@growth-labs/cms 0.1.0

package/dist/schema/migrations.js

@@ -0,0 +1,589 @@
+// Programmatic access to the CMS D1 migration contract.
+//
+// The supported adoption path is `wrangler d1 migrations apply <BINDING>`
+// against the package's `migrations/` directory — that is the canonical way a
+// site provisions the schema. This module inlines the same statements so the
+// package's own tests (and any tooling that wants the contract without disk
+// access) can apply them in a Workers runtime where `node:fs` is unavailable.
+//
+// Do not call applyMigrations() from a request handler: applying migrations at
+// request time has D1-session-primary pitfalls and adds cold-start latency. Run
+// the wrangler migration during deploys instead.
+/**
+ * The full CMS schema as a single SQL string. Byte-identical in intent to
+ * migrations/0001_create_cms_tables.sql. Statements are separated by `;` and
+ * may be split with {@link splitStatements} for drivers that require one
+ * statement per call (e.g. D1's `exec`).
+ *
+ * Divergence preserved: `media_assets` timestamps are TEXT `datetime('now')`
+ * while content tables are INTEGER `unixepoch()`. Do not normalize.
+ */
+export const CMS_MIGRATION_SQL = `
+CREATE TABLE content_items (
+  id TEXT PRIMARY KEY,
+  type TEXT NOT NULL CHECK (type IN ('article','video','podcast','newsletter')),
+  status TEXT NOT NULL CHECK (status IN ('draft','scheduled','published','archived')),
+  visibility TEXT NOT NULL CHECK (visibility IN ('free','premium')),
+  slug TEXT NOT NULL UNIQUE,
+  title TEXT NOT NULL,
+  seo_title TEXT,
+  description TEXT,
+  excerpt TEXT,
+  byline TEXT,
+  channel TEXT,
+  primary_topic TEXT,
+  featured INTEGER NOT NULL DEFAULT 0,
+  author_id TEXT,
+  hero_image_id TEXT,
+  hero_image_alt TEXT,
+  hero_image_caption TEXT,
+  social_image_id TEXT,
+  canonical_url TEXT,
+  publish_at INTEGER,
+  published_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  publish_tz TEXT NOT NULL DEFAULT 'Europe/Paris',
+  ai_locked_fields TEXT NOT NULL DEFAULT '[]',
+  published_revision_id TEXT,
+  FOREIGN KEY (author_id) REFERENCES authors(id)
+);
+CREATE INDEX idx_content_items_status ON content_items(status);
+CREATE INDEX idx_content_items_type ON content_items(type);
+CREATE INDEX idx_content_items_publish_at ON content_items(publish_at DESC);
+CREATE INDEX idx_content_items_channel ON content_items(channel);
+CREATE INDEX idx_content_items_author_id ON content_items(author_id);
+CREATE INDEX idx_content_items_topic_status_type_published
+  ON content_items(primary_topic, status, type, published_at DESC);
+CREATE INDEX idx_content_items_published_at ON content_items(published_at DESC);
+CREATE TABLE article_content (
+  content_id TEXT PRIMARY KEY,
+  body_markdown TEXT NOT NULL,
+  body_html TEXT,
+  word_count INTEGER,
+  read_time_minutes INTEGER,
+  subtitle TEXT,
+  ai_takeaways TEXT,
+  ai_takeaways_at INTEGER,
+  ai_takeaways_model TEXT,
+  editor_takeaways TEXT,
+  ai_takeaways_correlation_id TEXT,
+  faq_correlation_id TEXT,
+  faq_generated_at INTEGER,
+  faq_model TEXT,
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE
+);
+CREATE TABLE video_content (
+  content_id TEXT PRIMARY KEY,
+  script TEXT NOT NULL,
+  video_id TEXT NOT NULL,
+  duration_seconds INTEGER,
