@bettercms-ai/db 0.4.4 → 0.4.5

package/dist/index.js

@@ -22197,11 +22197,11 @@ import {
   boolean as boolean7,
   integer as integer8,
   index as index10,
-  uniqueIndex as uniqueIndex3,
+  uniqueIndex as uniqueIndex4,
   unique
 } from "drizzle-orm/pg-core";
 import { relations as relations9 } from "drizzle-orm/relations";
-import { sql as sql5 } from "drizzle-orm";
+import { sql as sql6 } from "drizzle-orm";
 
 // src/schema/workspaces.ts
 import {
@@ -22321,9 +22321,11 @@ import {
   timestamp as timestamp5,
   jsonb as jsonb5,
   integer as integer4,
-  index as index4
+  index as index4,
+  uniqueIndex
 } from "drizzle-orm/pg-core";
 import { relations as relations3 } from "drizzle-orm/relations";
+import { sql as sql2 } from "drizzle-orm";
 
 // src/schema/content_entries.ts
 import {
@@ -22770,7 +22772,10 @@ var contentModels = pgTable4(
     // Soft-delete filtering
     index4("content_models_deleted_at_idx").on(table.deletedAt),
     // FLO-735: the Collections list filters on `page_id IS NULL` on every project load.
-    index4("content_models_page_id_idx").on(table.pageId)
+    index4("content_models_page_id_idx").on(table.pageId),
+    // 0356 + 0371: one Accounts / Proof collection per project PER BRANCH — ensureAbmModels
+    // relies on it for idempotence, and a branch copy needs its own row under the same slug.
+    uniqueIndex("content_models_project_abm_slug_idx").on(table.projectId, table.branchId, table.slug).where(sql2`deleted_at IS NULL AND slug IN ('abm-accounts', 'proof')`)
   ]
 );
 var contentModelsRelations = relations3(contentModels, ({ one, many }) => ({
@@ -22795,10 +22800,10 @@ import {
   real,
   boolean as boolean3,
   index as index6,
-  uniqueIndex as uniqueIndex2
+  uniqueIndex as uniqueIndex3
 } from "drizzle-orm/pg-core";
 import { relations as relations5 } from "drizzle-orm/relations";
-import { sql as sql3 } from "drizzle-orm";
+import { sql as sql4 } from "drizzle-orm";
 
 // src/schema/folders.ts
 import {
@@ -22807,9 +22812,9 @@ import {
   varchar as varchar5,
   timestamp as timestamp6,
   index as index5,
-  uniqueIndex
+  uniqueIndex as uniqueIndex2
 } from "drizzle-orm/pg-core";
-import { sql as sql2 } from "drizzle-orm";
+import { sql as sql3 } from "drizzle-orm";
 import { relations as relations4 } from "drizzle-orm/relations";
 var folders = pgTable5(
   "folders",
@@ -22835,7 +22840,7 @@ var folders = pgTable5(
     // Raw migration 0341 adds NULLS NOT DISTINCT; Drizzle's IndexBuilder cannot express it.
     // Without it this constrained nothing at the ROOT (parent_id IS NULL), where every folder the
     // Assets lane creates lives — so duplicate root folders were creatable through the API.
-    uniqueIndex("folders_sibling_name_uq").on(table.projectId, table.parentId, sql2`lower(${table.name})`).where(sql2`${table.deletedAt} IS NULL`)
+    uniqueIndex2("folders_sibling_name_uq").on(table.projectId, table.parentId, sql3`lower(${table.name})`).where(sql3`${table.deletedAt} IS NULL`)
   ]
 );
 var foldersRelations = relations4(folders, ({ one, many }) => ({
@@ -22902,7 +22907,7 @@ var mediaAssets = pgTable6(
     //
     // NOT NULL DEFAULT [] rather than nullable: `tags @> ARRAY[…]` and `unnest(tags)` are both
     // wrong for a NULL, and "no tags" is genuinely an empty list, not an unknown one.
-    tags: text7("tags").array().notNull().$type().default(sql3`'{}'::text[]`),
+    tags: text7("tags").array().notNull().$type().default(sql4`'{}'::text[]`),
     folderId: text7("folder_id"),
     // FK → folders.id; NULL = project root
     // The site-relative path a release-lane adoption came from (`/img/hero.png`), NULL for
@@ -22959,7 +22964,7 @@ var mediaAssets = pgTable6(
     // "Bookmarked" rail entry — PARTIAL index (only the starred minority). The
     // .where() must match migration 0157 exactly, or db:generate emits a spurious
     // diff for an index that already exists with a different definition.
-    index6("media_assets_bookmarked_idx").on(table.projectId).where(sql3`${table.bookmarked} = true`),
+    index6("media_assets_bookmarked_idx").on(table.projectId).where(sql4`${table.bookmarked} = true`),
     // Tag filtering + the tag facet. GIN's default text[] opclass indexes containment (@>),
     // which is the operator the list route uses — a btree here would index nothing useful.
     index6("media_assets_tags_idx").using("gin", table.tags),
@@ -22967,7 +22972,7 @@ var mediaAssets = pgTable6(
     // up: PARTIAL (uploads are all NULL and must not collide) and UNIQUE, so two releases racing
     // the same path end with one row. Soft-deleted rows keep the key, so an asset the user
     // trashed is not re-adopted while it sits in Trash. Must match migration 0314 exactly.
-    uniqueIndex2("media_assets_project_source_path_idx").on(table.projectId, table.sourcePath).where(sql3`${table.sourcePath} IS NOT NULL`)
+    uniqueIndex3("media_assets_project_source_path_idx").on(table.projectId, table.sourcePath).where(sql4`${table.sourcePath} IS NOT NULL`)
   ]
 );
 var mediaAssetsRelations = relations5(mediaAssets, ({ one }) => ({
@@ -23110,7 +23115,7 @@ import {
   index as index8
 } from "drizzle-orm/pg-core";
 import { relations as relations7 } from "drizzle-orm/relations";
-import { sql as sql4 } from "drizzle-orm";
+import { sql as sql5 } from "drizzle-orm";
 var apiKeys = pgTable8(
   "api_keys",
   {
@@ -23132,7 +23137,7 @@ var apiKeys = pgTable8(
     // SHA-256 of the plaintext key
     keyPrefix: varchar8("key_prefix", { length: 16 }).notNull(),
     // first 12 chars for identification
-    permissions: text9("permissions").array().notNull().$type().default(sql4`ARRAY['content:read']`),
+    permissions: text9("permissions").array().notNull().$type().default(sql5`ARRAY['content:read']`),
     tokenType: varchar8("token_type", { length: 20 }).notNull().default("read_only"),
     // Which front door minted this management key (0150): "device" | "authorization_code" |
     // "studio". Load-bearing for the workspace "External agents" switch — it is the ONLY thing
@@ -23613,13 +23618,13 @@ var projects = pgTable10(
     // Unique slug per workspace — partial on deleted_at IS NULL so a soft-deleted
     // project frees its slug (delete then recreate/re-import works). See migration
     // 0051; the create handler's conflict check also excludes soft-deleted rows.
-    uniqueIndex3("projects_workspace_slug_idx").on(table.workspaceId, table.slug).where(sql5`${table.deletedAt} IS NULL`),
+    uniqueIndex4("projects_workspace_slug_idx").on(table.workspaceId, table.slug).where(sql6`${table.deletedAt} IS NULL`),
     // Workspace filtering
     index10("projects_workspace_idx").on(table.workspaceId),
     // Archive: every archive-aware list filters on this, so it earns an index like deletedAt.
     index10("projects_archived_at_idx").on(table.archivedAt),
     // Only the purge drain's rows: switch-archived and not yet deleted.
-    index10("projects_purge_after_idx").on(table.purgeAfter).where(sql5`${table.purgeAfter} IS NOT NULL AND ${table.deletedAt} IS NULL`)
+    index10("projects_purge_after_idx").on(table.purgeAfter).where(sql6`${table.purgeAfter} IS NOT NULL AND ${table.deletedAt} IS NULL`)
   ]
 );
 var projectFolders = pgTable10("project_folders", {
@@ -23800,7 +23805,7 @@ import {
   varchar as varchar13,
   timestamp as timestamp15,
   index as index13,
-  uniqueIndex as uniqueIndex4
+  uniqueIndex as uniqueIndex5
 } from "drizzle-orm/pg-core";
 var workspaceMembers = pgTable14(
   "workspace_members",
@@ -23822,7 +23827,7 @@ var workspaceMembers = pgTable14(
   },
   (table) => [
     // Unique membership: a user can only join a workspace once
-    uniqueIndex4("workspace_members_workspace_user_idx").on(
+    uniqueIndex5("workspace_members_workspace_user_idx").on(
       table.workspaceId,
       table.userId
     ),
@@ -23844,7 +23849,7 @@ import {
   jsonb as jsonb10,
   boolean as boolean9,
   index as index14,
-  uniqueIndex as uniqueIndex5
+  uniqueIndex as uniqueIndex6
 } from "drizzle-orm/pg-core";
 var workspaceRoles = pgTable15(
   "workspace_roles",
@@ -23867,7 +23872,7 @@ var workspaceRoles = pgTable15(
     updatedAt: timestamp16("updated_at").notNull().defaultNow()
   },
   (table) => [
-    uniqueIndex5("workspace_roles_workspace_key_idx").on(
+    uniqueIndex6("workspace_roles_workspace_key_idx").on(
       table.workspaceId,
       table.key
     ),
@@ -23884,7 +23889,7 @@ import {
   boolean as boolean10,
   integer as integer9,
   index as index15,
-  uniqueIndex as uniqueIndex6
+  uniqueIndex as uniqueIndex7
 } from "drizzle-orm/pg-core";
 var workflowStages = pgTable16(
   "workflow_stages",
@@ -23911,7 +23916,7 @@ var workflowStages = pgTable16(
     updatedAt: timestamp17("updated_at").notNull().defaultNow()
   },
   (table) => [
-    uniqueIndex6("workflow_stages_project_key_idx").on(table.projectId, table.key),
+    uniqueIndex7("workflow_stages_project_key_idx").on(table.projectId, table.key),
     index15("workflow_stages_project_idx").on(table.projectId)
   ]
 );
@@ -23988,7 +23993,7 @@ import {
   text as text20,
   timestamp as timestamp20,
   unique as unique2,
-  uniqueIndex as uniqueIndex7,
+  uniqueIndex as uniqueIndex8,
   varchar as varchar16
 } from "drizzle-orm/pg-core";
 var projectLayouts = pgTable19(
@@ -24009,7 +24014,7 @@ var projectLayouts = pgTable19(
   },
   (table) => [
     unique2("project_layouts_id_project_unique").on(table.id, table.projectId),
-    uniqueIndex7("project_layouts_project_unique").on(table.projectId),
+    uniqueIndex8("project_layouts_project_unique").on(table.projectId),
     index18("project_layouts_workspace_idx").on(table.workspaceId)
   ]
 );
@@ -24031,14 +24036,14 @@ var projectLayoutVersions = pgTable19(
       foreignColumns: [projectLayouts.id, projectLayouts.projectId],
       name: "project_layout_versions_layout_project_fkey"
     }).onDelete("cascade"),
-    uniqueIndex7("project_layout_versions_layout_version_unique").on(table.layoutId, table.version),
+    uniqueIndex8("project_layout_versions_layout_version_unique").on(table.layoutId, table.version),
     index18("project_layout_versions_project_idx").on(table.projectId, table.version)
   ]
 );
 
 // src/schema/page_folders.ts
-import { pgTable as pgTable20, text as text21, varchar as varchar17, boolean as boolean11, index as index19, uniqueIndex as uniqueIndex8 } from "drizzle-orm/pg-core";
-import { relations as relations10, sql as sql6 } from "drizzle-orm";
+import { pgTable as pgTable20, text as text21, varchar as varchar17, boolean as boolean11, index as index19, uniqueIndex as uniqueIndex9 } from "drizzle-orm/pg-core";
+import { relations as relations10, sql as sql7 } from "drizzle-orm";
 var pageFolders = pgTable20(
   "page_folders",
   {
@@ -24067,7 +24072,7 @@ var pageFolders = pgTable20(
   (t) => [
     index19("page_folders_project_idx").on(t.projectId),
     index19("page_folders_parent_idx").on(t.parentId),
-    uniqueIndex8("page_folders_project_slug_uniq").on(t.projectId, t.branchId, t.slug).where(sql6`deleted_at IS NULL`)
+    uniqueIndex9("page_folders_project_slug_uniq").on(t.projectId, t.branchId, t.slug).where(sql7`deleted_at IS NULL`)
   ]
 );
 var pageFoldersRelations = relations10(pageFolders, ({ many }) => ({
@@ -24244,7 +24249,7 @@ import {
   integer as integer15,
   timestamp as timestamp26,
   index as index24,
-  uniqueIndex as uniqueIndex9
+  uniqueIndex as uniqueIndex10
 } from "drizzle-orm/pg-core";
 import { relations as relations11 } from "drizzle-orm/relations";
 var formContacts = pgTable26(
@@ -24265,7 +24270,7 @@ var formContacts = pgTable26(
   },
   (t) => [
     // Dedup: one contact per email per workspace (also serves workspace lookups)
-    uniqueIndex9("form_contacts_workspace_email_uq").on(t.workspaceId, t.email),
+    uniqueIndex10("form_contacts_workspace_email_uq").on(t.workspaceId, t.email),
     // Listing newest-first
     index24("form_contacts_workspace_seen_idx").on(t.workspaceId, t.lastSeenAt)
   ]
@@ -24521,7 +24526,7 @@ var auditLogs = pgTable31(
 );
 
 // src/schema/accounts.ts
-import { pgTable as pgTable32, text as text33, timestamp as timestamp31, uniqueIndex as uniqueIndex10 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable32, text as text33, timestamp as timestamp31, uniqueIndex as uniqueIndex11 } from "drizzle-orm/pg-core";
 var accounts = pgTable32(
   "accounts",
   {
@@ -24542,7 +24547,7 @@ var accounts = pgTable32(
     updatedAt: timestamp31("updated_at").notNull().defaultNow()
   },
   (table) => [
-    uniqueIndex10("accounts_user_id_provider_idx").on(table.userId, table.providerId)
+    uniqueIndex11("accounts_user_id_provider_idx").on(table.userId, table.providerId)
   ]
 );
 
@@ -24579,7 +24584,7 @@ import {
   boolean as boolean15,
   timestamp as timestamp33,
   index as index31,
-  uniqueIndex as uniqueIndex11
+  uniqueIndex as uniqueIndex12
 } from "drizzle-orm/pg-core";
 var pendingInvites = pgTable34(
   "pending_invites",
@@ -24611,7 +24616,7 @@ var pendingInvites = pgTable34(
     // Fast lookup by workspace (list pending invites)
     index31("pending_invites_workspace_idx").on(table.workspaceId),
     // Unique token for magic-link lookup
-    uniqueIndex11("pending_invites_token_idx").on(table.token),
+    uniqueIndex12("pending_invites_token_idx").on(table.token),
     // Expiry cleanup queries
     index31("pending_invites_expires_idx").on(table.expiresAt)
   ]
@@ -24653,7 +24658,7 @@ var twoFactor = pgTable36(
 );
 
