id: text130("id").primaryKey(),
+    id: text131("id").primaryKey(),
     // nanoid
-    workspaceId: text130("workspace_id").notNull(),
+    workspaceId: text131("workspace_id").notNull(),
     // FK → workspaces.id (RLS scope)
-    projectId: text130("project_id").notNull(),
+    projectId: text131("project_id").notNull(),
     // FK → projects.id (application-enforced)
     /** Catalog slug (`notion` | `linear` | `hubspot` | `figma`) or `custom` for a user-added server. */
-    providerSlug: varchar98("provider_slug", { length: 32 }).notNull(),
+    providerSlug: varchar99("provider_slug", { length: 32 }).notNull(),
     /** Where tools come from. See the header note — NOT interchangeable with authMode. */
-    kind: varchar98("kind", { length: 16 }).notNull().$type(),
+    kind: varchar99("kind", { length: 16 }).notNull().$type(),
     /** How the credential is obtained. See the header note. */
-    authMode: varchar98("auth_mode", { length: 24 }).notNull().$type(),
+    authMode: varchar99("auth_mode", { length: 24 }).notNull().$type(),
     /** Display name. The catalog's name for a known provider; user-supplied for a custom one. */
-    name: varchar98("name", { length: 120 }).notNull(),
+    name: varchar99("name", { length: 120 }).notNull(),
     /** Remote Streamable-HTTP endpoint. NULL for `kind: 'rest'`, which has no MCP server. */
-    serverUrl: text130("server_url"),
+    serverUrl: text131("server_url"),
     /** Display only — the connected Notion workspace / Linear org / Figma account. */
-    accountLabel: varchar98("account_label", { length: 255 }),
-    accessTokenEnc: text130("access_token_enc"),
-    refreshTokenEnc: text130("refresh_token_enc"),
-    expiresAt: timestamp121("expires_at", { withTimezone: true }),
+    accountLabel: varchar99("account_label", { length: 255 }),
+    accessTokenEnc: text131("access_token_enc"),
+    refreshTokenEnc: text131("refresh_token_enc"),
+    expiresAt: timestamp122("expires_at", { withTimezone: true }),
     /** `custom_headers` mode only: the encrypted header map a gateway requires on every call. */
-    headersEnc: text130("headers_enc"),
+    headersEnc: text131("headers_enc"),
     /** DCR-issued or statically configured — the same two columns serve both, deliberately. */
-    oauthClientId: varchar98("oauth_client_id", { length: 255 }),
-    oauthClientSecretEnc: text130("oauth_client_secret_enc"),
+    oauthClientId: varchar99("oauth_client_id", { length: 255 }),
+    oauthClientSecretEnc: text131("oauth_client_secret_enc"),
     /** Both cleared on a successful exchange; see the header note on why they must exist at all. */
-    oauthState: text130("oauth_state"),
-    pkceVerifierEnc: text130("pkce_verifier_enc"),
+    oauthState: text131("oauth_state"),
+    pkceVerifierEnc: text131("pkce_verifier_enc"),
     /** Discovery output: authorization server metadata, token endpoint, RFC 8707 resource. */
-    authMetadata: jsonb72("auth_metadata").$type(),
-    scopes: text130("scopes").array().$type(),
+    authMetadata: jsonb73("auth_metadata").$type(),
+    scopes: text131("scopes").array().$type(),
     /**
      * Full descriptors (name, description, inputSchema, annotations) — NOT just names. The
      * read-only boundary is decided from `annotations.readOnlyHint`, so the names alone would
      * force a live listTools on the turn path to answer a governance question.
      */
-    toolsCache: jsonb72("tools_cache").$type().notNull().default([]),
-    toolsCachedAt: timestamp121("tools_cached_at", { withTimezone: true }),
+    toolsCache: jsonb73("tools_cache").$type().notNull().default([]),
+    toolsCachedAt: timestamp122("tools_cached_at", { withTimezone: true }),
     /**
      * pending | ok | invalid | revoked. `pending` is the pre-consent row; `invalid` is set on a
      * provider 401 or a decrypt failure so the UI can say "reconnect" instead of replaying the
      * same auth error on every turn forever.