+  thumbnail_image_id TEXT,
+  processing_state TEXT NOT NULL DEFAULT 'pending'
+    CHECK (processing_state IN ('pending','queued','fetching','transcribing','transcoding','ready','failed')),
+  processing_correlation_id TEXT,
+  processing_started_at INTEGER,
+  processing_completed_at INTEGER,
+  processing_last_event_at INTEGER,
+  processing_error TEXT,
+  processing_source_url TEXT,
+  processing_source_kind TEXT,
+  source_fetched INTEGER NOT NULL DEFAULT 0,
+  transcript_ready INTEGER NOT NULL DEFAULT 0,
+  hls_ready INTEGER NOT NULL DEFAULT 0,
+  transcript_url TEXT,
+  hls_manifest_url TEXT,
+  hls_poster_url TEXT,
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE
+);
+CREATE TABLE podcast_content (
+  content_id TEXT PRIMARY KEY,
+  transcript TEXT NOT NULL,
+  audio_r2_key TEXT NOT NULL,
+  duration_seconds INTEGER,
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE
+);
+CREATE TABLE content_revisions (
+  id TEXT PRIMARY KEY,
+  content_id TEXT NOT NULL,
+  payload_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  created_by TEXT,
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE
+);
+CREATE TABLE content_tags (
+  id TEXT PRIMARY KEY,
+  slug TEXT NOT NULL UNIQUE,
+  label TEXT NOT NULL
+);
+CREATE TABLE content_tag_links (
+  content_id TEXT NOT NULL,
+  tag_id TEXT NOT NULL,
+  PRIMARY KEY (content_id, tag_id),
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE,
+  FOREIGN KEY (tag_id) REFERENCES content_tags(id) ON DELETE CASCADE
+);
+CREATE TABLE content_relations (
+  content_id TEXT NOT NULL,
+  related_id TEXT NOT NULL,
+  rank INTEGER NOT NULL DEFAULT 0,
+  reason TEXT,
+  PRIMARY KEY (content_id, related_id),
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE,
+  FOREIGN KEY (related_id) REFERENCES content_items(id) ON DELETE CASCADE
+);
+CREATE TABLE media_assets (
+  id TEXT PRIMARY KEY,
+  site_id TEXT NOT NULL DEFAULT 'fronts',
+  asset_type TEXT NOT NULL DEFAULT 'image',
+  source_type TEXT,
+  original_filename TEXT,
+  status TEXT NOT NULL DEFAULT 'ready',
+  object_key TEXT,
+  public_url TEXT,
+  url TEXT,
+  width INTEGER,
+  height INTEGER,
+  variants_json TEXT,
+  r2_binding TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  pinned INTEGER NOT NULL DEFAULT 0
+);
+CREATE INDEX idx_media_assets_site_id ON media_assets(site_id);
+CREATE INDEX idx_media_assets_object_key ON media_assets(object_key);
+CREATE INDEX idx_media_assets_type_status ON media_assets(asset_type, status);
+CREATE INDEX idx_media_assets_pinned_created ON media_assets(pinned DESC, created_at DESC);
+CREATE TABLE authors (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  slug TEXT NOT NULL UNIQUE,
+  bio TEXT,
+  avatar TEXT,
+  email TEXT,
+  social TEXT,
+  created_at INTEGER NOT NULL DEFAULT (strftime('%s','now')),
+  updated_at INTEGER NOT NULL DEFAULT (strftime('%s','now'))
+);
+CREATE TABLE foundry_callback_events (
+  event_id TEXT PRIMARY KEY,
+  event_kind TEXT NOT NULL,
+  correlation_id TEXT NOT NULL,
+  received_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+`;
+/**
+ * Split {@link CMS_MIGRATION_SQL} into individual statements. Naive `;`-split is
+ * safe here because the contract contains no semicolons inside string literals
+ * or triggers. Empty fragments (whitespace/comments) are dropped.