 // src/schema/passkeys.ts
-import { pgTable as pgTable37, text as text38, boolean as boolean17, integer as integer18, timestamp as timestamp35, index as index34, uniqueIndex as uniqueIndex12 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable37, text as text38, boolean as boolean17, integer as integer18, timestamp as timestamp35, index as index34, uniqueIndex as uniqueIndex13 } from "drizzle-orm/pg-core";
 var passkeys = pgTable37(
   "passkey",
   {
@@ -24678,13 +24683,13 @@ var passkeys = pgTable37(
     // what the database actually enforces. A plain index here plus a unique
     // constraint in the migration is exactly the drift that makes a later
     // `db:generate` propose dropping the constraint.
-    uniqueIndex12("passkey_credential_id_key").on(table.credentialID)
+    uniqueIndex13("passkey_credential_id_key").on(table.credentialID)
   ]
 );
 
 // src/schema/sso.ts
-import { pgTable as pgTable38, text as text39, boolean as boolean18, timestamp as timestamp36, index as index35, uniqueIndex as uniqueIndex13 } from "drizzle-orm/pg-core";
-import { sql as sql7 } from "drizzle-orm";
+import { pgTable as pgTable38, text as text39, boolean as boolean18, timestamp as timestamp36, index as index35, uniqueIndex as uniqueIndex14 } from "drizzle-orm/pg-core";
+import { sql as sql8 } from "drizzle-orm";
 var ssoProviders = pgTable38(
   "sso_provider",
   {
@@ -24706,7 +24711,7 @@ var ssoProviders = pgTable38(
     // UNIQUE because the plugin declares `providerId` unique and generates the provider's
     // redirect URL from it. A plain index here plus a unique constraint in the migration is
     // exactly the drift that makes a later `db:generate` propose dropping the constraint.
-    uniqueIndex13("sso_provider_provider_id_key").on(table.providerId),
+    uniqueIndex14("sso_provider_provider_id_key").on(table.providerId),
     // Sign-in resolves a provider by the email's domain, on every SSO login.
     index35("sso_provider_domain_idx").on(table.domain),
     // 🔴 GLOBAL, not partial on domain_verified. Sign-in resolves with
@@ -24714,10 +24719,10 @@ var ssoProviders = pgTable38(
     // an unverified row can be the one lookup returns — a partial index would let any
     // workspace shadow another tenant's verified domain and break their live logins.
     // The cost is squatting, which fails closed at onboarding instead of breaking working auth.
-    uniqueIndex13("sso_provider_domain_key").on(table.domain),
+    uniqueIndex14("sso_provider_domain_key").on(table.domain),
     // One provider per workspace, enforced by the database — two concurrent PUTs would
     // otherwise both see "none", both register, and both bind.
-    uniqueIndex13("sso_provider_organization_key").on(table.organizationId).where(sql7`"organization_id" IS NOT NULL`),
+    uniqueIndex14("sso_provider_organization_key").on(table.organizationId).where(sql8`"organization_id" IS NOT NULL`),
     // The gated wrapper lists and scopes by workspace on every read.
     index35("sso_provider_organization_idx").on(table.organizationId)
   ]
@@ -24813,7 +24818,7 @@ import {
   jsonb as jsonb23,
   timestamp as timestamp39,
   index as index38,
-  uniqueIndex as uniqueIndex14
+  uniqueIndex as uniqueIndex15
 } from "drizzle-orm/pg-core";
 var collectionGrants = pgTable41(
   "collection_grants",
@@ -24832,7 +24837,7 @@ var collectionGrants = pgTable41(
   },
   (table) => [
     // One grant row per user per collection per workspace.
-    uniqueIndex14("collection_grants_ws_user_model_idx").on(
+    uniqueIndex15("collection_grants_ws_user_model_idx").on(
       table.workspaceId,
       table.userId,
       table.contentModelId
@@ -24850,7 +24855,7 @@ import {
   boolean as boolean20,
   timestamp as timestamp40,
   index as index39,
-  uniqueIndex as uniqueIndex15
+  uniqueIndex as uniqueIndex16
 } from "drizzle-orm/pg-core";
 var projectMembers = pgTable42(
   "project_members",
@@ -24879,7 +24884,7 @@ var projectMembers = pgTable42(
   },
   (table) => [
     // One role per user per project.
-    uniqueIndex15("project_members_project_user_idx").on(table.projectId, table.userId),
+    uniqueIndex16("project_members_project_user_idx").on(table.projectId, table.userId),
     // Fast "members of this project" + "projects for this user" lookups.
     index39("project_members_project_idx").on(table.projectId),
     index39("project_members_user_idx").on(table.workspaceId, table.userId),
@@ -24896,10 +24901,10 @@ import {
   pgTable as pgTable43,
   text as text44,
   timestamp as timestamp41,
-  uniqueIndex as uniqueIndex16,
+  uniqueIndex as uniqueIndex17,
   varchar as varchar27
 } from "drizzle-orm/pg-core";
-import { sql as sql8 } from "drizzle-orm";
+import { sql as sql9 } from "drizzle-orm";
 var SUGGESTION_KINDS = ["chat", "pass", "link"];
 var projectSuggestions = pgTable43(
   "project_suggestions",
@@ -24932,12 +24937,12 @@ var projectSuggestions = pgTable43(
   (table) => [
     // One live suggestion per rule per project. Partial, so dismissing does not bar the rule
     // from firing again later.
-    uniqueIndex16("project_suggestions_live_uidx").on(table.projectId, table.ruleId).where(sql8`${table.dismissedAt} IS NULL`),
+    uniqueIndex17("project_suggestions_live_uidx").on(table.projectId, table.ruleId).where(sql9`${table.dismissedAt} IS NULL`),
     // The read path: active suggestions for one project, best first.
-    index40("project_suggestions_project_rank_idx").on(table.projectId, table.rank).where(sql8`${table.dismissedAt} IS NULL`),
+    index40("project_suggestions_project_rank_idx").on(table.projectId, table.rank).where(sql9`${table.dismissedAt} IS NULL`),
     check(
       "project_suggestions_kind_check",
-      sql8`${table.kind} IN ('chat','pass','link')`
+      sql9`${table.kind} IN ('chat','pass','link')`
     )
   ]
 );
@@ -24951,7 +24956,7 @@ import {
   integer as integer20,
   boolean as boolean21,
   index as index41,
-  uniqueIndex as uniqueIndex17
+  uniqueIndex as uniqueIndex18
 } from "drizzle-orm/pg-core";
 var deviceAuthorizations = pgTable44(
   "device_authorizations",
@@ -25026,8 +25031,8 @@ var deviceAuthorizations = pgTable44(
     createdAt: timestamp42("created_at").notNull().defaultNow()
   },
   (table) => [
-    uniqueIndex17("device_authorizations_device_code_hash_idx").on(table.deviceCodeHash),
-    uniqueIndex17("device_authorizations_user_code_idx").on(table.userCode),
+    uniqueIndex18("device_authorizations_device_code_hash_idx").on(table.deviceCodeHash),
+    uniqueIndex18("device_authorizations_user_code_idx").on(table.userCode),
     index41("device_authorizations_refresh_token_hash_idx").on(table.refreshTokenHash),
     index41("device_authorizations_prev_refresh_token_hash_idx").on(table.previousRefreshTokenHash),
     index41("device_authorizations_workspace_idx").on(table.workspaceId)
@@ -25261,7 +25266,7 @@ var githubInstallations = pgTable49("github_installations", {
 });
 
 // src/schema/custom_domains.ts
-import { pgTable as pgTable50, text as text51, varchar as varchar34, boolean as boolean23, timestamp as timestamp46, index as index44, uniqueIndex as uniqueIndex18, jsonb as jsonb26 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable50, text as text51, varchar as varchar34, boolean as boolean23, timestamp as timestamp46, index as index44, uniqueIndex as uniqueIndex19, jsonb as jsonb26 } from "drizzle-orm/pg-core";
 var customDomains = pgTable50(
   "custom_domains",
   {
@@ -25303,7 +25308,7 @@ var customDomains = pgTable50(
     ...auditColumns
   },
   (t) => [
-    uniqueIndex18("custom_domains_hostname_unique").on(t.hostname),
+    uniqueIndex19("custom_domains_hostname_unique").on(t.hostname),
     index44("custom_domains_project_idx").on(t.projectId),
     // Mirrors the partial unique index from 0237. Drizzle cannot express the WHERE clause
     // here, so the DB is the source of truth for the constraint; this is the read hint.
@@ -25312,8 +25317,8 @@ var customDomains = pgTable50(
 );
 
 // src/schema/storage_configs.ts
-import { pgTable as pgTable51, text as text52, varchar as varchar35, boolean as boolean24, timestamp as timestamp47, uniqueIndex as uniqueIndex19, index as index45 } from "drizzle-orm/pg-core";
-import { sql as sql9 } from "drizzle-orm";
+import { pgTable as pgTable51, text as text52, varchar as varchar35, boolean as boolean24, timestamp as timestamp47, uniqueIndex as uniqueIndex20, index as index45 } from "drizzle-orm/pg-core";
+import { sql as sql10 } from "drizzle-orm";
 var storageConfigs = pgTable51(
   "storage_configs",
   {
@@ -25349,7 +25354,7 @@ var storageConfigs = pgTable51(
     index45("storage_configs_project_idx").on(t.projectId),
     index45("storage_configs_workspace_idx").on(t.workspaceId),
     // At most one active config per project.
-    uniqueIndex19("storage_configs_active_project_unique").on(t.projectId).where(sql9`deleted_at IS NULL`)
+    uniqueIndex20("storage_configs_active_project_unique").on(t.projectId).where(sql10`deleted_at IS NULL`)
   ]
 );
 
@@ -25497,8 +25502,8 @@ var publishDeliveries = pgTable53(
 );
 
 // src/schema/hosting_connections.ts
-import { pgTable as pgTable54, text as text55, varchar as varchar38, timestamp as timestamp50, index as index48, uniqueIndex as uniqueIndex20 } from "drizzle-orm/pg-core";
-import { sql as sql10 } from "drizzle-orm";
+import { pgTable as pgTable54, text as text55, varchar as varchar38, timestamp as timestamp50, index as index48, uniqueIndex as uniqueIndex21 } from "drizzle-orm/pg-core";
+import { sql as sql11 } from "drizzle-orm";
 var hostingConnections = pgTable54(
   "hosting_connections",
   {
@@ -25536,13 +25541,13 @@ var hostingConnections = pgTable54(
   (t) => [
     index48("hosting_connections_workspace_idx").on(t.workspaceId),
     // Reconnecting the same account UPDATEs rather than accumulating a second live credential.
-    uniqueIndex20("hosting_connections_account_unique").on(t.workspaceId, t.provider, t.accountId).where(sql10`deleted_at IS NULL`)
+    uniqueIndex21("hosting_connections_account_unique").on(t.workspaceId, t.provider, t.accountId).where(sql11`deleted_at IS NULL`)
   ]
 );
 
 // src/schema/external_deployments.ts
-import { pgTable as pgTable55, text as text56, varchar as varchar39, integer as integer23, timestamp as timestamp51, index as index49, uniqueIndex as uniqueIndex21 } from "drizzle-orm/pg-core";
-import { sql as sql11 } from "drizzle-orm";
+import { pgTable as pgTable55, text as text56, varchar as varchar39, integer as integer23, timestamp as timestamp51, index as index49, uniqueIndex as uniqueIndex22 } from "drizzle-orm/pg-core";
+import { sql as sql12 } from "drizzle-orm";
 var externalDeployments = pgTable55(
   "external_deployments",
   {
@@ -25578,7 +25583,7 @@ var externalDeployments = pgTable55(
     updatedAt: timestamp51("updated_at").notNull().defaultNow()
   },
   (t) => [
-    index49("external_deployments_claim_idx").on(t.state, t.createdAt).where(sql11`state IN ('queued', 'deploying')`),
+    index49("external_deployments_claim_idx").on(t.state, t.createdAt).where(sql12`state IN ('queued', 'deploying')`),
     index49("external_deployments_workspace_idx").on(t.workspaceId),
     index49("external_deployments_project_idx").on(t.projectId, t.createdAt.desc()),
     /**
@@ -25588,12 +25593,12 @@ var externalDeployments = pgTable55(
      * Git-mode rows have sha NULL and are therefore NOT covered — NULLs never conflict — which is
      * correct: a git deploy carries no artifact identity, so two publishes are two real builds.
      */
-    uniqueIndex21("external_deployments_inflight_unique").on(t.targetId, t.sha).where(sql11`state IN ('queued', 'deploying')`)
+    uniqueIndex22("external_deployments_inflight_unique").on(t.targetId, t.sha).where(sql12`state IN ('queued', 'deploying')`)
   ]
 );
 
 // src/schema/page_types.ts
-import { pgTable as pgTable56, text as text57, varchar as varchar40, jsonb as jsonb27, index as index50, uniqueIndex as uniqueIndex22 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable56, text as text57, varchar as varchar40, jsonb as jsonb27, index as index50, uniqueIndex as uniqueIndex23 } from "drizzle-orm/pg-core";
 var pageTypes = pgTable56(
   "page_types",
   {
@@ -25613,12 +25618,12 @@ var pageTypes = pgTable56(
   (t) => [
     index50("page_types_project_idx").on(t.projectId),
     index50("page_types_workspace_idx").on(t.workspaceId),
-    uniqueIndex22("page_types_project_slug_unique").on(t.projectId, t.branchId, t.slug)
+    uniqueIndex23("page_types_project_slug_unique").on(t.projectId, t.branchId, t.slug)
   ]
 );
 
 // src/schema/build_triggers.ts
-import { pgTable as pgTable57, text as text58, varchar as varchar41, boolean as boolean26, timestamp as timestamp53, integer as integer24, jsonb as jsonb28, index as index51, uniqueIndex as uniqueIndex23 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable57, text as text58, varchar as varchar41, boolean as boolean26, timestamp as timestamp53, integer as integer24, jsonb as jsonb28, index as index51, uniqueIndex as uniqueIndex24 } from "drizzle-orm/pg-core";
 var BUILD_TRIGGER_KINDS = ["webhook", "content", "schedule"];
 var buildTriggers = pgTable57(
   "build_triggers",
@@ -25653,7 +25658,7 @@ var buildTriggers = pgTable57(
   (t) => [
     index51("build_triggers_project_idx").on(t.projectId),
     index51("build_triggers_workspace_idx").on(t.workspaceId),
-    uniqueIndex23("build_triggers_project_name_unique").on(t.projectId, t.name)
+    uniqueIndex24("build_triggers_project_name_unique").on(t.projectId, t.name)
   ]
 );
 var buildTriggerRuns = pgTable57(
@@ -25716,7 +25721,7 @@ var generatedTypes = pgTable59("generated_types", {
 });
 