      */
-    status: varchar98("status", { length: 16 }).notNull().default("pending").$type(),
+    status: varchar99("status", { length: 16 }).notNull().default("pending").$type(),
     /** Machine-readable companion to `status`, e.g. `decrypt_failed`, `provider_401`. */
-    statusReason: varchar98("status_reason", { length: 64 }),
-    lastError: text130("last_error"),
-    lastUsedAt: timestamp121("last_used_at", { withTimezone: true }),
-    connectedBy: text130("connected_by"),
+    statusReason: varchar99("status_reason", { length: 64 }),
+    lastError: text131("last_error"),
+    lastUsedAt: timestamp122("last_used_at", { withTimezone: true }),
+    connectedBy: text131("connected_by"),
     // FK → users(id), added in migration
     ...auditColumns,
     ...softDeleteColumn
   },
   (t) => [
-    index116("mcp_connections_workspace_idx").on(t.workspaceId),
-    index116("mcp_connections_project_idx").on(t.projectId),
+    index117("mcp_connections_workspace_idx").on(t.workspaceId),
+    index117("mcp_connections_project_idx").on(t.projectId),
     // Reconnecting a catalog provider UPDATEs rather than accumulating a second live credential.
     // Custom connectors are excluded: a project may legitimately add many distinct MCP servers.
-    uniqueIndex60("mcp_connections_project_provider_unique").on(t.projectId, t.providerSlug).where(sql40`deleted_at IS NULL AND provider_slug <> 'custom'`)
+    uniqueIndex61("mcp_connections_project_provider_unique").on(t.projectId, t.providerSlug).where(sql40`deleted_at IS NULL AND provider_slug <> 'custom'`)
   ]
 );
 
 // src/schema/crm_connections.ts
 import {
-  pgTable as pgTable130,
-  text as text131,
-  timestamp as timestamp122,
+  pgTable as pgTable131,
+  text as text132,
+  timestamp as timestamp123,
   boolean as boolean40,
-  jsonb as jsonb73,
-  integer as integer65,
-  uniqueIndex as uniqueIndex61
+  jsonb as jsonb74,
+  integer as integer66,
+  uniqueIndex as uniqueIndex62
 } from "drizzle-orm/pg-core";
-var crmConnections = pgTable130(
+var crmConnections = pgTable131(
   "crm_connections",
   {
-    id: text131("id").primaryKey(),
-    workspaceId: text131("workspace_id").notNull(),
-    provider: text131("provider").$type().notNull(),
-    accountId: text131("account_id").notNull(),
-    accountName: text131("account_name").notNull(),
-    instanceUrl: text131("instance_url").notNull(),
+    id: text132("id").primaryKey(),
+    workspaceId: text132("workspace_id").notNull(),
+    provider: text132("provider").$type().notNull(),
+    accountId: text132("account_id").notNull(),
+    accountName: text132("account_name").notNull(),
+    instanceUrl: text132("instance_url").notNull(),
     sandbox: boolean40("sandbox").notNull().default(false),
-    status: text131("status").notNull().default("connected"),
-    accessToken: text131("access_token").notNull(),
-    refreshToken: text131("refresh_token").notNull(),
-    expiresAt: timestamp122("expires_at").notNull(),
-    createdAt: timestamp122("created_at").notNull().defaultNow(),
-    updatedAt: timestamp122("updated_at").notNull().defaultNow()
+    status: text132("status").notNull().default("connected"),
+    accessToken: text132("access_token").notNull(),
+    refreshToken: text132("refresh_token").notNull(),
+    expiresAt: timestamp123("expires_at").notNull(),
+    createdAt: timestamp123("created_at").notNull().defaultNow(),
+    updatedAt: timestamp123("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex61("crm_connection_account_uq").on(
+    uniqueIndex62("crm_connection_account_uq").on(
       t.workspaceId,
       t.provider,
       t.accountId
     )
   ]
 );
-var crmOauthStates = pgTable130("crm_oauth_states", {
-  id: text131("id").primaryKey(),
-  workspaceId: text131("workspace_id").notNull(),