+ */
+export function splitStatements(sql) {
+    return sql
+        .split(';')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+}
+/**
+ * Masthead migrations layered on the 0001 baseline (spec §4). Applied in order
+ * AFTER CMS_MIGRATION_SQL. Same constraints as the baseline: no `;` inside a
+ * string literal or trigger (splitStatements is a naive `;`-split), statements
+ * semicolon-terminated, whitespace collapsed before D1 exec. AND: no `--`
+ * comments inside an inlined block — the whitespace-collapse would fold a
+ * comment onto the same line as the next statement and comment it out (the
+ * `.sql` files DO carry a leading `--` header; the alignment test strips it).
+ *
+ * 0002 is a TABLE REBUILD (D1 can't ALTER a CHECK in place); 0003+ are ADD
+ * COLUMN / CREATE TABLE. CRITICAL: seven tables (article_content, video_content,
+ * podcast_content, content_revisions, content_tag_links, content_relations, and
+ * content_contributors) reference content_items. The package declares those FKs
+ * ON DELETE CASCADE, but on the LIVE prod fronts-data DB some of those tables
+ * pre-date the package and carry NO `ON DELETE` clause (NO ACTION) — e.g.
+ * content_contributors from Fronts legacy migration 0035. The package's own
+ * `CREATE TABLE IF NOT EXISTS` NO-OPs against those pre-existing tables, so on
+ * prod neither a CASCADE nor a deferred pragma can be relied on to clear the child
+ * rows before the parent DROP. With FK enforcement ON (D1's default during apply),
+ * `DROP TABLE content_items` is REJECTED while ANY child still references it.
+ * So 0002 stashes each child into a `_cms0002_bk_*` table, then EXPLICITLY
+ * `DELETE FROM <child>` (clearing NO-ACTION *and* cascade references alike), does
+ * the parent rebuild, then restores the children from the stash. The explicit
+ * DELETE/restore is the load-bearing, FK-action-independent fix; the prepended
+ * `PRAGMA defer_foreign_keys = ON` is defense-in-depth only (it does not reliably
+ * span the per-statement exec runner). On an empty DB the stash/delete/restore is
+ * a no-op and the temp tables are dropped, so the net table set is unchanged.
+ */
+export const CMS_MIGRATIONS_0002_PLUS = [
+    {
+        id: '0002_review_softdelete_board',
+        sql: `
+PRAGMA defer_foreign_keys = ON;
+CREATE TABLE IF NOT EXISTS content_contributors (
+  content_id TEXT NOT NULL,
+  author_id TEXT NOT NULL,
+  role TEXT,
+  position INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (content_id, author_id),
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE,
+  FOREIGN KEY (author_id) REFERENCES authors(id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_content_contributors_author ON content_contributors(author_id);
+CREATE TABLE content_items_new (
+  id TEXT PRIMARY KEY,
+  type TEXT NOT NULL CHECK (type IN ('article','video','podcast','newsletter')),
+  status TEXT NOT NULL CHECK (status IN ('draft','scheduled','review','published','archived')),
+  visibility TEXT NOT NULL CHECK (visibility IN ('free','premium')),
+  slug TEXT NOT NULL UNIQUE,
+  title TEXT NOT NULL,
+  seo_title TEXT,
+  description TEXT,
+  excerpt TEXT,
+  byline TEXT,
+  channel TEXT,
+  primary_topic TEXT,
+  featured INTEGER NOT NULL DEFAULT 0,
+  author_id TEXT,
+  hero_image_id TEXT,
+  hero_image_alt TEXT,
+  hero_image_caption TEXT,
+  social_image_id TEXT,
+  canonical_url TEXT,
+  publish_at INTEGER,
+  published_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  publish_tz TEXT NOT NULL DEFAULT 'Europe/Paris',
+  ai_locked_fields TEXT NOT NULL DEFAULT '[]',
+  published_revision_id TEXT,
+  deleted_at INTEGER,
+  board_position INTEGER,
+  FOREIGN KEY (author_id) REFERENCES authors(id)
+);
+INSERT INTO content_items_new (
+  id, type, status, visibility, slug, title, seo_title, description, excerpt,
+  byline, channel, primary_topic, featured, author_id, hero_image_id,
+  hero_image_alt, hero_image_caption, social_image_id, canonical_url,
+  publish_at, published_at, created_at, updated_at, publish_tz,
+  ai_locked_fields, published_revision_id
+) SELECT