 // src/schema/agent_keys.ts
-import { pgTable as pgTable60, text as text61, uniqueIndex as uniqueIndex24 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable60, text as text61, uniqueIndex as uniqueIndex25 } from "drizzle-orm/pg-core";
 var agentKeys = pgTable60(
   "agent_keys",
   {
@@ -25728,11 +25733,11 @@ var agentKeys = pgTable60(
     // AES-256-GCM encrypted
     ...auditColumns
   },
-  (t) => [uniqueIndex24("agent_keys_workspace_unique").on(t.workspaceId)]
+  (t) => [uniqueIndex25("agent_keys_workspace_unique").on(t.workspaceId)]
 );
 
 // src/schema/ai_provider_keys.ts
-import { pgTable as pgTable61, text as text62, varchar as varchar44, uniqueIndex as uniqueIndex25 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable61, text as text62, varchar as varchar44, uniqueIndex as uniqueIndex26 } from "drizzle-orm/pg-core";
 var aiProviderKeys = pgTable61(
   "ai_provider_keys",
   {
@@ -25746,7 +25751,7 @@ var aiProviderKeys = pgTable61(
     keyHint: varchar44("key_hint", { length: 8 }).notNull(),
     ...auditColumns
   },
-  (t) => [uniqueIndex25("ai_provider_keys_workspace_provider_key").on(t.workspaceId, t.provider)]
+  (t) => [uniqueIndex26("ai_provider_keys_workspace_provider_key").on(t.workspaceId, t.provider)]
 );
 
 // src/schema/agent_sessions.ts
@@ -25800,7 +25805,7 @@ var agentMessages = pgTable62(
 
 // src/schema/agent_instructions.ts
 import { pgTable as pgTable63, text as text64, varchar as varchar46, boolean as boolean27, jsonb as jsonb30, timestamp as timestamp57, index as index53, check as check2 } from "drizzle-orm/pg-core";
-import { sql as sql12 } from "drizzle-orm";
+import { sql as sql13 } from "drizzle-orm";
 var INSTRUCTION_KINDS = ["skill", "rule"];
 var INSTRUCTION_SOURCES = ["template", "manual", "import"];
 var INSTRUCTION_BODY_MAX = 8e3;
@@ -25835,9 +25840,9 @@ var agentInstructions = pgTable63(
     // creates the table from THIS file, after which 0167's `CREATE TABLE IF NOT EXISTS` no-ops —
     // so the CHECKs defined only in the SQL would never exist in a dev database. Names match 0167
     // exactly; a mismatch would have push and setup-db each try to own the constraint.
-    check2("agent_instructions_kind_check", sql12`${table.kind} IN ('skill', 'rule')`),
-    check2("agent_instructions_source_check", sql12`${table.source} IN ('template', 'manual', 'import')`),
-    check2("agent_instructions_body_len_check", sql12`char_length(${table.body}) <= 8000`)
+    check2("agent_instructions_kind_check", sql13`${table.kind} IN ('skill', 'rule')`),
+    check2("agent_instructions_source_check", sql13`${table.source} IN ('template', 'manual', 'import')`),
+    check2("agent_instructions_body_len_check", sql13`char_length(${table.body}) <= 8000`)
   ]
 );
 
@@ -25851,10 +25856,10 @@ import {
   pgTable as pgTable64,
   text as text65,
   timestamp as timestamp58,
-  uniqueIndex as uniqueIndex26,
+  uniqueIndex as uniqueIndex27,
   varchar as varchar47
 } from "drizzle-orm/pg-core";
-import { sql as sql13 } from "drizzle-orm";
+import { sql as sql14 } from "drizzle-orm";
 var CUSTOM_AGENT_INSTRUCTIONS_MAX = 8e3;
 var CUSTOM_AGENT_CAPABILITIES = [
   "content-read",
@@ -25881,11 +25886,11 @@ var customAgents = pgTable64(
     archivedAt: timestamp58("archived_at", { withTimezone: true })
   },
   (table) => [
-    uniqueIndex26("custom_agents_workspace_slug_unique").on(table.workspaceId, table.slug),
+    uniqueIndex27("custom_agents_workspace_slug_unique").on(table.workspaceId, table.slug),
     index54("custom_agents_workspace_status_idx").on(table.workspaceId, table.status, table.updatedAt),
     index54("custom_agents_project_status_idx").on(table.projectId, table.status, table.updatedAt),
-    check3("custom_agents_status_check", sql13`${table.status} IN ('active', 'archived')`),
-    check3("custom_agents_version_check", sql13`${table.optimisticVersion} > 0`)
+    check3("custom_agents_status_check", sql14`${table.status} IN ('active', 'archived')`),
+    check3("custom_agents_version_check", sql14`${table.optimisticVersion} > 0`)
   ]
 );
 var customAgentRevisions = pgTable64(
@@ -25905,16 +25910,16 @@ var customAgentRevisions = pgTable64(
     createdAt: timestamp58("created_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    uniqueIndex26("custom_agent_revisions_agent_version_unique").on(table.agentId, table.version),
+    uniqueIndex27("custom_agent_revisions_agent_version_unique").on(table.agentId, table.version),
     index54("custom_agent_revisions_workspace_agent_idx").on(table.workspaceId, table.agentId),
-    check3("custom_agent_revisions_version_check", sql13`${table.version} > 0`),
-    check3("custom_agent_revisions_speed_check", sql13`${table.speed} IN ('lite', 'balanced', 'max')`),
-    check3("custom_agent_revisions_review_check", sql13`${table.reviewPolicy} = 'draft_only'`),
+    check3("custom_agent_revisions_version_check", sql14`${table.version} > 0`),
+    check3("custom_agent_revisions_speed_check", sql14`${table.speed} IN ('lite', 'balanced', 'max')`),
+    check3("custom_agent_revisions_review_check", sql14`${table.reviewPolicy} = 'draft_only'`),
     check3(
       "custom_agent_revisions_instructions_len_check",
-      sql13`char_length(${table.instructions}) BETWEEN 1 AND 8000`
+      sql14`char_length(${table.instructions}) BETWEEN 1 AND 8000`
     ),
-    check3("custom_agent_revisions_capabilities_array_check", sql13`jsonb_typeof(${table.capabilities}) = 'array'`)
+    check3("custom_agent_revisions_capabilities_array_check", sql14`jsonb_typeof(${table.capabilities}) = 'array'`)
   ]
 );
 var customAgentRuns = pgTable64(
@@ -25944,17 +25949,17 @@ var customAgentRuns = pgTable64(
     updatedAt: timestamp58("updated_at", { withTimezone: true }).notNull().defaultNow()
   },
   (table) => [
-    uniqueIndex26("custom_agent_runs_agent_idempotency_unique").on(table.agentId, table.idempotencyKey),
+    uniqueIndex27("custom_agent_runs_agent_idempotency_unique").on(table.agentId, table.idempotencyKey),
     index54("custom_agent_runs_agent_created_idx").on(table.agentId, table.createdAt),
     index54("custom_agent_runs_workspace_status_idx").on(table.workspaceId, table.status, table.createdAt),
     index54("custom_agent_runs_project_status_idx").on(table.projectId, table.status, table.createdAt),
-    check3("custom_agent_runs_trigger_check", sql13`${table.trigger} = 'manual'`),
-    check3("custom_agent_runs_speed_check", sql13`${table.effectiveSpeed} IN ('lite', 'balanced', 'max')`),
+    check3("custom_agent_runs_trigger_check", sql14`${table.trigger} = 'manual'`),
+    check3("custom_agent_runs_speed_check", sql14`${table.effectiveSpeed} IN ('lite', 'balanced', 'max')`),
     check3(
       "custom_agent_runs_status_check",
-      sql13`${table.status} IN ('queued', 'running', 'stopping', 'completed', 'failed', 'stopped')`
+      sql14`${table.status} IN ('queued', 'running', 'stopping', 'completed', 'failed', 'stopped')`
     ),
-    check3("custom_agent_runs_credits_check", sql13`${table.creditsQuoted} >= 0 AND ${table.creditsCharged} >= 0`)
+    check3("custom_agent_runs_credits_check", sql14`${table.creditsQuoted} >= 0 AND ${table.creditsCharged} >= 0`)
   ]
 );
 
@@ -26096,8 +26101,8 @@ var abmShareTokens = pgTable68(
 );
 
 // src/schema/mcp_tasks.ts
-import { check as check4, index as index58, integer as integer30, jsonb as jsonb34, pgTable as pgTable69, text as text70, timestamp as timestamp63, uniqueIndex as uniqueIndex27, varchar as varchar51 } from "drizzle-orm/pg-core";
-import { sql as sql14 } from "drizzle-orm";
+import { check as check4, index as index58, integer as integer30, jsonb as jsonb34, pgTable as pgTable69, text as text70, timestamp as timestamp63, uniqueIndex as uniqueIndex28, varchar as varchar51 } from "drizzle-orm/pg-core";
+import { sql as sql15 } from "drizzle-orm";
 var MCP_TASK_STATUSES = [
   "working",
   "input_required",
@@ -26127,7 +26132,7 @@ var mcpTasks = pgTable69(
     updatedAt: timestamp63("updated_at").notNull().defaultNow()
   },
   (table) => [
-    uniqueIndex27("mcp_tasks_ai_job_uidx").on(table.aiJobId).where(sql14`${table.aiJobId} IS NOT NULL`),
+    uniqueIndex28("mcp_tasks_ai_job_uidx").on(table.aiJobId).where(sql15`${table.aiJobId} IS NOT NULL`),
     index58("mcp_tasks_principal_idx").on(
       table.workspaceId,
       table.projectId,
@@ -26136,14 +26141,14 @@ var mcpTasks = pgTable69(
       table.createdAt
     ),
     index58("mcp_tasks_status_idx").on(table.workspaceId, table.status, table.updatedAt),
-    check4("mcp_tasks_status_check", sql14`${table.status} IN ('working','input_required','completed','failed','cancelled')`),
-    check4("mcp_tasks_principal_kind_check", sql14`${table.principalKind} IN ('api_key','device')`),
-    check4("mcp_tasks_ai_job_handle_check", sql14`${table.aiJobId} IS NULL OR ${table.aiJobId} = ${table.id}`),
-    check4("mcp_tasks_terminal_shape_check", sql14`
+    check4("mcp_tasks_status_check", sql15`${table.status} IN ('working','input_required','completed','failed','cancelled')`),
+    check4("mcp_tasks_principal_kind_check", sql15`${table.principalKind} IN ('api_key','device')`),
+    check4("mcp_tasks_ai_job_handle_check", sql15`${table.aiJobId} IS NULL OR ${table.aiJobId} = ${table.id}`),
+    check4("mcp_tasks_terminal_shape_check", sql15`
       (${table.status} IN ('completed','failed','cancelled') AND ${table.terminalAt} IS NOT NULL AND ${table.finalResult} IS NOT NULL)
       OR (${table.status} IN ('working','input_required') AND ${table.terminalAt} IS NULL AND ${table.finalResult} IS NULL)
     `),
-    check4("mcp_tasks_terminal_payload_check", sql14`
+    check4("mcp_tasks_terminal_payload_check", sql15`
       (${table.status} IN ('completed','cancelled')
         AND ${table.finalResult}->>'resultType' = 'complete'
         AND jsonb_typeof(${table.finalResult}->'content') = 'array')
@@ -26152,13 +26157,13 @@ var mcpTasks = pgTable69(
         AND jsonb_typeof(${table.finalResult}->'message') = 'string')
       OR (${table.status} IN ('working','input_required') AND ${table.finalResult} IS NULL)
     `),
-    check4("mcp_tasks_ttl_check", sql14`${table.ttlMs} IS NULL OR ${table.ttlMs} > 0`),
-    check4("mcp_tasks_poll_interval_check", sql14`${table.pollIntervalMs} > 0`)
+    check4("mcp_tasks_ttl_check", sql15`${table.ttlMs} IS NULL OR ${table.ttlMs} > 0`),
+    check4("mcp_tasks_poll_interval_check", sql15`${table.pollIntervalMs} > 0`)
   ]
 );
 
 // src/schema/seo_reports.ts
-import { pgTable as pgTable70, text as text71, date, jsonb as jsonb35, timestamp as timestamp64, uniqueIndex as uniqueIndex28, index as index59 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable70, text as text71, date, jsonb as jsonb35, timestamp as timestamp64, uniqueIndex as uniqueIndex29, index as index59 } from "drizzle-orm/pg-core";
 var seoReports = pgTable70(
   "seo_reports",
   {
@@ -26174,7 +26179,7 @@ var seoReports = pgTable70(
   },
   (t) => [
     // Idempotency guard: one report per period (matches the per-minute cron).
-    uniqueIndex28("seo_reports_project_period_idx").on(t.projectId, t.periodStart, t.periodEnd),
+    uniqueIndex29("seo_reports_project_period_idx").on(t.projectId, t.periodStart, t.periodEnd),
     index59("seo_reports_project_created_idx").on(t.projectId, t.createdAt)
   ]
 );
@@ -26285,10 +26290,10 @@ import {
   bigint as bigint3,
   smallint,
   index as index64,
-  uniqueIndex as uniqueIndex29,
+  uniqueIndex as uniqueIndex30,
   primaryKey as primaryKey4
 } from "drizzle-orm/pg-core";
-import { sql as sql15 } from "drizzle-orm";
+import { sql as sql16 } from "drizzle-orm";
 var analyticsEventsRaw = pgTable75(
   "analytics_events_raw",
   {
@@ -26323,7 +26328,7 @@ var analyticsEventsRaw = pgTable75(
     index64("analytics_events_raw_project_ts_idx").on(t.projectId, t.ts),
     index64("analytics_events_raw_ts_idx").on(t.ts),
     // Partial, so the nginx path (event_id NULL) is unconstrained and unchanged.
-    uniqueIndex29("analytics_events_raw_event_id_uidx").on(t.eventId).where(sql15`${t.eventId} IS NOT NULL`)
+    uniqueIndex30("analytics_events_raw_event_id_uidx").on(t.eventId).where(sql16`${t.eventId} IS NOT NULL`)
   ]
 );
 var analyticsDailyTotals = pgTable75(
@@ -26400,7 +26405,7 @@ var analyticsCursor = pgTable75("analytics_cursor", {
 });
 
 // src/schema/site_files.ts
-import { pgTable as pgTable76, text as text77, varchar as varchar56, integer as integer34, timestamp as timestamp70, uniqueIndex as uniqueIndex30 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable76, text as text77, varchar as varchar56, integer as integer34, timestamp as timestamp70, uniqueIndex as uniqueIndex31 } from "drizzle-orm/pg-core";
 var SITE_FILE_KINDS = ["llms.txt", "llms-full.txt"];
 var siteFiles = pgTable76(
   "site_files",
@@ -26418,7 +26423,7 @@ var siteFiles = pgTable76(
     createdAt: timestamp70("created_at").notNull().defaultNow(),
     updatedAt: timestamp70("updated_at").notNull().defaultNow()
   },
-  (t) => [uniqueIndex30("site_files_project_kind_idx").on(t.projectId, t.kind)]
+  (t) => [uniqueIndex31("site_files_project_kind_idx").on(t.projectId, t.kind)]
 );
 