-  userId: text131("user_id").notNull(),
-  provider: text131("provider").notNull(),
-  verifier: text131("verifier").notNull(),
-  returnPath: text131("return_path").notNull(),
+var crmOauthStates = pgTable131("crm_oauth_states", {
+  id: text132("id").primaryKey(),
+  workspaceId: text132("workspace_id").notNull(),
+  userId: text132("user_id").notNull(),
+  provider: text132("provider").notNull(),
+  verifier: text132("verifier").notNull(),
+  returnPath: text132("return_path").notNull(),
   sandbox: boolean40("sandbox").notNull(),
-  expiresAt: timestamp122("expires_at").notNull()
+  expiresAt: timestamp123("expires_at").notNull()
 });
-var formIntegrationDeliveries = pgTable130(
+var formIntegrationDeliveries = pgTable131(
   "form_integration_deliveries",
   {
-    id: text131("id").primaryKey(),
-    workspaceId: text131("workspace_id").notNull(),
-    formId: text131("form_id").notNull(),
-    integrationId: text131("integration_id").notNull(),
-    eventId: text131("event_id").notNull(),
-    submissionId: text131("submission_id").notNull(),
-    snapshot: jsonb73("snapshot").$type().notNull(),
-    data: jsonb73("data").$type().notNull(),
-    status: text131("status").notNull().default("queued"),
-    attempts: integer65("attempts").notNull().default(0),
-    lastError: text131("last_error"),
-    remoteRecordId: text131("remote_record_id"),
-    nextAttemptAt: timestamp122("next_attempt_at").notNull().defaultNow(),
-    leaseUntil: timestamp122("lease_until"),
-    createdAt: timestamp122("created_at").notNull().defaultNow(),
-    updatedAt: timestamp122("updated_at").notNull().defaultNow()
+    id: text132("id").primaryKey(),
+    workspaceId: text132("workspace_id").notNull(),
+    formId: text132("form_id").notNull(),
+    integrationId: text132("integration_id").notNull(),
+    eventId: text132("event_id").notNull(),
+    submissionId: text132("submission_id").notNull(),
+    snapshot: jsonb74("snapshot").$type().notNull(),
+    data: jsonb74("data").$type().notNull(),
+    status: text132("status").notNull().default("queued"),
+    attempts: integer66("attempts").notNull().default(0),
+    lastError: text132("last_error"),
+    remoteRecordId: text132("remote_record_id"),
+    nextAttemptAt: timestamp123("next_attempt_at").notNull().defaultNow(),
+    leaseUntil: timestamp123("lease_until"),
+    createdAt: timestamp123("created_at").notNull().defaultNow(),
+    updatedAt: timestamp123("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex61("crm_delivery_event_uq").on(
+    uniqueIndex62("crm_delivery_event_uq").on(
       t.workspaceId,
       t.eventId,
       t.integrationId
@@ -30869,101 +30942,101 @@ var formIntegrationDeliveries = pgTable130(
 );
 
 // src/schema/platform_incidents.ts
-import { check as check12, integer as integer66, pgTable as pgTable131, smallint as smallint3, text as text132, timestamp as timestamp123, index as index117 } from "drizzle-orm/pg-core";
+import { check as check12, integer as integer67, pgTable as pgTable132, smallint as smallint3, text as text133, timestamp as timestamp124, index as index118 } from "drizzle-orm/pg-core";
 import { sql as sql41 } from "drizzle-orm";
 var STATUS_IN = sql41.raw("('investigating', 'identified', 'monitoring', 'resolved')");
-var platformIncidents = pgTable131(
+var platformIncidents = pgTable132(
   "platform_incidents",
   {
-    id: text132("id").primaryKey(),
-    number: integer66("number").generatedAlwaysAsIdentity().notNull().unique("platform_incidents_number_key"),
-    title: text132("title").notNull(),
+    id: text133("id").primaryKey(),
+    number: integer67("number").generatedAlwaysAsIdentity().notNull().unique("platform_incidents_number_key"),
+    title: text133("title").notNull(),
