@krantho/persistence-sqlite 0.0.0-stage → 1.0.0

package/dist/migration-runner.js

@@ -0,0 +1,109 @@
+import { createHash } from 'node:crypto';
+import { migrationFailedMessage, resolveCurrentVersion, validateChecksums, } from '@krantho/persistence';
+/** Compute SHA-256 checksum of a migration's identity */
+function computeChecksum(migration) {
+    const content = `v${migration.version}:${migration.name}`;
+    return createHash('sha256').update(content).digest('hex');
+}
+const CREATE_SCHEMA_MIGRATIONS = `
+CREATE TABLE IF NOT EXISTS schema_migrations (
+  version INTEGER PRIMARY KEY,
+  name TEXT NOT NULL,
+  checksum TEXT NOT NULL,
+  applied_at TEXT NOT NULL
+)`;
+/** Read the applied-migration ledger, or null when it has not been created yet */
+function readLedger(db) {
+    const tableExists = db
+        .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='schema_migrations'")
+        .get();
+    if (!tableExists)
+        return null;
+    const rows = db
+        .prepare('SELECT version, name, checksum, applied_at FROM schema_migrations ORDER BY version')
+        .all();
+    return new Map(rows.map((m) => [m.version, m]));
+}
+/** Apply one migration and record it, rolling back that migration alone on failure */
+function applyMigration(db, migration, checksum, appliedAt) {
+    const run = db.transaction(() => {
+        migration.apply(db);
+        db.prepare('INSERT INTO schema_migrations (version, name, checksum, applied_at) VALUES (?, ?, ?, ?)').run(migration.version, migration.name, checksum, appliedAt);
+    });
+    try {
+        run();
+    }
+    catch (err) {
+        throw new Error(migrationFailedMessage(migration.version, migration.name, err));
+    }
+}
+/** Apply every pending migration. Must run while holding the database write lock. */
+function applyPending(db, migrations) {
+    db.exec(CREATE_SCHEMA_MIGRATIONS);
+    const ledger = readLedger(db) ?? new Map();
+    validateChecksums(migrations, ledger, computeChecksum);
+    const newlyApplied = [];
+    for (const migration of [...migrations].sort((a, b) => a.version - b.version)) {
+        if (ledger.has(migration.version))
+            continue;
+        const checksum = computeChecksum(migration);
+        const appliedAt = new Date().toISOString();
+        applyMigration(db, migration, checksum, appliedAt);
+        newlyApplied.push({ version: migration.version, name: migration.name, checksum, appliedAt });
+    }
+    return {
+        applied: newlyApplied,
+        currentVersion: resolveCurrentVersion(ledger.keys(), newlyApplied),
+    };
+}
+/**
+ * Run pending migrations on a SQLite database.
+ *
+ * Self-bootstrapping: creates the schema_migrations table if it doesn't exist.
+ * Each migration runs inside a transaction. Halts on first failure.
+ *
+ * Deciding what is pending and applying it is a check-then-act, so it runs inside
+ * a BEGIN IMMEDIATE transaction: the write lock is taken before the ledger is read
+ * and held until the last migration is recorded. Several processes may open the
+ * same database file at once — a server, a CLI, a framework spawning one build
+ * worker per core — and without the lock they all read an empty ledger and race to
+ * create the same tables. The loser waits on the connection's busy timeout and then
+ * re-reads the ledger inside the lock, finding the work already done.
+ */
+export function runMigrations(db, migrations) {
+    // Fast path — an already-migrated database is the common case, and reading the
+    // ledger without the write lock is safe because "every migration is applied" is
+    // a state no concurrent migration run can take away.
+    const ledger = readLedger(db);
+    if (ledger) {
+        validateChecksums(migrations, ledger, computeChecksum);
+        if (migrations.every((m) => ledger.has(m.version))) {
+            return { applied: [], currentVersion: resolveCurrentVersion(ledger.keys(), []) };
+        }
+    }
+    return db.transaction(() => applyPending(db, migrations)).immediate();
+}
+/** Get the current schema version from the database */
+export function getSchemaVersion(db) {
+    // Check if schema_migrations table exists
+    const tableExists = db
+        .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='schema_migrations'")
+        .get();
+    if (!tableExists)
+        return 0;
+    const row = db.prepare('SELECT MAX(version) as max_version FROM schema_migrations').get();
+    return row?.max_version ?? 0;
+}
+/** Get all applied migrations */
+export function getAppliedMigrations(db) {
+    const ledger = readLedger(db);
+    if (!ledger)
+        return [];
+    return [...ledger.values()].map((r) => ({
+        version: r.version,
+        name: r.name,
+        checksum: r.checksum,
+        appliedAt: r.applied_at,
+    }));
+}
+//# sourceMappingURL=migration-runner.js.map