 // src/schema/indexnow_submissions.ts
@@ -26502,7 +26507,7 @@ var webhookDeliveries = pgTable79(
 );
 
 // src/schema/markdown_files.ts
-import { pgTable as pgTable80, text as text81, varchar as varchar59, timestamp as timestamp74, uniqueIndex as uniqueIndex31 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable80, text as text81, varchar as varchar59, timestamp as timestamp74, uniqueIndex as uniqueIndex32 } from "drizzle-orm/pg-core";
 var MARKDOWN_FILE_STATUSES = ["draft", "published"];
 var markdownFiles = pgTable80(
   "markdown_files",
@@ -26521,7 +26526,7 @@ var markdownFiles = pgTable80(
     createdAt: timestamp74("created_at").notNull().defaultNow(),
     updatedAt: timestamp74("updated_at").notNull().defaultNow()
   },
-  (t) => [uniqueIndex31("markdown_files_project_path_idx").on(t.projectId, t.path)]
+  (t) => [uniqueIndex32("markdown_files_project_path_idx").on(t.projectId, t.path)]
 );
 var DEFAULT_AEO_CONFIG = {
   llmsTxtEnabled: true,
@@ -26539,10 +26544,10 @@ import {
   integer as integer39,
   foreignKey as foreignKey4,
   index as index70,
-  uniqueIndex as uniqueIndex34
+  uniqueIndex as uniqueIndex35
 } from "drizzle-orm/pg-core";
 import { relations as relations14 } from "drizzle-orm/relations";
-import { sql as sql18 } from "drizzle-orm";
+import { sql as sql19 } from "drizzle-orm";
 
 // src/schema/component_variant_groups.ts
 import {
@@ -26553,10 +26558,10 @@ import {
   pgTable as pgTable81,
   text as text82,
   timestamp as timestamp75,
-  uniqueIndex as uniqueIndex32,
+  uniqueIndex as uniqueIndex33,
   varchar as varchar60
 } from "drizzle-orm/pg-core";
-import { sql as sql16 } from "drizzle-orm";
+import { sql as sql17 } from "drizzle-orm";
 var componentVariantGroups = pgTable81(
   "component_variant_groups",
   {
@@ -26582,7 +26587,7 @@ var componentVariantGroups = pgTable81(
     }).onDelete("cascade"),
     index68("component_variant_groups_workspace_idx").on(table.workspaceId),
     index68("component_variant_groups_project_idx").on(table.projectId),
-    uniqueIndex32("component_variant_groups_scope_slug_unique").on(table.workspaceId, table.projectId, table.slug).where(sql16`${table.deletedAt} IS NULL`)
+    uniqueIndex33("component_variant_groups_scope_slug_unique").on(table.workspaceId, table.projectId, table.slug).where(sql17`${table.deletedAt} IS NULL`)
   ]
 );
 
@@ -26592,10 +26597,10 @@ import {
   index as index69,
   pgTable as pgTable82,
   text as text83,
-  uniqueIndex as uniqueIndex33,
+  uniqueIndex as uniqueIndex34,
   varchar as varchar61
 } from "drizzle-orm/pg-core";
-import { sql as sql17 } from "drizzle-orm";
+import { sql as sql18 } from "drizzle-orm";
 var componentGroups = pgTable82(
   "component_groups",
   {
@@ -26616,7 +26621,7 @@ var componentGroups = pgTable82(
     }).onDelete("cascade"),
     index69("component_groups_workspace_idx").on(table.workspaceId),
     index69("component_groups_project_idx").on(table.projectId),
-    uniqueIndex33("component_groups_project_slug_unique").on(table.projectId, table.slug).where(sql17`${table.deletedAt} IS NULL`)
+    uniqueIndex34("component_groups_project_slug_unique").on(table.projectId, table.slug).where(sql18`${table.deletedAt} IS NULL`)
   ]
 );
 
@@ -26698,7 +26703,7 @@ var components = pgTable83(
      * application code to set a value the trigger overwrites. Do not conflate the two.
      */
     managedBy: text84("managed_by").notNull().default("dashboard").$type(),
-    allowedOn: text84("allowed_on").array().notNull().default(sql18`ARRAY[]::text[]`),
+    allowedOn: text84("allowed_on").array().notNull().default(sql19`ARRAY[]::text[]`),
     description: text84("description"),
     // Organisational ownership only. Nullable for legacy rows; every new Component authored
     // through the canonical Content surface must choose or explicitly create a Group.
@@ -26769,15 +26774,15 @@ var components = pgTable83(
      * src/lib/sections/registry.ts, which is handed every candidate and applies precedence
      * itself. DB uniqueness here is data hygiene, not verdict correctness.
      */
-    uniqueIndex34("components_ws_proj_slug_managed_idx").on(table.workspaceId, table.projectId, table.branchId, table.slug, table.managedBy).where(sql18`${table.deletedAt} IS NULL`),
-    index70("components_managed_by_idx").on(table.managedBy).where(sql18`${table.deletedAt} IS NULL`),
+    uniqueIndex35("components_ws_proj_slug_managed_idx").on(table.workspaceId, table.projectId, table.branchId, table.slug, table.managedBy).where(sql19`${table.deletedAt} IS NULL`),
+    index70("components_managed_by_idx").on(table.managedBy).where(sql19`${table.deletedAt} IS NULL`),
     // Partial: the section library only reads live sections. Mirrors migration 0156 —
     // keep the two in step, or `drizzle-kit push` will want to drop the index it can't see.
-    index70("components_section_type_idx").on(table.sectionType).where(sql18`${table.sectionType} IS NOT NULL AND ${table.deletedAt} IS NULL`),
+    index70("components_section_type_idx").on(table.sectionType).where(sql19`${table.sectionType} IS NOT NULL AND ${table.deletedAt} IS NULL`),
     // Migration 0342. Deliberately NOT unique: one band can produce several components when its
     // shape differs between pages (`hero`, `hero-2`), so this is a lookup hint the planner uses
     // only when exactly one row carries the key — not a key.
-    index70("components_ws_proj_source_key_idx").on(table.workspaceId, table.projectId, table.branchId, table.sourceKey).where(sql18`${table.sourceKey} IS NOT NULL AND ${table.deletedAt} IS NULL`)
+    index70("components_ws_proj_source_key_idx").on(table.workspaceId, table.projectId, table.branchId, table.sourceKey).where(sql19`${table.sourceKey} IS NOT NULL AND ${table.deletedAt} IS NULL`)
   ]
 );
 var componentsRelations = relations14(components, ({ one }) => ({
@@ -26828,10 +26833,10 @@ import {
   integer as integer41,
   index as index72,
   unique as unique4,
-  uniqueIndex as uniqueIndex35
+  uniqueIndex as uniqueIndex36
 } from "drizzle-orm/pg-core";
 import { relations as relations15 } from "drizzle-orm/relations";
-import { sql as sql19 } from "drizzle-orm";
+import { sql as sql20 } from "drizzle-orm";
 var componentVariants = pgTable85(
   "component_variants",
   {
@@ -26865,7 +26870,7 @@ var componentVariants = pgTable85(
     ),
     index72("component_variants_workspace_idx").on(table.workspaceId),
     index72("component_variants_component_idx").on(table.componentId),
-    uniqueIndex35("component_variants_component_key_unique").on(table.componentId, table.key).where(sql19`${table.deletedAt} IS NULL`)
+    uniqueIndex36("component_variants_component_key_unique").on(table.componentId, table.key).where(sql20`${table.deletedAt} IS NULL`)
   ]
 );
 var componentVariantsRelations = relations15(componentVariants, ({ one }) => ({
@@ -26890,11 +26895,11 @@ import {
   text as text87,
   timestamp as timestamp79,
   unique as unique5,
-  uniqueIndex as uniqueIndex36,
+  uniqueIndex as uniqueIndex37,
   uuid as uuid2,
   varchar as varchar64
 } from "drizzle-orm/pg-core";
-import { sql as sql20 } from "drizzle-orm";
+import { sql as sql21 } from "drizzle-orm";
 var componentImplementationCandidates = pgTable86(
   "component_implementation_candidates",
   {
@@ -26924,13 +26929,13 @@ var componentImplementationCandidates = pgTable86(
     // v1 candidates (created before 0263) have no exact family-contract bytes. They must not
     // occupy the v2 tuple: validation needs to append an exact candidate beside the legacy
     // row instead of either mutating it or selecting it by matching hashes alone.
-    uniqueIndex36("component_implementation_candidate_exact_tuple_unique").on(
+    uniqueIndex37("component_implementation_candidate_exact_tuple_unique").on(
       table.projectId,
       table.componentId,
       table.schemaHash,
       table.brandContractHash,
       table.familyContractHash
-    ).where(sql20`${table.familyContract} IS NOT NULL`),
+    ).where(sql21`${table.familyContract} IS NOT NULL`),
     unique5("component_implementation_candidate_scope_unique").on(table.id, table.projectId, table.componentId),
     index73("component_implementation_candidates_component_idx").on(table.projectId, table.componentId)
   ]
@@ -26962,7 +26967,7 @@ var componentFamilyManifests = pgTable86(
     unique5("component_family_manifests_scope_unique").on(table.id, table.projectId, table.familyKey),
     unique5("component_family_manifests_id_project_unique").on(table.id, table.projectId),
     unique5("component_family_manifests_evidence_unique").on(table.id, table.projectId, table.manifestHash),
-    uniqueIndex36("component_family_manifest_tuple_unique").on(table.projectId, table.familyKey, table.manifestHash),
+    uniqueIndex37("component_family_manifest_tuple_unique").on(table.projectId, table.familyKey, table.manifestHash),
     index73("component_family_manifests_family_idx").on(table.projectId, table.familyKey, table.createdAt)
   ]
 );
@@ -27017,7 +27022,7 @@ var componentImplementationRequests = pgTable86(
       name: "component_implementation_requests_candidate_fkey"
     }).onDelete("cascade"),
     unique5("component_implementation_requests_scope_unique").on(table.id, table.projectId, table.componentId),
-    uniqueIndex36("component_implementation_requests_active_unique").on(table.projectId, table.componentId).where(sql20`${table.status} IN ('pending', 'claimed')`),
+    uniqueIndex37("component_implementation_requests_active_unique").on(table.projectId, table.componentId).where(sql21`${table.status} IN ('pending', 'claimed')`),
     index73("component_implementation_requests_claimable_idx").on(table.projectId, table.status, table.expiresAt, table.createdAt)
   ]
 );
@@ -27069,8 +27074,8 @@ var componentImplementationEvidence = pgTable86(
       foreignColumns: [componentImplementationRequests.id, componentImplementationRequests.projectId, componentImplementationRequests.componentId],
       name: "component_implementation_evidence_request_fkey"
     }).onDelete("restrict"),
-    uniqueIndex36("component_implementation_evidence_digest_unique").on(table.projectId, table.componentId, table.evidenceDigest),
-    uniqueIndex36("component_implementation_evidence_request_unique").on(table.requestId).where(sql20`${table.requestId} IS NOT NULL`),
+    uniqueIndex37("component_implementation_evidence_digest_unique").on(table.projectId, table.componentId, table.evidenceDigest),
+    uniqueIndex37("component_implementation_evidence_request_unique").on(table.requestId).where(sql21`${table.requestId} IS NOT NULL`),
     unique5("component_implementation_evidence_scope_unique").on(table.id, table.projectId, table.componentId),
     index73("component_implementation_evidence_candidate_idx").on(table.candidateId, table.createdAt)
   ]
@@ -27103,7 +27108,7 @@ var componentImplementationApprovals = pgTable86(
       foreignColumns: [componentImplementationEvidence.id, componentImplementationEvidence.projectId, componentImplementationEvidence.componentId],
       name: "component_implementation_approvals_evidence_fkey"
     }).onDelete("cascade"),
-    uniqueIndex36("component_implementation_approval_evidence_unique").on(table.evidenceId),
+    uniqueIndex37("component_implementation_approval_evidence_unique").on(table.evidenceId),
     unique5("component_implementation_approval_scope_unique").on(table.id, table.projectId, table.componentId),
     index73("component_implementation_approvals_component_idx").on(table.projectId, table.componentId)
   ]
@@ -27164,7 +27169,7 @@ var componentImplementationStates = pgTable86(
       foreignColumns: [projects.id, projects.workspaceId],
       name: "component_implementation_states_project_workspace_fkey"
     }).onDelete("cascade"),
-    uniqueIndex36("component_implementation_states_component_unique").on(table.projectId, table.componentId),
+    uniqueIndex37("component_implementation_states_component_unique").on(table.projectId, table.componentId),
     index73("component_implementation_states_workspace_idx").on(table.workspaceId)
   ]
 );
@@ -27226,7 +27231,7 @@ var componentPreviewBundles = pgTable86(
 );
 