+  id, type, status, visibility, slug, title, seo_title, description, excerpt,
+  byline, channel, primary_topic, featured, author_id, hero_image_id,
+  hero_image_alt, hero_image_caption, social_image_id, canonical_url,
+  publish_at, published_at, created_at, updated_at, publish_tz,
+  ai_locked_fields, published_revision_id
+FROM content_items;
+CREATE TABLE _cms0002_bk_article_content AS SELECT * FROM article_content;
+CREATE TABLE _cms0002_bk_video_content AS SELECT * FROM video_content;
+CREATE TABLE _cms0002_bk_podcast_content AS SELECT * FROM podcast_content;
+CREATE TABLE _cms0002_bk_content_revisions AS SELECT * FROM content_revisions;
+CREATE TABLE _cms0002_bk_content_tag_links AS SELECT * FROM content_tag_links;
+CREATE TABLE _cms0002_bk_content_relations AS SELECT * FROM content_relations;
+CREATE TABLE _cms0002_bk_content_contributors AS SELECT * FROM content_contributors;
+DELETE FROM article_content;
+DELETE FROM video_content;
+DELETE FROM podcast_content;
+DELETE FROM content_revisions;
+DELETE FROM content_tag_links;
+DELETE FROM content_relations;
+DELETE FROM content_contributors;
+DROP TABLE content_items;
+ALTER TABLE content_items_new RENAME TO content_items;
+INSERT INTO article_content SELECT * FROM _cms0002_bk_article_content;
+INSERT INTO video_content SELECT * FROM _cms0002_bk_video_content;
+INSERT INTO podcast_content SELECT * FROM _cms0002_bk_podcast_content;
+INSERT INTO content_revisions SELECT * FROM _cms0002_bk_content_revisions;
+INSERT INTO content_tag_links SELECT * FROM _cms0002_bk_content_tag_links;
+INSERT INTO content_relations SELECT * FROM _cms0002_bk_content_relations;
+INSERT INTO content_contributors SELECT * FROM _cms0002_bk_content_contributors;
+DROP TABLE _cms0002_bk_article_content;
+DROP TABLE _cms0002_bk_video_content;
+DROP TABLE _cms0002_bk_podcast_content;
+DROP TABLE _cms0002_bk_content_revisions;
+DROP TABLE _cms0002_bk_content_tag_links;
+DROP TABLE _cms0002_bk_content_relations;
+DROP TABLE _cms0002_bk_content_contributors;
+CREATE INDEX idx_content_items_status ON content_items(status);
+CREATE INDEX idx_content_items_type ON content_items(type);
+CREATE INDEX idx_content_items_publish_at ON content_items(publish_at DESC);
+CREATE INDEX idx_content_items_channel ON content_items(channel);
+CREATE INDEX idx_content_items_author_id ON content_items(author_id);
+CREATE INDEX idx_content_items_topic_status_type_published
+  ON content_items(primary_topic, status, type, published_at DESC);
+CREATE INDEX idx_content_items_published_at ON content_items(published_at DESC);
+CREATE INDEX idx_content_items_deleted_at ON content_items(deleted_at);
+`,
+    },
+    {
+        id: '0003_content_contributors',
+        sql: `
+CREATE TABLE IF NOT EXISTS content_contributors (
+  content_id TEXT NOT NULL,
+  author_id TEXT NOT NULL,
+  role TEXT,
+  position INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (content_id, author_id),
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE,
+  FOREIGN KEY (author_id) REFERENCES authors(id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_content_contributors_author ON content_contributors(author_id);
+`,
+    },
+    {
+        id: '0004_seo_faq_columns',
+        sql: `
+ALTER TABLE content_items ADD COLUMN seo_score INTEGER;
+ALTER TABLE content_items ADD COLUMN seo_focus_keyword TEXT;
+ALTER TABLE content_items ADD COLUMN ai_og_image_id TEXT;
+ALTER TABLE article_content ADD COLUMN faq_json TEXT;
+`,
+    },
+    {
+        id: '0005_revision_delta_columns',
+        sql: `
+ALTER TABLE content_revisions ADD COLUMN words_added INTEGER;
+ALTER TABLE content_revisions ADD COLUMN words_removed INTEGER;
+ALTER TABLE content_revisions ADD COLUMN tag TEXT;
+`,
+    },
+    {
+        id: '0006_processing_trigger_token',
+        sql: `
+ALTER TABLE video_content ADD COLUMN processing_trigger_token TEXT;
+ALTER TABLE podcast_content ADD COLUMN processing_trigger_token TEXT;
+`,
+    },
+    {
+        id: '0007_content_slug_redirects',
+        sql: `
+CREATE TABLE content_slug_redirects (
+  old_slug TEXT PRIMARY KEY,
+  content_id TEXT NOT NULL,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE
+);
+CREATE INDEX idx_content_slug_redirects_content ON content_slug_redirects(content_id);
+`,
+    },
+    {
+        id: '0008_workspace_settings',
+        sql: `
+CREATE TABLE workspace_settings (
+  workspace_id TEXT PRIMARY KEY,
+  publication_name TEXT,
+  tagline TEXT,
+  language TEXT NOT NULL DEFAULT 'en',
+  timezone TEXT NOT NULL DEFAULT 'Europe/Paris',
+  require_review INTEGER NOT NULL DEFAULT 0,
+  auto_seo INTEGER NOT NULL DEFAULT 0,
+  scheduled_publish INTEGER NOT NULL DEFAULT 1,
+  premium_default INTEGER NOT NULL DEFAULT 0,
+  accent_color TEXT,
+  display_typeface TEXT,
+  logo_r2_key TEXT,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+`,
+    },
+    {
+        id: '0009_workspace_memberships',
+        sql: `
+CREATE TABLE masthead_users (
+  id TEXT PRIMARY KEY,
+  email TEXT NOT NULL UNIQUE,
+  name TEXT,
+  image TEXT,
+  last_login_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE TABLE workspace_memberships (
+  workspace_id TEXT NOT NULL,
+  user_id TEXT NOT NULL,
+  role TEXT NOT NULL CHECK (role IN ('owner','senior_editor','editor','contributor','producer')),
+  invited_by TEXT,
+  invited_at INTEGER,
+  accepted_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  PRIMARY KEY (workspace_id, user_id)
+);
+CREATE INDEX idx_workspace_memberships_user ON workspace_memberships(user_id);
+CREATE INDEX idx_workspace_memberships_pending ON workspace_memberships(workspace_id, accepted_at);
+CREATE TABLE workspace_invites (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  email TEXT NOT NULL,
+  role TEXT NOT NULL CHECK (role IN ('owner','senior_editor','editor','contributor','producer')),
+  invited_by TEXT NOT NULL,
+  token_hash TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  accepted_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX idx_workspace_invites_workspace ON workspace_invites(workspace_id);
+CREATE INDEX idx_workspace_invites_token_hash ON workspace_invites(token_hash);
+`,
+    },
+    {
+        id: '0010_api_keys_webhooks',
+        sql: `
+CREATE TABLE cms_api_keys (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  name TEXT NOT NULL,
+  key_hash TEXT NOT NULL,
+  scopes TEXT NOT NULL DEFAULT '[]',
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  last_used INTEGER
+);
+CREATE INDEX idx_cms_api_keys_workspace ON cms_api_keys(workspace_id);
+CREATE TABLE cms_webhooks (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  event_type TEXT NOT NULL,
+  url TEXT NOT NULL,
+  last_status TEXT,
+  last_fired_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX idx_cms_webhooks_workspace ON cms_webhooks(workspace_id, event_type);
+`,
+    },
+    {
+        id: '0011_notifications_activity',
+        sql: `
+CREATE TABLE cms_notifications (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  user_id TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  body TEXT,
+  read_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX idx_cms_notifications_user ON cms_notifications(workspace_id, user_id, read_at);
+CREATE TABLE cms_activity_log (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  user_id TEXT,
+  action TEXT NOT NULL,
+  target_id TEXT,
+  target_title TEXT,
+  type TEXT,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX idx_cms_activity_log_workspace ON cms_activity_log(workspace_id, created_at);
+`,
+    },
+    {
+        id: '0012_content_imports',
+        sql: `
+CREATE TABLE content_imports (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL,
+  source TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending',
+  payload_json TEXT,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX idx_content_imports_workspace ON content_imports(workspace_id, status);
+`,
+    },
+    {
+        id: '0013_media_normalization',
+        sql: `
+CREATE INDEX IF NOT EXISTS idx_media_assets_public_url ON media_assets(public_url);
+`,
+    },
+    {
+        // Adds key_prefix to cms_api_keys so masked display can show '<prefix>••••<last4>'
+        // without storing the raw key or a reversible value. Additive / reversible.