     severity: smallint3("severity").notNull(),
     // 1 (worst) … 4
-    status: text132("status").notNull().default("investigating"),
+    status: text133("status").notNull().default("investigating"),
     // investigating | identified | monitoring | resolved
-    services: text132("services").array().notNull().default([]),
-    commanderId: text132("commander_id"),
-    startedAt: timestamp123("started_at", { withTimezone: true }).notNull().defaultNow(),
-    resolvedAt: timestamp123("resolved_at", { withTimezone: true }),
-    createdBy: text132("created_by"),
-    createdAt: timestamp123("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp123("updated_at", { withTimezone: true }).notNull().defaultNow()
+    services: text133("services").array().notNull().default([]),
+    commanderId: text133("commander_id"),
+    startedAt: timestamp124("started_at", { withTimezone: true }).notNull().defaultNow(),
+    resolvedAt: timestamp124("resolved_at", { withTimezone: true }),
+    createdBy: text133("created_by"),
+    createdAt: timestamp124("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp124("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   // Mirrors 0375 exactly: drizzle-kit push builds fresh DBs before the migration runs.
   (t) => [
-    index117("platform_incidents_started_idx").on(t.startedAt.desc()),
+    index118("platform_incidents_started_idx").on(t.startedAt.desc()),
     check12("platform_incidents_severity_check", sql41`${t.severity} BETWEEN 1 AND 4`),
     check12("platform_incidents_status_check", sql41`${t.status} IN ${STATUS_IN}`)
   ]
 );
-var platformIncidentUpdates = pgTable131(
+var platformIncidentUpdates = pgTable132(
   "platform_incident_updates",
   {
-    id: text132("id").primaryKey(),
-    incidentId: text132("incident_id").notNull().references(() => platformIncidents.id, { onDelete: "cascade" }),
-    status: text132("status").notNull(),
-    note: text132("note").notNull(),
-    createdBy: text132("created_by"),
-    createdAt: timestamp123("created_at", { withTimezone: true }).notNull().defaultNow()
+    id: text133("id").primaryKey(),
+    incidentId: text133("incident_id").notNull().references(() => platformIncidents.id, { onDelete: "cascade" }),
+    status: text133("status").notNull(),
+    note: text133("note").notNull(),
+    createdBy: text133("created_by"),
+    createdAt: timestamp124("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (t) => [
-    index117("platform_incident_updates_incident_idx").on(t.incidentId, t.createdAt),
+    index118("platform_incident_updates_incident_idx").on(t.incidentId, t.createdAt),
     check12("platform_incident_updates_status_check", sql41`${t.status} IN ${STATUS_IN}`)
   ]
 );
 
 // src/schema/platform_vendors.ts
-import { date as date4, integer as integer67, pgTable as pgTable132, text as text133, timestamp as timestamp124, varchar as varchar99 } from "drizzle-orm/pg-core";
-var platformVendors = pgTable132("platform_vendors", {
-  id: text133("id").primaryKey(),
-  name: text133("name").notNull(),
-  category: text133("category").notNull(),
-  billingCycle: text133("billing_cycle").notNull().default("monthly"),
+import { date as date4, integer as integer68, pgTable as pgTable133, text as text134, timestamp as timestamp125, varchar as varchar100 } from "drizzle-orm/pg-core";
+var platformVendors = pgTable133("platform_vendors", {
+  id: text134("id").primaryKey(),
+  name: text134("name").notNull(),
+  category: text134("category").notNull(),
+  billingCycle: text134("billing_cycle").notNull().default("monthly"),
   // monthly | yearly | usage
-  monthlyCents: integer67("monthly_cents").notNull().default(0),
+  monthlyCents: integer68("monthly_cents").notNull().default(0),
   // normalised monthly cost