 // src/schema/orchestration.ts
-import { sql as sql21 } from "drizzle-orm";
+import { sql as sql22 } from "drizzle-orm";
 import {
   check as check5,
   foreignKey as foreignKey7,
@@ -27238,7 +27243,7 @@ import {
   text as text88,
   timestamp as timestamp80,
   unique as unique6,
-  uniqueIndex as uniqueIndex37,
+  uniqueIndex as uniqueIndex38,
   uuid as uuid3,
   varchar as varchar65
 } from "drizzle-orm/pg-core";
@@ -27267,7 +27272,7 @@ var projectOrchestrationStates = pgTable87(
       name: "project_orchestration_states_project_workspace_fkey"
     }).onDelete("cascade"),
     unique6("project_orchestration_states_scope_unique").on(table.projectId, table.workspaceId),
-    check5("project_orchestration_states_generation_check", sql21`${table.generation} >= 2`),
+    check5("project_orchestration_states_generation_check", sql22`${table.generation} >= 2`),
     index74("project_orchestration_states_workspace_idx").on(table.workspaceId)
   ]
 );
@@ -27315,7 +27320,7 @@ var orchestrationRuns = pgTable87(
       table.projectId,
       table.startIdempotencyKey
     ),
-    uniqueIndex37("orchestration_runs_nonterminal_project_unique").on(table.projectId).where(sql21`${table.status} IN ('open', 'paused', 'cancelling')`),
+    uniqueIndex38("orchestration_runs_nonterminal_project_unique").on(table.projectId).where(sql22`${table.status} IN ('open', 'paused', 'cancelling')`),
     index74("orchestration_runs_project_target_idx").on(
       table.projectId,
       table.targetKind,
@@ -27328,17 +27333,17 @@ var orchestrationRuns = pgTable87(
       table.status,
       table.updatedAt
     ),
-    check5("orchestration_runs_generation_check", sql21`${table.projectGeneration} >= 2`),
+    check5("orchestration_runs_generation_check", sql22`${table.projectGeneration} >= 2`),
     check5(
       "orchestration_runs_start_idempotency_key_check",
-      sql21`length(btrim(${table.startIdempotencyKey})) BETWEEN 1 AND 255`
+      sql22`length(btrim(${table.startIdempotencyKey})) BETWEEN 1 AND 255`
     ),
-    check5("orchestration_runs_target_kind_check", sql21`${table.targetKind} = 'component-variant'`),
+    check5("orchestration_runs_target_kind_check", sql22`${table.targetKind} = 'component-variant'`),
     check5(
       "orchestration_runs_target_metadata_check",
       // The one-key branch preserves truthful pre-0269 provenance. The INSERT trigger
       // accepts only the fully bound branch and recomputes it from locked authoritative rows.
-      sql21`jsonb_typeof(${table.targetMetadata}) = 'object'
+      sql22`jsonb_typeof(${table.targetMetadata}) = 'object'
         AND ${table.targetMetadata} ->> 'intent' = 'implementation-validation'
         AND (
           (${table.targetMetadata} - ARRAY['intent']::text[]) = '{}'::jsonb
@@ -27399,15 +27404,15 @@ var orchestrationRuns = pgTable87(
     ),
     check5(
       "orchestration_runs_status_check",
-      sql21`${table.status} IN ('open', 'paused', 'cancelling', 'cancelled', 'completed', 'abandoned')`
+      sql22`${table.status} IN ('open', 'paused', 'cancelling', 'cancelled', 'completed', 'abandoned')`
     ),
-    check5("orchestration_runs_active_stage_check", sql21`length(btrim(${table.activeStage})) > 0`),
-    check5("orchestration_runs_version_check", sql21`${table.version} >= 1`),
+    check5("orchestration_runs_active_stage_check", sql22`length(btrim(${table.activeStage})) > 0`),
+    check5("orchestration_runs_version_check", sql22`${table.version} >= 1`),
     check5(
       "orchestration_runs_cancellation_check",
-      sql21`${table.status} NOT IN ('cancelling', 'cancelled') OR ${table.cancellationRequestedAt} IS NOT NULL`
+      sql22`${table.status} NOT IN ('cancelling', 'cancelled') OR ${table.cancellationRequestedAt} IS NOT NULL`
     ),
-    check5("orchestration_runs_timestamps_check", sql21`${table.updatedAt} >= ${table.createdAt}`)
+    check5("orchestration_runs_timestamps_check", sql22`${table.updatedAt} >= ${table.createdAt}`)
   ]
 );
 var orchestrationRunStartKeys = pgTable87(
@@ -27429,7 +27434,7 @@ var orchestrationRunStartKeys = pgTable87(
     index74("orchestration_run_start_keys_run_created_idx").on(table.runId, table.createdAt),
     check5(
       "orchestration_run_start_keys_idempotency_key_check",
-      sql21`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
+      sql22`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
     )
   ]
 );
@@ -27450,7 +27455,7 @@ var orchestrationRunEvents = pgTable87(
     correlationId: text88("correlation_id"),
     payload: jsonb47("payload").$type().notNull().default({}),
     payloadDigest: varchar65("payload_digest", { length: 71 }).generatedAlwaysAs(
-      sql21`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
+      sql22`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
     ),
     createdAt: timestamp80("created_at", { withTimezone: true }).notNull().defaultNow()
   },
@@ -27463,18 +27468,18 @@ var orchestrationRunEvents = pgTable87(
     unique6("orchestration_run_events_sequence_unique").on(table.runId, table.sequence),
     unique6("orchestration_run_events_idempotency_unique").on(table.runId, table.idempotencyKey),
     index74("orchestration_run_events_project_created_idx").on(table.projectId, table.createdAt),
-    check5("orchestration_run_events_sequence_check", sql21`${table.sequence} >= 1`),
-    check5("orchestration_run_events_schema_version_check", sql21`${table.schemaVersion} >= 1`),
+    check5("orchestration_run_events_sequence_check", sql22`${table.sequence} >= 1`),
+    check5("orchestration_run_events_schema_version_check", sql22`${table.schemaVersion} >= 1`),
     check5(
       "orchestration_run_events_idempotency_key_check",
-      sql21`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
+      sql22`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
     ),
-    check5("orchestration_run_events_type_check", sql21`length(btrim(${table.type})) > 0`),
-    check5("orchestration_run_events_actor_type_check", sql21`length(btrim(${table.actorType})) > 0`),
-    check5("orchestration_run_events_actor_id_check", sql21`length(btrim(${table.actorId})) > 0`),
+    check5("orchestration_run_events_type_check", sql22`length(btrim(${table.type})) > 0`),
+    check5("orchestration_run_events_actor_type_check", sql22`length(btrim(${table.actorType})) > 0`),
+    check5("orchestration_run_events_actor_id_check", sql22`length(btrim(${table.actorId})) > 0`),
     check5(
       "orchestration_run_events_payload_check",
-      sql21`jsonb_typeof(${table.payload}) = 'object'`
+      sql22`jsonb_typeof(${table.payload}) = 'object'`
     )
   ]
 );
@@ -27506,29 +27511,29 @@ var orchestrationRunCommandResults = pgTable87(
     ),
     check5(
       "orchestration_run_command_results_command_check",
-      sql21`${table.command} IN ('pause', 'resume', 'cancel')`
+      sql22`${table.command} IN ('pause', 'resume', 'cancel')`
     ),
     check5(
       "orchestration_run_command_results_expected_version_check",
-      sql21`${table.expectedVersion} >= 1`
+      sql22`${table.expectedVersion} >= 1`
     ),
     check5(
       "orchestration_run_command_results_resulting_version_check",
-      sql21`${table.resultingVersion} = ${table.expectedVersion} + 1`
+      sql22`${table.resultingVersion} = ${table.expectedVersion} + 1`
     ),
     check5(
       "orchestration_run_command_results_actor_id_check",
-      sql21`length(btrim(${table.actorId})) > 0`
+      sql22`length(btrim(${table.actorId})) > 0`
     ),
     check5(
       "orchestration_run_command_results_payload_check",
-      sql21`jsonb_typeof(${table.resultPayload}) = 'object'`
+      sql22`jsonb_typeof(${table.resultPayload}) = 'object'`
     )
   ]
 );
 