+        id: '0014_api_key_prefix',
+        sql: `
+ALTER TABLE cms_api_keys ADD COLUMN key_prefix TEXT;
+`,
+    },
+    {
+        id: '0015_cms_topics',
+        sql: `
+CREATE TABLE cms_topics (
+  slug TEXT PRIMARY KEY,
+  label TEXT NOT NULL,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX idx_cms_topics_label ON cms_topics(label);
+`,
+    },
+    {
+        id: '0016_content_insights',
+        sql: `
+CREATE TABLE content_insights (
+  id TEXT PRIMARY KEY,
+  site_id TEXT NOT NULL,
+  run_id TEXT NOT NULL,
+  run_date TEXT NOT NULL,
+  desk TEXT NOT NULL,
+  suggestion_type TEXT NOT NULL CHECK (suggestion_type IN ('cluster','tracker')),
+  signal_type TEXT NOT NULL CHECK (signal_type IN ('demand','opportunity')),
+  is_best_bet INTEGER NOT NULL DEFAULT 0,
+  best_bet_rank INTEGER,
+  desk_rank INTEGER NOT NULL DEFAULT 0,
+  headline TEXT NOT NULL,
+  evidence TEXT NOT NULL,
+  brief TEXT NOT NULL,
+  intent_key TEXT NOT NULL,
+  beat TEXT CHECK (beat IS NULL OR beat IN ('defense','intelligence','diplomacy','analysis')),
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE INDEX idx_content_insights_site_run_desk ON content_insights(site_id, run_date, desk);
+CREATE INDEX idx_content_insights_site_intent ON content_insights(site_id, intent_key);
+CREATE TABLE content_insight_runs (
+  id TEXT PRIMARY KEY,
+  site_id TEXT NOT NULL,
+  run_date TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('running','completed','partial','failed')),
+  event_id TEXT NOT NULL,
+  run_attempt INTEGER NOT NULL,
+  generated_at INTEGER NOT NULL,
+  content_hash TEXT NOT NULL,
+  demand_count INTEGER NOT NULL DEFAULT 0,
+  opportunity_count INTEGER NOT NULL DEFAULT 0,
+  started_at INTEGER,
+  completed_at INTEGER,
+  error TEXT,
+  UNIQUE (site_id, run_date)
+);
+CREATE INDEX idx_content_insight_runs_event ON content_insight_runs(event_id);
+CREATE TABLE content_insight_dismissals (
+  site_id TEXT NOT NULL,
+  intent_key TEXT NOT NULL,
+  dismissed_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  dismissed_by TEXT,
+  PRIMARY KEY (site_id, intent_key)
+);
+`,
+    },
+];
+/**
+ * Apply the CMS schema to a D1 database one statement at a time. D1's `exec`
+ * is newline-sensitive (it treats each line as a complete statement), so each
+ * statement is flattened to a single line first. Intended for tests and
+ * provisioning tooling, NOT request-time use. Prefer
+ * `wrangler d1 migrations apply` for real deploys.