-  currency: varchar99("currency", { length: 3 }).notNull().default("usd"),
+  currency: varchar100("currency", { length: 3 }).notNull().default("usd"),
   renewsOn: date4("renews_on"),
   // YYYY-MM-DD
-  status: text133("status").notNull().default("active"),
+  status: text134("status").notNull().default("active"),
   // active | trial | cancelling | unused
-  ownerEmail: text133("owner_email"),
-  notes: text133("notes"),
-  createdBy: text133("created_by"),
-  createdAt: timestamp124("created_at", { withTimezone: true }).notNull().defaultNow(),
-  updatedAt: timestamp124("updated_at", { withTimezone: true }).notNull().defaultNow()
+  ownerEmail: text134("owner_email"),
+  notes: text134("notes"),
+  createdBy: text134("created_by"),
+  createdAt: timestamp125("created_at", { withTimezone: true }).notNull().defaultNow(),
+  updatedAt: timestamp125("updated_at", { withTimezone: true }).notNull().defaultNow()
 });
 
 // src/schema/platform_tasks.ts
-import { check as check13, date as date5, pgTable as pgTable133, text as text134, timestamp as timestamp125, index as index118 } from "drizzle-orm/pg-core";
+import { check as check13, date as date5, pgTable as pgTable134, text as text135, timestamp as timestamp126, index as index119 } from "drizzle-orm/pg-core";
 import { sql as sql42 } from "drizzle-orm";
-var platformTasks = pgTable133(
+var platformTasks = pgTable134(
   "platform_tasks",
   {
-    id: text134("id").primaryKey(),
-    title: text134("title").notNull(),
-    description: text134("description"),
-    status: text134("status").notNull().default("open"),
+    id: text135("id").primaryKey(),
+    title: text135("title").notNull(),
+    description: text135("description"),
+    status: text135("status").notNull().default("open"),
     // open | in_progress | done
-    priority: text134("priority").notNull().default("medium"),
+    priority: text135("priority").notNull().default("medium"),
     // low | medium | high | urgent
-    assigneeId: text134("assignee_id"),
+    assigneeId: text135("assignee_id"),
     dueOn: date5("due_on"),
     // YYYY-MM-DD
-    entityType: text134("entity_type"),
+    entityType: text135("entity_type"),
     // user | workspace | incident | deal
-    entityId: text134("entity_id"),
-    entityLabel: text134("entity_label"),
-    completedAt: timestamp125("completed_at", { withTimezone: true }),
-    createdBy: text134("created_by"),
-    createdAt: timestamp125("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp125("updated_at", { withTimezone: true }).notNull().defaultNow()
+    entityId: text135("entity_id"),
+    entityLabel: text135("entity_label"),
+    completedAt: timestamp126("completed_at", { withTimezone: true }),
+    createdBy: text135("created_by"),
+    createdAt: timestamp126("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp126("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   // Mirrors 0377 exactly: drizzle-kit push builds fresh DBs before the migration runs.
   (t) => [
-    index118("platform_tasks_open_idx").on(t.status, t.dueOn),
-    index118("platform_tasks_entity_idx").on(t.entityType, t.entityId),
+    index119("platform_tasks_open_idx").on(t.status, t.dueOn),
+    index119("platform_tasks_entity_idx").on(t.entityType, t.entityId),
     check13("platform_tasks_status_check", sql42`${t.status} IN ('open', 'in_progress', 'done')`),
     check13("platform_tasks_priority_check", sql42`${t.priority} IN ('low', 'medium', 'high', 'urgent')`),
     check13("platform_tasks_entity_type_check", sql42`${t.entityType} IN ('user', 'workspace', 'incident', 'deal')`),
@@ -31646,6 +31719,8 @@ export {
   db,
   deployTargets,
   deviceAuthorizations,
+  dockUiSourceVersions,
+  dockUiSources,
   emailSuppressions,
   ensureCollection,
   ensureDefaultWorkspace,