 // src/schema/orchestration_executors.ts
-import { sql as sql22 } from "drizzle-orm";
+import { sql as sql23 } from "drizzle-orm";
 import {
   bigint as bigint5,
   boolean as boolean30,
@@ -27541,7 +27546,7 @@ import {
   text as text89,
   timestamp as timestamp81,
   unique as unique7,
-  uniqueIndex as uniqueIndex38,
+  uniqueIndex as uniqueIndex39,
   uuid as uuid4,
   varchar as varchar66
 } from "drizzle-orm/pg-core";
@@ -27614,36 +27619,36 @@ var orchestrationExecutorInstallations = pgTable88(
       table.projectId,
       table.status
     ),
-    uniqueIndex38("orchestration_executor_installations_grant_unique").on(table.projectId, table.grantId).where(sql22`${table.grantId} IS NOT NULL AND ${table.status} = 'active'`),
-    uniqueIndex38("orchestration_executor_installations_dashboard_unique").on(table.projectId).where(sql22`${table.kind} = 'dashboard-agent' AND ${table.status} = 'active'`),
+    uniqueIndex39("orchestration_executor_installations_grant_unique").on(table.projectId, table.grantId).where(sql23`${table.grantId} IS NOT NULL AND ${table.status} = 'active'`),
+    uniqueIndex39("orchestration_executor_installations_dashboard_unique").on(table.projectId).where(sql23`${table.kind} = 'dashboard-agent' AND ${table.status} = 'active'`),
     check6(
       "orchestration_executor_installations_kind_check",
-      sql22`${table.kind} IN ('dashboard-agent', 'native-bridge')`
+      sql23`${table.kind} IN ('dashboard-agent', 'native-bridge')`
     ),
     check6(
       "orchestration_executor_installations_status_check",
-      sql22`${table.status} IN ('active', 'revoked', 'incompatible')`
+      sql23`${table.status} IN ('active', 'revoked', 'incompatible')`
     ),
     // A native bridge executor must carry an external grant; the Dashboard Agent must not.
     check6(
       "orchestration_executor_installations_grant_required_check",
-      sql22`(${table.kind} = 'native-bridge') = (${table.grantId} IS NOT NULL)`
+      sql23`(${table.kind} = 'native-bridge') = (${table.grantId} IS NOT NULL)`
     ),
     check6(
       "orchestration_executor_installations_capability_digest_check",
-      sql22`length(btrim(${table.capabilityDigest})) BETWEEN 1 AND 255`
+      sql23`length(btrim(${table.capabilityDigest})) BETWEEN 1 AND 255`
     ),
     check6(
       "orchestration_executor_installations_protocol_version_check",
-      sql22`length(btrim(${table.protocolVersion})) > 0`
+      sql23`length(btrim(${table.protocolVersion})) > 0`
     ),
     check6(
       "orchestration_executor_installations_repository_claim_check",
-      sql22`jsonb_typeof(${table.repositoryClaim}) = 'object'`
+      sql23`jsonb_typeof(${table.repositoryClaim}) = 'object'`
     ),
     check6(
       "orchestration_executor_installations_updated_at_check",
-      sql22`${table.updatedAt} >= ${table.createdAt}`
+      sql23`${table.updatedAt} >= ${table.createdAt}`
     )
   ]
 );
@@ -27689,27 +27694,27 @@ var orchestrationExecutorSessions = pgTable88(
       table.installationId,
       table.state
     ),
-    index75("orchestration_executor_sessions_liveness_idx").on(table.serverReceivedAt).where(sql22`${table.state} = 'open'`),
-    check6("orchestration_executor_sessions_epoch_check", sql22`${table.sessionEpoch} >= 1`),
+    index75("orchestration_executor_sessions_liveness_idx").on(table.serverReceivedAt).where(sql23`${table.state} = 'open'`),
+    check6("orchestration_executor_sessions_epoch_check", sql23`${table.sessionEpoch} >= 1`),
     check6(
       "orchestration_executor_sessions_state_check",
-      sql22`${table.state} IN ('open', 'fenced', 'closed')`
+      sql23`${table.state} IN ('open', 'fenced', 'closed')`
     ),
     check6(
       "orchestration_executor_sessions_cursor_check",
-      sql22`${table.clientCursor} >= 0 AND ${table.serverCursor} >= 0`
+      sql23`${table.clientCursor} >= 0 AND ${table.serverCursor} >= 0`
     ),
     check6(
       "orchestration_executor_sessions_credential_audience_check",
-      sql22`length(btrim(${table.credentialAudience})) > 0`
+      sql23`length(btrim(${table.credentialAudience})) > 0`
     ),
     check6(
       "orchestration_executor_sessions_closed_state_check",
-      sql22`(${table.state} = 'closed') = (${table.closedAt} IS NOT NULL)`
+      sql23`(${table.state} = 'closed') = (${table.closedAt} IS NOT NULL)`
     ),
     check6(
       "orchestration_executor_sessions_updated_at_check",
-      sql22`${table.updatedAt} >= ${table.createdAt}`
+      sql23`${table.updatedAt} >= ${table.createdAt}`
     )
   ]
 );
@@ -27784,30 +27789,30 @@ var orchestrationImplementationAttempts = pgTable88(
       table.runId,
       table.createdAt
     ),
-    check6("orchestration_implementation_attempts_number_check", sql22`${table.attemptNumber} >= 1`),
+    check6("orchestration_implementation_attempts_number_check", sql23`${table.attemptNumber} >= 1`),
     check6(
       "orchestration_implementation_attempts_target_kind_check",
-      sql22`${table.targetKind} = 'component-variant'`
+      sql23`${table.targetKind} = 'component-variant'`
     ),
     check6(
       "orchestration_implementation_attempts_status_check",
-      sql22`${table.status} IN ('preflight', 'proposed', 'approved', 'implementing', 'suspended', 'superseded', 'cancelled', 'failed', 'completed')`
+      sql23`${table.status} IN ('preflight', 'proposed', 'approved', 'implementing', 'suspended', 'superseded', 'cancelled', 'failed', 'completed')`
     ),
     check6(
       "orchestration_implementation_attempts_base_sha_check",
-      sql22`${table.baseSha} IS NULL OR ${table.baseSha} ~ '^[0-9a-f]{7,64}$'`
+      sql23`${table.baseSha} IS NULL OR ${table.baseSha} ~ '^[0-9a-f]{7,64}$'`
     ),
     check6(
       "orchestration_implementation_attempts_superseded_check",
-      sql22`${table.supersededBy} IS NULL OR ${table.supersededBy} <> ${table.id}`
+      sql23`${table.supersededBy} IS NULL OR ${table.supersededBy} <> ${table.id}`
     ),
     check6(
       "orchestration_implementation_attempts_binding_digest_check",
-      sql22`length(btrim(${table.targetBindingDigest})) BETWEEN 1 AND 255`
+      sql23`length(btrim(${table.targetBindingDigest})) BETWEEN 1 AND 255`
     ),
     check6(
       "orchestration_implementation_attempts_updated_at_check",
-      sql22`${table.updatedAt} >= ${table.createdAt}`
+      sql23`${table.updatedAt} >= ${table.createdAt}`
     )
   ]
 );
@@ -27979,47 +27984,47 @@ var orchestrationExecutionApprovals = pgTable88(
     index75("orchestration_execution_approvals_run_created_idx").on(table.runId, table.createdAt),
     check6(
       "orchestration_execution_approvals_idempotency_key_check",
-      sql22`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
+      sql23`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
     ),
     check6(
       "orchestration_execution_approvals_approved_by_check",
-      sql22`length(btrim(${table.approvedBy})) > 0`
+      sql23`length(btrim(${table.approvedBy})) > 0`
     ),
     check6(
       "orchestration_execution_approvals_target_kind_check",
-      sql22`${table.targetKind} = 'component-variant'`
+      sql23`${table.targetKind} = 'component-variant'`
     ),
     check6(
       "orchestration_execution_approvals_base_sha_check",
-      sql22`${table.baseSha} IS NULL OR ${table.baseSha} ~ '^[0-9a-f]{7,64}$'`
+      sql23`${table.baseSha} IS NULL OR ${table.baseSha} ~ '^[0-9a-f]{7,64}$'`
     ),
     check6(
       "orchestration_execution_approvals_path_policy_check",
-      sql22`jsonb_typeof(${table.pathPolicy}) = 'object'`
+      sql23`jsonb_typeof(${table.pathPolicy}) = 'object'`
     ),
     check6(
       "orchestration_execution_approvals_operation_classes_check",
-      sql22`jsonb_typeof(${table.operationClasses}) = 'array'`
+      sql23`jsonb_typeof(${table.operationClasses}) = 'array'`
     ),
     check6(
       "orchestration_execution_approvals_mutation_budget_check",
-      sql22`jsonb_typeof(${table.mutationBudget}) = 'object'`
+      sql23`jsonb_typeof(${table.mutationBudget}) = 'object'`
     ),
     check6(
       "orchestration_execution_approvals_plan_digest_check",
-      sql22`length(btrim(${table.planDigest})) BETWEEN 1 AND 255`
+      sql23`length(btrim(${table.planDigest})) BETWEEN 1 AND 255`
     ),
     check6(
       "orchestration_execution_approvals_capability_digest_check",
-      sql22`length(btrim(${table.capabilityDigest})) BETWEEN 1 AND 255`
+      sql23`length(btrim(${table.capabilityDigest})) BETWEEN 1 AND 255`
     ),
     check6(
       "orchestration_execution_approvals_validation_digest_check",
-      sql22`length(btrim(${table.validationDigest})) BETWEEN 1 AND 255`
+      sql23`length(btrim(${table.validationDigest})) BETWEEN 1 AND 255`
     ),
     check6(
       "orchestration_execution_approvals_expiry_check",
-      sql22`${table.expiresAt} > ${table.createdAt}`
+      sql23`${table.expiresAt} > ${table.createdAt}`
     )
   ]
 );
@@ -28076,24 +28081,24 @@ var orchestrationExecutorLeases = pgTable88(
     ),
     unique7("orchestration_executor_leases_epoch_unique").on(table.attemptId, table.leaseEpoch),
     // Plan invariant 6, enforced in the database: a run has at most one active executor lease.
-    uniqueIndex38("orchestration_executor_leases_one_active_per_run").on(table.runId).where(sql22`${table.state} = 'active'`),
-    index75("orchestration_executor_leases_deadline_idx").on(table.heartbeatDeadline).where(sql22`${table.state} = 'active'`),
-    check6("orchestration_executor_leases_epoch_check", sql22`${table.leaseEpoch} >= 1`),
+    uniqueIndex39("orchestration_executor_leases_one_active_per_run").on(table.runId).where(sql23`${table.state} = 'active'`),
+    index75("orchestration_executor_leases_deadline_idx").on(table.heartbeatDeadline).where(sql23`${table.state} = 'active'`),
+    check6("orchestration_executor_leases_epoch_check", sql23`${table.leaseEpoch} >= 1`),
     check6(
       "orchestration_executor_leases_state_check",
-      sql22`${table.state} IN ('active', 'paused', 'revoked', 'released')`
+      sql23`${table.state} IN ('active', 'paused', 'revoked', 'released')`
     ),
     check6(
       "orchestration_executor_leases_release_consistency_check",
-      sql22`(${table.state} IN ('revoked', 'released')) = (${table.releasedAt} IS NOT NULL)`
+      sql23`(${table.state} IN ('revoked', 'released')) = (${table.releasedAt} IS NOT NULL)`
     ),
     check6(
       "orchestration_executor_leases_release_reason_check",
-      sql22`${table.releaseReason} IS NULL OR ${table.releaseReason} IN ('handoff', 'heartbeat-lost', 'cancelled', 'completed', 'superseded', 'revoked')`
+      sql23`${table.releaseReason} IS NULL OR ${table.releaseReason} IN ('handoff', 'heartbeat-lost', 'cancelled', 'completed', 'superseded', 'revoked')`
     ),
     check6(
       "orchestration_executor_leases_updated_at_check",
-      sql22`${table.updatedAt} >= ${table.createdAt}`
+      sql23`${table.updatedAt} >= ${table.createdAt}`
     )
   ]
 );
@@ -28118,7 +28123,7 @@ var orchestrationExecutorCommands = pgTable88(
     expectedRunVersion: integer44("expected_run_version").notNull(),
     payload: jsonb48("payload").$type().notNull().default({}),
     payloadDigest: varchar66("payload_digest", { length: 71 }).generatedAlwaysAs(
-      sql22`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
+      sql23`'sha256:' || encode(digest(payload::text, 'sha256'), 'hex')`
     ),
     deliveredAt: timestamp81("delivered_at", { withTimezone: true }),
     acknowledgedAt: timestamp81("acknowledged_at", { withTimezone: true }),
@@ -28150,32 +28155,32 @@ var orchestrationExecutorCommands = pgTable88(
     ),
     index75("orchestration_executor_commands_run_sequence_idx").on(table.runId, table.sequence),
     // The long-poll cursor read: unacknowledged commands for a run, in order.
-    index75("orchestration_executor_commands_pending_idx").on(table.runId, table.sequence).where(sql22`${table.acknowledgedAt} IS NULL`),
-    check6("orchestration_executor_commands_sequence_check", sql22`${table.sequence} >= 1`),
+    index75("orchestration_executor_commands_pending_idx").on(table.runId, table.sequence).where(sql23`${table.acknowledgedAt} IS NULL`),
+    check6("orchestration_executor_commands_sequence_check", sql23`${table.sequence} >= 1`),
     check6(
       "orchestration_executor_commands_kind_check",
-      sql22`${table.kind} IN ('offer', 'inspect', 'propose', 'implement', 'suspend', 'resume', 'cancel', 'handoff')`
+      sql23`${table.kind} IN ('offer', 'inspect', 'propose', 'implement', 'suspend', 'resume', 'cancel', 'handoff')`
     ),
     check6(
       "orchestration_executor_commands_idempotency_key_check",
-      sql22`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
+      sql23`length(btrim(${table.idempotencyKey})) BETWEEN 1 AND 255`
     ),
     check6(
       "orchestration_executor_commands_expected_run_version_check",
-      sql22`${table.expectedRunVersion} >= 1`
+      sql23`${table.expectedRunVersion} >= 1`
     ),
     check6(
       "orchestration_executor_commands_payload_check",
-      sql22`jsonb_typeof(${table.payload}) = 'object'`
+      sql23`jsonb_typeof(${table.payload}) = 'object'`
     ),
     check6(
       "orchestration_executor_commands_lease_epoch_check",
-      sql22`(${table.leaseId} IS NULL) = (${table.leaseEpoch} IS NULL)`
+      sql23`(${table.leaseId} IS NULL) = (${table.leaseEpoch} IS NULL)`
     ),
     // Acknowledgement implies delivery. The reverse is not true and must not be assumed.
     check6(
       "orchestration_executor_commands_ack_implies_delivery_check",
-      sql22`${table.acknowledgedAt} IS NULL OR ${table.deliveredAt} IS NOT NULL`
+      sql23`${table.acknowledgedAt} IS NULL OR ${table.deliveredAt} IS NOT NULL`
     )
   ]
 );
@@ -28222,29 +28227,29 @@ var orchestrationPatchManifests = pgTable88(
     unique7("orchestration_patch_manifests_sequence_unique").on(table.attemptId, table.sequence),
     unique7("orchestration_patch_manifests_path_unique").on(table.attemptId, table.path),
     index75("orchestration_patch_manifests_attempt_sequence_idx").on(table.attemptId, table.sequence),
-    check6("orchestration_patch_manifests_sequence_check", sql22`${table.sequence} >= 1`),
+    check6("orchestration_patch_manifests_sequence_check", sql23`${table.sequence} >= 1`),
     check6(
       "orchestration_patch_manifests_operation_check",
-      sql22`${table.operation} IN ('create', 'update', 'delete')`
+      sql23`${table.operation} IN ('create', 'update', 'delete')`
     ),
     check6(
       "orchestration_patch_manifests_mode_check",
-      sql22`${table.fileMode} IN ('100644', '100755')`
+      sql23`${table.fileMode} IN ('100644', '100755')`
     ),
     check6(
       "orchestration_patch_manifests_path_check",
-      sql22`length(btrim(${table.path})) BETWEEN 1 AND 2048`
+      sql23`length(btrim(${table.path})) BETWEEN 1 AND 2048`
     ),
     // A create must not claim a predecessor; a delete must not claim a result.
     check6(
       "orchestration_patch_manifests_create_check",
-      sql22`${table.operation} <> 'create' OR ${table.expectedBefore} IS NULL`
+      sql23`${table.operation} <> 'create' OR ${table.expectedBefore} IS NULL`
     ),
     check6(
       "orchestration_patch_manifests_delete_check",
-      sql22`${table.operation} <> 'delete' OR ${table.resultingBlobSha} IS NULL`
+      sql23`${table.operation} <> 'delete' OR ${table.resultingBlobSha} IS NULL`
     ),
-    check6("orchestration_patch_manifests_byte_count_check", sql22`${table.byteCount} >= 0`)
+    check6("orchestration_patch_manifests_byte_count_check", sql23`${table.byteCount} >= 0`)
   ]
 );
 var orchestrationPullRequestReceipts = pgTable88(
@@ -28300,34 +28305,34 @@ var orchestrationPullRequestReceipts = pgTable88(
       table.generation
     ),
     index75("orchestration_pull_request_receipts_head_idx").on(table.repositoryId, table.headSha),
-    check6("orchestration_pull_request_receipts_generation_check", sql22`${table.generation} >= 1`),
-    check6("orchestration_pull_request_receipts_number_check", sql22`${table.pullRequestNumber} >= 1`),
+    check6("orchestration_pull_request_receipts_generation_check", sql23`${table.generation} >= 1`),
+    check6("orchestration_pull_request_receipts_number_check", sql23`${table.pullRequestNumber} >= 1`),
     check6(
       "orchestration_pull_request_receipts_base_sha_check",
-      sql22`${table.baseSha} ~ '^[0-9a-f]{7,64}$'`
+      sql23`${table.baseSha} ~ '^[0-9a-f]{7,64}$'`
     ),
     check6(
       "orchestration_pull_request_receipts_head_sha_check",
-      sql22`${table.headSha} ~ '^[0-9a-f]{7,64}$'`
+      sql23`${table.headSha} ~ '^[0-9a-f]{7,64}$'`
     ),
     // Same-repository PR only: a fork head is not a branch the adapter can own or advance.
     check6(
       "orchestration_pull_request_receipts_refs_check",
-      sql22`length(btrim(${table.baseRef})) > 0 AND length(btrim(${table.headRef})) > 0 AND ${table.baseRef} <> ${table.headRef}`
+      sql23`length(btrim(${table.baseRef})) > 0 AND length(btrim(${table.headRef})) > 0 AND ${table.baseRef} <> ${table.headRef}`
     ),
     check6(
       "orchestration_pull_request_receipts_url_check",
-      sql22`${table.pullRequestUrl} ~ '^https://'`
+      sql23`${table.pullRequestUrl} ~ '^https://'`
     ),
     check6(
       "orchestration_pull_request_receipts_updated_at_check",
-      sql22`${table.updatedAt} >= ${table.createdAt}`
+      sql23`${table.updatedAt} >= ${table.createdAt}`
     )
   ]
 );
 
 // src/schema/conversion_proposals.ts
-import { sql as sql23 } from "drizzle-orm";
+import { sql as sql24 } from "drizzle-orm";
 import { check as check7, foreignKey as foreignKey9, index as index76, integer as integer45, jsonb as jsonb49, pgTable as pgTable89, text as text90, timestamp as timestamp82, unique as unique8, uuid as uuid5, varchar as varchar67 } from "drizzle-orm/pg-core";
 var CONVERSION_PROPOSAL_STATUSES = ["draft", "approved", "superseded"];
 var conversionProposals = pgTable89(
@@ -28343,9 +28348,9 @@ var conversionProposals = pgTable89(
     baseHeadOid: varchar67("base_head_oid", { length: 64 }).notNull(),
     baseBranch: text90("base_branch").notNull(),
     /** Brief paths whose `original` was not found in any source file. */
-    unlocated: jsonb49("unlocated").notNull().default(sql23`'[]'::jsonb`),
+    unlocated: jsonb49("unlocated").notNull().default(sql24`'[]'::jsonb`),
     /** Files that matched a brief original but fell outside the acquisition caps. */
-    omittedByCap: jsonb49("omitted_by_cap").notNull().default(sql23`'[]'::jsonb`),
+    omittedByCap: jsonb49("omitted_by_cap").notNull().default(sql24`'[]'::jsonb`),
     /**
      * The codemod's receipt (migration 0296) — every path it bound, and every one it could not.
      *
@@ -28378,17 +28383,17 @@ var conversionProposals = pgTable89(
       foreignColumns: [projects.id, projects.workspaceId],
       name: "conversion_proposals_project_workspace_fkey"
     }).onDelete("cascade"),
-    check7("conversion_proposals_status_check", sql23`${table.status} IN ('draft', 'approved', 'superseded')`),
-    check7("conversion_proposals_version_check", sql23`${table.version} >= 1`),
+    check7("conversion_proposals_status_check", sql24`${table.status} IN ('draft', 'approved', 'superseded')`),
+    check7("conversion_proposals_version_check", sql24`${table.version} >= 1`),
     check7(
       "conversion_proposals_receipt_object_check",
-      sql23`${table.receipt} IS NULL OR jsonb_typeof(${table.receipt}) = 'object'`
+      sql24`${table.receipt} IS NULL OR jsonb_typeof(${table.receipt}) = 'object'`
     )
   ]
 );
 
 // src/schema/conversion_briefs_issued.ts
-import { sql as sql24 } from "drizzle-orm";
+import { sql as sql25 } from "drizzle-orm";
 import { check as check8, foreignKey as foreignKey10, index as index77, jsonb as jsonb50, pgTable as pgTable90, text as text91, timestamp as timestamp83, unique as unique9, uuid as uuid6 } from "drizzle-orm/pg-core";
 var conversionBriefsIssued = pgTable90(
   "conversion_briefs_issued",
@@ -28399,7 +28404,7 @@ var conversionBriefsIssued = pgTable90(
     /** sha256 of the canonical brief — `briefDigest`, computed identically by the codemod. */
     briefDigest: text91("brief_digest").notNull(),
     /** `[{ route, scope, path, kind, locator? }]` — every bindable path the brief listed. */
-    paths: jsonb50("paths").notNull().default(sql24`'[]'::jsonb`),
+    paths: jsonb50("paths").notNull().default(sql25`'[]'::jsonb`),
     /**
      * The codemod's account of the run against THIS digest (`submit_conversion_receipt`): which
      * paths it rewrote, which it could not, and why. Null until one is submitted — a hand
@@ -28417,13 +28422,13 @@ var conversionBriefsIssued = pgTable90(
       foreignColumns: [projects.id, projects.workspaceId],
       name: "conversion_briefs_issued_project_workspace_fkey"
     }).onDelete("cascade"),
-    check8("conversion_briefs_issued_brief_digest_check", sql24`${table.briefDigest} ~ '^sha256:[0-9a-f]{64}$'`),
-    check8("conversion_briefs_issued_paths_array_check", sql24`jsonb_typeof(${table.paths}) = 'array'`)
+    check8("conversion_briefs_issued_brief_digest_check", sql25`${table.briefDigest} ~ '^sha256:[0-9a-f]{64}$'`),
+    check8("conversion_briefs_issued_paths_array_check", sql25`jsonb_typeof(${table.paths}) = 'array'`)
   ]
 );
 