+ */
+export async function applyMigrations(db) {
+    for (const statement of splitStatements(CMS_MIGRATION_SQL)) {
+        // Collapse internal whitespace/newlines so D1's per-line exec parser sees
+        // one complete statement.
+        await db.exec(`${statement.replace(/\s+/g, ' ').trim()};`);
+    }
+    for (const migration of CMS_MIGRATIONS_0002_PLUS) {
+        for (const statement of splitStatements(migration.sql)) {
+            await db.exec(`${statement.replace(/\s+/g, ' ').trim()};`);
+        }
+    }
+}
+// Re-export the table list so consumers can `import { CMS_TABLES } from
+// '@growth-labs/cms/schema'` alongside the migration helpers.
+export { CMS_TABLES } from './tables.js';
+//# sourceMappingURL=migrations.js.map

package/dist/schema/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/schema/migrations.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,iDAAiD;AAEjD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyJhC,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,OAAO,GAAG;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC9B,CAAC;AAOD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACtE;QACC,EAAE,EAAE,8BAA8B;QAClC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+FN;KACC;IACD;QACC,EAAE,EAAE,2BAA2B;QAC/B,GAAG,EAAE;;;;;;;;;;;CAWN;KACC;IACD;QACC,EAAE,EAAE,sBAAsB;QAC1B,GAAG,EAAE;;;;;CAKN;KACC;IACD;QACC,EAAE,EAAE,6BAA6B;QACjC,GAAG,EAAE;;;;CAIN;KACC;IACD;QACC,EAAE,EAAE,+BAA+B;QACnC,GAAG,EAAE;;;CAGN;KACC;IACD;QACC,EAAE,EAAE,6BAA6B;QACjC,GAAG,EAAE;;;;;;;;CAQN;KACC;IACD;QACC,EAAE,EAAE,yBAAyB;QAC7B,GAAG,EAAE;;;;;;;;;;;;;;;;;CAiBN;KACC;IACD;QACC,EAAE,EAAE,4BAA4B;QAChC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCN;KACC;IACD;QACC,EAAE,EAAE,wBAAwB;QAC5B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;CAqBN;KACC;IACD;QACC,EAAE,EAAE,6BAA6B;QACjC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;CAsBN;KACC;IACD;QACC,EAAE,EAAE,sBAAsB;QAC1B,GAAG,EAAE;;;;;;;;;;CAUN;KACC;IACD;QACC,EAAE,EAAE,0BAA0B;QAC9B,GAAG,EAAE;;CAEN;KACC;IACD;QACC,mFAAmF;QACnF,4EAA4E;QAC5E,EAAE,EAAE,qBAAqB;QACzB,GAAG,EAAE;;CAEN;KACC;IACD;QACC,EAAE,EAAE,iBAAiB;QACrB,GAAG,EAAE;;;;;;;;CAQN;KACC;IACD;QACC,EAAE,EAAE,uBAAuB;QAC3B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6CN;KACC;CACD,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC/C,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5D,0EAA0E;QAC1E,0BAA0B;QAC1B,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC3D,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,wBAAwB,EAAE,CAAC;QAClD,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;IACF,CAAC;AACF,CAAC;AAGD,wEAAwE;AACxE,8DAA8D;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA"}

package/dist/schema/tables.d.ts

@@ -0,0 +1,11 @@
+/** Every table name in the CMS D1 contract, in migration creation order. */
+export declare const CMS_TABLES: readonly ["content_items", "article_content", "video_content", "podcast_content", "content_revisions", "content_tags", "content_tag_links", "content_relations", "media_assets", "authors", "foundry_callback_events", "content_contributors", "content_slug_redirects", "workspace_settings", "masthead_users", "workspace_memberships", "workspace_invites", "cms_api_keys", "cms_webhooks", "cms_notifications", "cms_activity_log", "content_imports", "cms_topics", "content_insights", "content_insight_runs", "content_insight_dismissals"];
+export type CmsTableName = (typeof CMS_TABLES)[number];
+/**
+ * Tables that are explicitly NOT part of the CMS contract. Kept as a named
+ * negative-space assertion: the package must never create these — they are
+ * identity/entitlement-owned or analytics-owned. Used by the contract test to
+ * fail loudly if the boundary erodes.