 // src/schema/orchestration_validation.ts
-import { sql as sql25 } from "drizzle-orm";
+import { sql as sql26 } from "drizzle-orm";
 import {
   bigint as bigint6,
   check as check9,
@@ -28435,7 +28440,7 @@ import {
   text as text92,
   timestamp as timestamp84,
   unique as unique10,
-  uniqueIndex as uniqueIndex39,
+  uniqueIndex as uniqueIndex40,
   uuid as uuid7,
   varchar as varchar68
 } from "drizzle-orm/pg-core";
@@ -28518,15 +28523,15 @@ var orchestrationValidationEnvelopes = pgTable91(
     }).onDelete("set null"),
     // One live envelope per (attempt, head): two validators can never both be authoritative for
     // the same commit. The index arbitrates, so no read-then-write can lose the race.
-    uniqueIndex39("orchestration_validation_envelopes_one_live_per_head").on(table.attemptId, table.headSha).where(sql25`status IN ('queued', 'dispatched', 'action_required')`),
+    uniqueIndex40("orchestration_validation_envelopes_one_live_per_head").on(table.attemptId, table.headSha).where(sql26`status IN ('queued', 'dispatched', 'action_required')`),
     index78("orchestration_validation_envelopes_attempt_idx").on(
       table.attemptId,
       table.createdAt.desc()
     ),
-    index78("orchestration_validation_envelopes_sweep_idx").on(table.status, table.nonceExpiresAt).where(sql25`status IN ('queued', 'dispatched')`),
+    index78("orchestration_validation_envelopes_sweep_idx").on(table.status, table.nonceExpiresAt).where(sql26`status IN ('queued', 'dispatched')`),
     check9(
       "orchestration_validation_envelopes_status_check",
-      sql25`${table.status} IN ('queued', 'dispatched', 'action_required', 'passed', 'failed', 'superseded', 'timed_out', 'cancelled')`
+      sql26`${table.status} IN ('queued', 'dispatched', 'action_required', 'passed', 'failed', 'superseded', 'timed_out', 'cancelled')`
     ),
     // Passing is not assignable. It requires evidence that was ingested, an attestation that was
     // written, and a nonce that was consumed — so executor success alone cannot spell it.
@@ -28535,7 +28540,7 @@ var orchestrationValidationEnvelopes = pgTable91(
     // evidence, which is exactly what an honest failing result is.
     check9(
       "orchestration_validation_envelopes_passed_requires_evidence",
-      sql25`${table.status} <> 'passed' OR (${table.evidenceId} IS NOT NULL AND ${table.attestationDigest} IS NOT NULL AND ${table.nonceConsumedAt} IS NOT NULL)`
+      sql26`${table.status} <> 'passed' OR (${table.evidenceId} IS NOT NULL AND ${table.attestationDigest} IS NOT NULL AND ${table.nonceConsumedAt} IS NOT NULL)`
     )
   ]
 );
@@ -28590,19 +28595,19 @@ var orchestrationValidationEvidence = pgTable91(
     index78("orchestration_validation_evidence_envelope_idx").on(table.envelopeId),
     check9(
       "orchestration_validation_evidence_status_check",
-      sql25`${table.status} IN ('passed', 'failed')`
+      sql26`${table.status} IN ('passed', 'failed')`
     )
   ]
 );
 
 // src/schema/orchestration_executor_grants.ts
-import { sql as sql26 } from "drizzle-orm";
-import { check as check10, foreignKey as foreignKey12, index as index79, integer as integer47, pgTable as pgTable92, text as text93, timestamp as timestamp85, unique as unique11, uniqueIndex as uniqueIndex40, uuid as uuid8, varchar as varchar69 } from "drizzle-orm/pg-core";
+import { sql as sql27 } from "drizzle-orm";
+import { check as check10, foreignKey as foreignKey12, index as index79, integer as integer47, pgTable as pgTable92, text as text93, timestamp as timestamp85, unique as unique11, uniqueIndex as uniqueIndex41, uuid as uuid8, varchar as varchar69 } from "drizzle-orm/pg-core";
 var EXECUTOR_GRANT_STATUSES = ["active", "revoked", "expired"];
 var orchestrationExecutorGrants = pgTable92(
   "orchestration_executor_grants",
   {
-    id: text93("id").primaryKey().default(sql26`gen_random_uuid()`),
+    id: text93("id").primaryKey().default(sql27`gen_random_uuid()`),
     workspaceId: text93("workspace_id").notNull().references(() => workspaces.id, { onDelete: "cascade" }),
     projectId: text93("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
     installationId: uuid8("installation_id").notNull().references(() => orchestrationExecutorInstallations.id, { onDelete: "cascade" }),
@@ -28636,21 +28641,21 @@ var orchestrationExecutorGrants = pgTable92(
     }).onDelete("cascade"),
     // One live credential per installation. Two would mean two processes can each present a valid
     // one, and the exclusion argument collapses before the lease layer is reached.
-    uniqueIndex40("orchestration_executor_grants_one_active_per_installation").on(table.installationId).where(sql26`status = 'active'`),
-    index79("orchestration_executor_grants_credential_idx").on(table.workspaceId, table.credentialHash).where(sql26`status = 'active'`),
+    uniqueIndex41("orchestration_executor_grants_one_active_per_installation").on(table.installationId).where(sql27`status = 'active'`),
+    index79("orchestration_executor_grants_credential_idx").on(table.workspaceId, table.credentialHash).where(sql27`status = 'active'`),
     check10(
       "orchestration_executor_grants_status_check",
-      sql26`${table.status} IN ('active', 'revoked', 'expired')`
+      sql27`${table.status} IN ('active', 'revoked', 'expired')`
     ),
     check10(
       "orchestration_executor_grants_revocation_paired",
-      sql26`(${table.status} = 'revoked') = (${table.revokedAt} IS NOT NULL)`
+      sql27`(${table.status} = 'revoked') = (${table.revokedAt} IS NOT NULL)`
     )
   ]
 );
 
 // src/schema/component_presets.ts
-import { pgTable as pgTable93, text as text94, varchar as varchar70, timestamp as timestamp86, jsonb as jsonb52, integer as integer48, index as index80, uniqueIndex as uniqueIndex41 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable93, text as text94, varchar as varchar70, timestamp as timestamp86, jsonb as jsonb52, integer as integer48, index as index80, uniqueIndex as uniqueIndex42 } from "drizzle-orm/pg-core";
 import { relations as relations16 } from "drizzle-orm";
 var componentPresets = pgTable93(
   "component_presets",
@@ -28671,7 +28676,7 @@ var componentPresets = pgTable93(
   },
   (t) => [
     index80("component_presets_component_position_idx").on(t.componentId, t.position, t.createdAt, t.id),
-    uniqueIndex41("component_presets_component_slug_key").on(t.componentId, t.slug)
+    uniqueIndex42("component_presets_component_slug_key").on(t.componentId, t.slug)
   ]
 );
 var componentPresetsRelations = relations16(componentPresets, ({ one }) => ({
@@ -28691,10 +28696,10 @@ import {
   text as text95,
   timestamp as timestamp87,
   unique as unique12,
-  uniqueIndex as uniqueIndex42,
+  uniqueIndex as uniqueIndex43,
   varchar as varchar71
 } from "drizzle-orm/pg-core";
-import { sql as sql27 } from "drizzle-orm";
+import { sql as sql28 } from "drizzle-orm";
 var SECTION_IMPLEMENTATION_REQUEST_STATUSES = [
   "queued",
   "dispatching",
@@ -28721,7 +28726,7 @@ var sectionDefinitions = pgTable94(
       name: "section_definitions_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
     unique12("section_definitions_id_project_unique").on(table.id, table.projectId),
-    uniqueIndex42("section_definitions_project_api_id_unique").on(table.projectId, table.apiId),
+    uniqueIndex43("section_definitions_project_api_id_unique").on(table.projectId, table.apiId),
     index81("section_definitions_workspace_idx").on(table.workspaceId),
     index81("section_definitions_project_idx").on(table.projectId)
   ]
@@ -28780,7 +28785,7 @@ var sectionZones = pgTable94(
       name: "section_zones_project_workspace_fkey"
     }).onDelete("cascade").onUpdate("cascade"),
     unique12("section_zones_id_project_unique").on(table.id, table.projectId),
-    uniqueIndex42("section_zones_schema_owner_unique").on(table.projectId, table.schemaKind, table.schemaId),
+    uniqueIndex43("section_zones_schema_owner_unique").on(table.projectId, table.schemaKind, table.schemaId),
     index81("section_zones_workspace_idx").on(table.workspaceId)
   ]
 );
@@ -28831,7 +28836,7 @@ var sectionZoneAttachments = pgTable94(
       ],
       name: "section_zone_attachments_published_version_fkey"
     }).onDelete("restrict"),
-    uniqueIndex42("section_zone_attachments_zone_definition_unique").on(table.zoneId, table.sectionDefinitionId),
+    uniqueIndex43("section_zone_attachments_zone_definition_unique").on(table.zoneId, table.sectionDefinitionId),
     index81("section_zone_attachments_zone_position_idx").on(table.zoneId, table.position, table.id)
   ]
 );
@@ -29010,7 +29015,7 @@ var sectionImplementationRequests = pgTable94(
       name: "section_implementation_requests_validation_project_fkey"
     }).onDelete("restrict"),
     unique12("section_implementation_requests_id_project_unique").on(table.id, table.projectId),
-    uniqueIndex42("section_implementation_requests_one_active_unique").on(table.projectId, table.sectionDefinitionId, table.sectionVersion, table.schemaHash).where(sql27`${table.status} IN ('queued', 'dispatching', 'dispatched', 'running')`),
+    uniqueIndex43("section_implementation_requests_one_active_unique").on(table.projectId, table.sectionDefinitionId, table.sectionVersion, table.schemaHash).where(sql28`${table.status} IN ('queued', 'dispatching', 'dispatched', 'running')`),
     index81("section_implementation_requests_project_created_idx").on(table.projectId, table.createdAt)
   ]
 );
@@ -29044,7 +29049,7 @@ var sectionZoneReleases = pgTable94(
 
 // src/schema/content_locks.ts
 import { check as check11, index as index82, jsonb as jsonb54, pgTable as pgTable95, text as text96, timestamp as timestamp88 } from "drizzle-orm/pg-core";
-import { sql as sql28 } from "drizzle-orm";
+import { sql as sql29 } from "drizzle-orm";
 var CONTENT_LOCK_TARGET_KINDS = [
   "page",
   "content_entry",
@@ -29075,9 +29080,9 @@ var contentLocks = pgTable95(
   (table) => [
     index82("content_locks_workspace_idx").on(table.workspaceId),
     index82("content_locks_project_idx").on(table.projectId),
-    index82("content_locks_target_idx").on(table.targetKind, table.targetId).where(sql28`${table.releasedAt} IS NULL`),
-    check11("content_locks_target_kind_check", sql28`${table.targetKind} IN ('page','content_entry','singleton_entry','component_definition')`),
-    check11("content_locks_mode_check", sql28`${table.mode} IN ('all','agents')`)
+    index82("content_locks_target_idx").on(table.targetKind, table.targetId).where(sql29`${table.releasedAt} IS NULL`),
+    check11("content_locks_target_kind_check", sql29`${table.targetKind} IN ('page','content_entry','singleton_entry','component_definition')`),
+    check11("content_locks_mode_check", sql29`${table.mode} IN ('all','agents')`)
     // `content_locks_shape_check` lives in migration 0192 ONLY: it calls
     // content_lock_field_path_valid(), which that migration creates. Declared here it went into
     // `drizzle-kit push`'s CREATE TABLE on an empty database, where the function does not exist
@@ -29096,9 +29101,9 @@ import {
   varchar as varchar72,
   timestamp as timestamp89,
   index as index83,
-  uniqueIndex as uniqueIndex43
+  uniqueIndex as uniqueIndex44
 } from "drizzle-orm/pg-core";
-import { sql as sql29 } from "drizzle-orm";
+import { sql as sql30 } from "drizzle-orm";
 var projectTransfers = pgTable96(
   "project_transfers",
   {
@@ -29134,7 +29139,7 @@ var projectTransfers = pgTable96(
   (table) => [
     // At most one OPEN transfer per project. Partial-unique so completed/declined/
     // cancelled/expired/failed rows never wedge a re-initiation.
-    uniqueIndex43("project_transfers_one_pending_idx").on(table.projectId).where(sql29`${table.status} = 'pending'`),
+    uniqueIndex44("project_transfers_one_pending_idx").on(table.projectId).where(sql30`${table.status} = 'pending'`),
     // Recipient inbox lookup (GET /me/transfers by email + status).
     index83("project_transfers_recipient_idx").on(
       table.recipientEmail,
@@ -29144,9 +29149,9 @@ var projectTransfers = pgTable96(
     index83("project_transfers_from_ws_idx").on(table.fromWorkspaceId),
     index83("project_transfers_project_idx").on(table.projectId),
     // Magic-link resolution.
-    uniqueIndex43("project_transfers_token_idx").on(table.token),
+    uniqueIndex44("project_transfers_token_idx").on(table.token),
     // Expiry sweep — only pending rows are ever candidates.
-    index83("project_transfers_expires_idx").on(table.expiresAt).where(sql29`${table.status} = 'pending'`)
+    index83("project_transfers_expires_idx").on(table.expiresAt).where(sql30`${table.status} = 'pending'`)
   ]
 );
 
@@ -29271,8 +29276,8 @@ var cloneLinks = pgTable99(
 );
 
 // src/schema/clone_jobs.ts
-import { pgTable as pgTable100, text as text101, varchar as varchar75, integer as integer52, jsonb as jsonb58, timestamp as timestamp93, index as index87, uniqueIndex as uniqueIndex44 } from "drizzle-orm/pg-core";
-import { sql as sql30 } from "drizzle-orm";
+import { pgTable as pgTable100, text as text101, varchar as varchar75, integer as integer52, jsonb as jsonb58, timestamp as timestamp93, index as index87, uniqueIndex as uniqueIndex45 } from "drizzle-orm/pg-core";
+import { sql as sql31 } from "drizzle-orm";
 var cloneJobs = pgTable100(
   "clone_jobs",
   {
@@ -29306,7 +29311,7 @@ var cloneJobs = pgTable100(
     index87("clone_jobs_workspace_idx").on(t.workspaceId),
     // One unfinished hybrid→headless switch per source (0343). The route maps its 23505 to
     // SWITCH_ALREADY_PENDING.
-    uniqueIndex44("clone_jobs_mode_switch_active_uniq").on(t.sourceProjectId).where(sql30`${t.purpose} = 'mode_switch' AND ${t.status} IN ('pending', 'working')`)
+    uniqueIndex45("clone_jobs_mode_switch_active_uniq").on(t.sourceProjectId).where(sql31`${t.purpose} = 'mode_switch' AND ${t.status} IN ('pending', 'working')`)
   ]
 );
 
@@ -29317,9 +29322,9 @@ import {
   varchar as varchar76,
   timestamp as timestamp94,
   index as index88,
-  uniqueIndex as uniqueIndex45
+  uniqueIndex as uniqueIndex46
 } from "drizzle-orm/pg-core";
-import { sql as sql31 } from "drizzle-orm";
+import { sql as sql32 } from "drizzle-orm";
 var projectBranches = pgTable101(
   "project_branches",
   {
@@ -29336,12 +29341,12 @@ var projectBranches = pgTable101(
   },
   (t) => [
     index88("project_branches_project_idx").on(t.projectId),
-    uniqueIndex45("project_branches_project_slug_open_idx").on(t.projectId, t.slug).where(sql31`${t.status} = 'open'`)
+    uniqueIndex46("project_branches_project_slug_open_idx").on(t.projectId, t.slug).where(sql32`${t.status} = 'open'`)
   ]
 );
 
 // src/schema/branch_preview_share.ts
-import { pgTable as pgTable102, text as text103, boolean as boolean32, timestamp as timestamp95, index as index89, uniqueIndex as uniqueIndex46 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable102, text as text103, boolean as boolean32, timestamp as timestamp95, index as index89, uniqueIndex as uniqueIndex47 } from "drizzle-orm/pg-core";
 var branchPreviewShares = pgTable102(
   "branch_preview_shares",
   {
@@ -29356,8 +29361,8 @@ var branchPreviewShares = pgTable102(
     updatedAt: timestamp95("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex46("branch_preview_shares_branch_idx").on(t.branchId),
-    uniqueIndex46("branch_preview_shares_active_token_idx").on(t.publicToken),
+    uniqueIndex47("branch_preview_shares_branch_idx").on(t.branchId),
+    uniqueIndex47("branch_preview_shares_active_token_idx").on(t.publicToken),
     index89("branch_preview_shares_project_idx").on(t.projectId),
     index89("branch_preview_shares_workspace_idx").on(t.workspaceId)
   ]
@@ -29374,7 +29379,7 @@ var branchPreviewGrants = pgTable102(
     createdAt: timestamp95("created_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex46("branch_preview_grants_branch_email_idx").on(t.branchId, t.email),
+    uniqueIndex47("branch_preview_grants_branch_email_idx").on(t.branchId, t.email),
     index89("branch_preview_grants_project_idx").on(t.projectId)
   ]
 );
@@ -29415,10 +29420,10 @@ import {
   jsonb as jsonb59,
   integer as integer53,
   index as index91,
-  uniqueIndex as uniqueIndex47
+  uniqueIndex as uniqueIndex48
 } from "drizzle-orm/pg-core";
 import { relations as relations17 } from "drizzle-orm/relations";
-import { sql as sql32 } from "drizzle-orm";
+import { sql as sql33 } from "drizzle-orm";
 var templates = pgTable104(
   "templates",
   {
@@ -29456,9 +29461,9 @@ var templates = pgTable104(
     index91("templates_workspace_idx").on(table.workspaceId),
     // Partial: only live rows. A soft-deleted template frees its slug (mirrors
     // components_ws_proj_slug_idx / migration 0114).
-    uniqueIndex47("templates_ws_slug_idx").on(table.workspaceId, table.slug).where(sql32`${table.deletedAt} IS NULL`),
+    uniqueIndex48("templates_ws_slug_idx").on(table.workspaceId, table.slug).where(sql33`${table.deletedAt} IS NULL`),
     // Public gallery scan (created_at DESC over live public rows).
-    index91("templates_public_idx").on(table.visibility).where(sql32`${table.visibility} = 'public' AND ${table.deletedAt} IS NULL`)
+    index91("templates_public_idx").on(table.visibility).where(sql33`${table.visibility} = 'public' AND ${table.deletedAt} IS NULL`)
   ]
 );
 var templatesRelations = relations17(templates, ({ one }) => ({
@@ -29551,7 +29556,7 @@ var billingAddons = pgTable107(
 );
 
 // src/schema/billing_customers.ts
-import { pgTable as pgTable108, text as text109, varchar as varchar80, timestamp as timestamp100, uniqueIndex as uniqueIndex48 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable108, text as text109, varchar as varchar80, timestamp as timestamp100, uniqueIndex as uniqueIndex49 } from "drizzle-orm/pg-core";
 var billingCustomers = pgTable108(
   "billing_customers",
   {
@@ -29565,14 +29570,14 @@ var billingCustomers = pgTable108(
     updatedAt: timestamp100("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex48("billing_customers_workspace_idx").on(t.workspaceId),
-    uniqueIndex48("billing_customers_dodo_idx").on(t.dodoCustomerId)
+    uniqueIndex49("billing_customers_workspace_idx").on(t.workspaceId),
+    uniqueIndex49("billing_customers_dodo_idx").on(t.dodoCustomerId)
   ]
 );
 
 // src/schema/subscriptions.ts
-import { pgTable as pgTable109, text as text110, varchar as varchar81, boolean as boolean35, timestamp as timestamp101, index as index95, uniqueIndex as uniqueIndex49 } from "drizzle-orm/pg-core";
-import { sql as sql33 } from "drizzle-orm";
+import { pgTable as pgTable109, text as text110, varchar as varchar81, boolean as boolean35, timestamp as timestamp101, index as index95, uniqueIndex as uniqueIndex50 } from "drizzle-orm/pg-core";
+import { sql as sql34 } from "drizzle-orm";
 var subscriptions = pgTable109(
   "subscriptions",
   {
@@ -29599,17 +29604,17 @@ var subscriptions = pgTable109(
   },
   (t) => [
     index95("subscriptions_workspace_idx").on(t.workspaceId),
-    uniqueIndex49("subscriptions_dodo_idx").on(t.dodoSubscriptionId).where(sql33`${t.dodoSubscriptionId} IS NOT NULL`),
+    uniqueIndex50("subscriptions_dodo_idx").on(t.dodoSubscriptionId).where(sql34`${t.dodoSubscriptionId} IS NOT NULL`),
     // At most one workspace-level subscription per workspace.
-    uniqueIndex49("subscriptions_workspace_plan_unique").on(t.workspaceId).where(sql33`${t.projectId} IS NULL`),
+    uniqueIndex50("subscriptions_workspace_plan_unique").on(t.workspaceId).where(sql34`${t.projectId} IS NULL`),
     // At most one subscription per site.
-    uniqueIndex49("subscriptions_project_unique").on(t.projectId).where(sql33`${t.projectId} IS NOT NULL`)
+    uniqueIndex50("subscriptions_project_unique").on(t.projectId).where(sql34`${t.projectId} IS NOT NULL`)
   ]
 );
 
 // src/schema/subscription_addons.ts
-import { pgTable as pgTable110, text as text111, varchar as varchar82, integer as integer56, timestamp as timestamp102, index as index96, uniqueIndex as uniqueIndex50 } from "drizzle-orm/pg-core";
-import { sql as sql34 } from "drizzle-orm";
+import { pgTable as pgTable110, text as text111, varchar as varchar82, integer as integer56, timestamp as timestamp102, index as index96, uniqueIndex as uniqueIndex51 } from "drizzle-orm/pg-core";
+import { sql as sql35 } from "drizzle-orm";
 var subscriptionAddons = pgTable110(
   "subscription_addons",
   {
@@ -29629,12 +29634,12 @@ var subscriptionAddons = pgTable110(
   },
   (t) => [
     index96("subscription_addons_workspace_idx").on(t.workspaceId),
-    uniqueIndex50("subscription_addons_dodo_idx").on(t.dodoSubscriptionId).where(sql34`${t.dodoSubscriptionId} IS NOT NULL`)
+    uniqueIndex51("subscription_addons_dodo_idx").on(t.dodoSubscriptionId).where(sql35`${t.dodoSubscriptionId} IS NOT NULL`)
   ]
 );
 
 // src/schema/billing_alerts.ts
-import { pgTable as pgTable111, text as text112, varchar as varchar83, timestamp as timestamp103, index as index97, uniqueIndex as uniqueIndex51 } from "drizzle-orm/pg-core";
+import { pgTable as pgTable111, text as text112, varchar as varchar83, timestamp as timestamp103, index as index97, uniqueIndex as uniqueIndex52 } from "drizzle-orm/pg-core";
 var billingAlerts = pgTable111(
   "billing_alerts",
   {
@@ -29654,14 +29659,14 @@ var billingAlerts = pgTable111(
     sentAt: timestamp103("sent_at", { withTimezone: true }).notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex51("billing_alerts_dedupe_idx").on(t.dedupeKey),
+    uniqueIndex52("billing_alerts_dedupe_idx").on(t.dedupeKey),
     index97("billing_alerts_workspace_idx").on(t.workspaceId, t.sentAt)
   ]
 );
 
 // src/schema/ai_credit_ledger.ts
-import { pgTable as pgTable112, text as text113, varchar as varchar84, integer as integer57, timestamp as timestamp104, index as index98, uniqueIndex as uniqueIndex52 } from "drizzle-orm/pg-core";
-import { sql as sql35 } from "drizzle-orm";
+import { pgTable as pgTable112, text as text113, varchar as varchar84, integer as integer57, timestamp as timestamp104, index as index98, uniqueIndex as uniqueIndex53 } from "drizzle-orm/pg-core";
+import { sql as sql36 } from "drizzle-orm";
 var aiCreditLedger = pgTable112(
   "ai_credit_ledger",
   {
@@ -29680,7 +29685,7 @@ var aiCreditLedger = pgTable112(
   },
   (t) => [
     index98("ai_credit_ledger_workspace_idx").on(t.workspaceId, t.createdAt),
-    uniqueIndex52("ai_credit_ledger_custom_agent_run_unique").on(t.note).where(sql35`${t.reason} = 'consume' AND ${t.note} LIKE 'custom-agent-run:%'`)
+    uniqueIndex53("ai_credit_ledger_custom_agent_run_unique").on(t.note).where(sql36`${t.reason} = 'consume' AND ${t.note} LIKE 'custom-agent-run:%'`)
   ]
 );
 
@@ -29889,7 +29894,7 @@ import {
   varchar as varchar90,
   timestamp as timestamp110,
   index as index104,
-  uniqueIndex as uniqueIndex53
+  uniqueIndex as uniqueIndex54
 } from "drizzle-orm/pg-core";
 var ENV_VAR_SCOPES = ["production", "preview", "development"];
 var projectEnvVars = pgTable118(
@@ -29912,7 +29917,7 @@ var projectEnvVars = pgTable118(
   },
   (table) => [
     // One value per key per scope — the same key MAY exist in production and preview.
-    uniqueIndex53("project_env_vars_project_key_scope_idx").on(
+    uniqueIndex54("project_env_vars_project_key_scope_idx").on(
       table.projectId,
       table.key,
       table.scope
@@ -29922,8 +29927,8 @@ var projectEnvVars = pgTable118(
 );
 
 // src/schema/mcp_connections.ts
-import { pgTable as pgTable119, text as text120, varchar as varchar91, jsonb as jsonb63, timestamp as timestamp111, index as index105, uniqueIndex as uniqueIndex54 } from "drizzle-orm/pg-core";
-import { sql as sql36 } from "drizzle-orm";
+import { pgTable as pgTable119, text as text120, varchar as varchar91, jsonb as jsonb63, timestamp as timestamp111, index as index105, uniqueIndex as uniqueIndex55 } from "drizzle-orm/pg-core";
+import { sql as sql37 } from "drizzle-orm";
 var mcpConnections = pgTable119(
   "mcp_connections",
   {
@@ -29986,7 +29991,7 @@ var mcpConnections = pgTable119(
     index105("mcp_connections_project_idx").on(t.projectId),
     // Reconnecting a catalog provider UPDATEs rather than accumulating a second live credential.
     // Custom connectors are excluded: a project may legitimately add many distinct MCP servers.
-    uniqueIndex54("mcp_connections_project_provider_unique").on(t.projectId, t.providerSlug).where(sql36`deleted_at IS NULL AND provider_slug <> 'custom'`)
+    uniqueIndex55("mcp_connections_project_provider_unique").on(t.projectId, t.providerSlug).where(sql37`deleted_at IS NULL AND provider_slug <> 'custom'`)
   ]
 );
 
@@ -29998,7 +30003,7 @@ import {
   boolean as boolean38,
   jsonb as jsonb64,
   integer as integer59,
-  uniqueIndex as uniqueIndex55
+  uniqueIndex as uniqueIndex56
 } from "drizzle-orm/pg-core";
 var crmConnections = pgTable120(
   "crm_connections",
@@ -30018,7 +30023,7 @@ var crmConnections = pgTable120(
     updatedAt: timestamp112("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex55("crm_connection_account_uq").on(
+    uniqueIndex56("crm_connection_account_uq").on(
       t.workspaceId,
       t.provider,
       t.accountId
@@ -30056,7 +30061,7 @@ var formIntegrationDeliveries = pgTable120(
     updatedAt: timestamp112("updated_at").notNull().defaultNow()
   },
   (t) => [
-    uniqueIndex55("crm_delivery_event_uq").on(
+    uniqueIndex56("crm_delivery_event_uq").on(
       t.workspaceId,
       t.eventId,
       t.integrationId
@@ -30128,7 +30133,7 @@ async function reserveWithDeadline() {
       })
     ]);
   } catch (err) {
-    void pending.then((sql38) => sql38.release()).catch((cause) => console.error("[db-pool] orphaned acquire failed:", cause));
+    void pending.then((sql39) => sql39.release()).catch((cause) => console.error("[db-pool] orphaned acquire failed:", cause));
     throw err;
   } finally {
     clearTimeout(timer);
@@ -30338,7 +30343,7 @@ var queries = {
 };
 
 // src/lib/workspace-context.ts
-import { sql as sql37 } from "drizzle-orm";
+import { sql as sql38 } from "drizzle-orm";
 import { eq as eq2 } from "drizzle-orm";
 import { nanoid } from "nanoid";
 var writeOrigins = new Set(WRITE_ORIGINS);
@@ -30372,7 +30377,7 @@ async function getWorkspaceSlugById(workspaceId) {
 }
 async function lookupApiKeyByHash(keyHash) {
   const rows = await db.execute(
-    sql37`SELECT * FROM lookup_api_key_by_hash(${keyHash})`
+    sql38`SELECT * FROM lookup_api_key_by_hash(${keyHash})`
   );
   const r = rows[0];
   if (!r) return null;
@@ -30403,7 +30408,7 @@ async function lookupApiKeyByHash(keyHash) {
 }
 async function publicWorkspaceBySlug(slug) {
   const rows = await db.execute(
-    sql37`SELECT id, slug FROM public_workspace_by_slug(${slug})`
+    sql38`SELECT id, slug FROM public_workspace_by_slug(${slug})`
   );
   const r = rows[0];
   return r?.id ? { id: r.id, slug: r.slug ?? slug } : null;
@@ -30413,7 +30418,7 @@ async function getDefaultWorkspaceId(userId) {
   return row?.id ?? null;
 }
 async function resolveUserWorkspace(userId, workspaceId) {
-  const rows = await db.execute(sql37`
+  const rows = await db.execute(sql38`
     SELECT workspace_id, role
     FROM resolve_user_workspace(${userId}, ${workspaceId ?? null})
   `);
@@ -30449,7 +30454,7 @@ async function ensureDefaultWorkspace(userId, name = "My Workspace", slug) {
   for (let attempt = 1; attempt <= MAX_SLUG_ATTEMPTS; attempt++) {
     console.log("[ensureDefaultWorkspace] Creating workspace + owner membership:", { workspaceId, slug: candidateSlug, attempt });
     try {
-      await db.execute(sql37`
+      await db.execute(sql38`
         SELECT create_default_workspace(${workspaceId}, ${userId}, ${memberId}, ${name}, ${candidateSlug})
       `);
       console.log("[ensureDefaultWorkspace] Workspace + owner membership created with slug:", candidateSlug);