+ */
+export declare const NON_CMS_TABLES: readonly ["gl_content_progress", "users", "subscriptions", "gl_identity_links"];
+//# sourceMappingURL=tables.d.ts.map

package/dist/schema/tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../src/schema/tables.ts"],"names":[],"mappings":"AASA,4EAA4E;AAC5E,eAAO,MAAM,UAAU,ohBA+Bb,CAAA;AAEV,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,iFAOjB,CAAA"}

package/dist/schema/tables.js

@@ -0,0 +1,56 @@
+// The 11-table content/revision/media/authors/foundry-callback contract that
+// `@growth-labs/cms` owns. Verified against prod `fronts-data` 2026-05-29.
+//
+// This list is the CMS boundary made executable: it is exactly the tables the
+// package migration creates and nothing else. Identity/entitlement tables
+// (users, subscription*, *_entitlements, gl_identity_links, CRM, mailer) and the
+// analytics-owned `gl_content_progress` are deliberately absent — they belong to
+// other workstreams. See docs/log/2026-05-29-cms-extraction-inventory.md.
+/** Every table name in the CMS D1 contract, in migration creation order. */
+export const CMS_TABLES = [
+    'content_items',
+    'article_content',
+    'video_content',
+    'podcast_content',
+    'content_revisions',
+    'content_tags',
+    'content_tag_links',
+    'content_relations',
+    'media_assets',
+    'authors',
+    'foundry_callback_events',
+    'content_contributors',
+    'content_slug_redirects',
+    // Masthead platform tables (migrations 0008–0011)
+    'workspace_settings',
+    'masthead_users',
+    'workspace_memberships',
+    'workspace_invites',
+    'cms_api_keys',
+    'cms_webhooks',
+    'cms_notifications',
+    'cms_activity_log',
+    // Content import staging (migration 0012)
+    'content_imports',
+    // Standalone taxonomy rows for zero-count topics (migration 0015)
+    'cms_topics',
+    // Content Insights demand-intelligence board (migration 0016)
+    'content_insights',
+    'content_insight_runs',
+    'content_insight_dismissals',
+];
+/**
+ * Tables that are explicitly NOT part of the CMS contract. Kept as a named
+ * negative-space assertion: the package must never create these — they are
+ * identity/entitlement-owned or analytics-owned. Used by the contract test to
+ * fail loudly if the boundary erodes.
+ */
+export const NON_CMS_TABLES = [
+    // analytics-owned
+    'gl_content_progress',
+    // identity / entitlement / CRM / mailer-owned
+    'users',
+    'subscriptions',
+    'gl_identity_links',
+];
+//# sourceMappingURL=tables.js.map

package/dist/schema/tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../src/schema/tables.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2EAA2E;AAC3E,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,iFAAiF;AACjF,iFAAiF;AACjF,0EAA0E;AAE1E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,eAAe;IACf,iBAAiB;IACjB,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,cAAc;IACd,SAAS;IACT,yBAAyB;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,kDAAkD;IAClD,oBAAoB;IACpB,gBAAgB;IAChB,uBAAuB;IACvB,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,kBAAkB;IAClB,0CAA0C;IAC1C,iBAAiB;IACjB,kEAAkE;IAClE,YAAY;IACZ,8DAA8D;IAC9D,kBAAkB;IAClB,sBAAsB;IACtB,4BAA4B;CACnB,CAAA;AAIV;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,kBAAkB;IAClB,qBAAqB;IACrB,8CAA8C;IAC9C,OAAO;IACP,eAAe;IACf,mBAAmB;CACV,CAAA"}