package/dist/migration-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.js","sourceRoot":"","sources":["../src/migration-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,sBAAsB,CAAA;AAU7B,yDAAyD;AACzD,SAAS,eAAe,CAAC,SAA4B;IACnD,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE,CAAA;IACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAED,MAAM,wBAAwB,GAAG;;;;;;EAM/B,CAAA;AAIF,kFAAkF;AAClF,SAAS,UAAU,CAAC,EAAqB;IACvC,MAAM,WAAW,GAAG,EAAE;SACnB,OAAO,CAAC,gFAAgF,CAAC;SACzF,GAAG,EAAkC,CAAA;IAExC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAA;IAE7B,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,oFAAoF,CAAC;SAC7F,GAAG,EAAoB,CAAA;IAE1B,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CACrB,EAAqB,EACrB,SAA0B,EAC1B,QAAgB,EAChB,SAAiB;IAEjB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC9B,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACnB,EAAE,CAAC,OAAO,CACR,yFAAyF,CAC1F,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,GAAG,EAAE,CAAA;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACjF,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY,CACnB,EAAqB,EACrB,UAAsC;IAEtC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAwB,CAAA;IAChE,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;IAEtD,MAAM,YAAY,GAAuB,EAAE,CAAA;IAE3C,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,SAAQ;QAE3C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC1C,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;QAClD,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;IAC9F,CAAC;IAED,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,cAAc,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC;KACnE,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAqB,EACrB,UAAsC;IAEtC,+EAA+E;IAC/E,gFAAgF;IAChF,qDAAqD;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAA;IAC7B,IAAI,MAAM,EAAE,CAAC;QACX,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;QACtD,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;QAClF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;AACvE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,EAAqB;IACpD,0CAA0C;IAC1C,MAAM,WAAW,GAAG,EAAE;SACnB,OAAO,CAAC,gFAAgF,CAAC;SACzF,GAAG,EAAkC,CAAA;IAExC,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,CAAA;IAE1B,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAE1E,CAAA;IAEb,OAAO,GAAG,EAAE,WAAW,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,oBAAoB,CAAC,EAAqB;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAA;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAEtB,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/migrations/index.d.ts

@@ -0,0 +1,4 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/** All registered SQLite migrations, in version order */
+export declare const sqliteMigrations: readonly SqliteMigration[];
+//# sourceMappingURL=index.d.ts.map

package/dist/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAgB7D,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,EAAE,SAAS,eAAe,EAetD,CAAA"}

package/dist/migrations/index.js

@@ -0,0 +1,32 @@
+import { v001InitialSchema } from './v001-initial-schema.js';
+import { v002AuthTables } from './v002-auth-tables.js';
+import { v003UserPermissions } from './v003-user-permissions.js';
+import { v004MediaHotspot } from './v004-media-hotspot.js';
+import { v005ContentLocks } from './v005-content-locks.js';
+import { v006WebhookDeliveries } from './v006-webhook-deliveries.js';
+import { v007MediaFolders } from './v007-media-folders.js';
+import { v008SiteSettings } from './v008-site-settings.js';
+import { v009SeoConfig } from './v009-seo-config.js';
+import { v010ContentLiveVersion } from './v010-content-live-version.js';
+import { v011Media } from './v011-media.js';
+import { v012PageCache } from './v012-page-cache.js';
+import { v013ContentContracts } from './v013-content-contracts.js';
+import { v014ContentManifestCommit } from './v014-content-manifest-commit.js';
+/** All registered SQLite migrations, in version order */
+export const sqliteMigrations = [
+    v001InitialSchema,
+    v002AuthTables,
+    v003UserPermissions,
+    v004MediaHotspot,
+    v005ContentLocks,
+    v006WebhookDeliveries,
+    v007MediaFolders,
+    v008SiteSettings,
+    v009SeoConfig,
+    v010ContentLiveVersion,
+    v011Media,
+    v012PageCache,
+    v013ContentContracts,
+    v014ContentManifestCommit,
+];
+//# sourceMappingURL=index.js.map

package/dist/migrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAE7E,yDAAyD;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAA+B;IAC1D,iBAAiB;IACjB,cAAc;IACd,mBAAmB;IACnB,gBAAgB;IAChB,gBAAgB;IAChB,qBAAqB;IACrB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,sBAAsB;IACtB,SAAS;IACT,aAAa;IACb,oBAAoB;IACpB,yBAAyB;CAC1B,CAAA"}

package/dist/migrations/v001-initial-schema.d.ts

@@ -0,0 +1,10 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V001: Initial schema — all core tables for content, schemas, manifests,
+ * and checkpoints using the append-only versioning model.
+ *
+ * Content and collection_schemas use append-only rows with `is_current`
+ * flags and `version` columns. Every write creates a new row.
+ */
+export declare const v001InitialSchema: SqliteMigration;
+//# sourceMappingURL=v001-initial-schema.d.ts.map

package/dist/migrations/v001-initial-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v001-initial-schema.d.ts","sourceRoot":"","sources":["../../src/migrations/v001-initial-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,eA0G/B,CAAA"}

package/dist/migrations/v001-initial-schema.js

@@ -0,0 +1,94 @@
+/**
+ * V001: Initial schema — all core tables for content, schemas, manifests,
+ * and checkpoints using the append-only versioning model.
+ *
+ * Content and collection_schemas use append-only rows with `is_current`
+ * flags and `version` columns. Every write creates a new row.
+ */
+export const v001InitialSchema = {
+    version: 1,
+    name: 'initial_schema',
+    apply: (db) => {
+        // --- Content (append-only) ---
+        db.exec(`
+      CREATE TABLE content (
+        id TEXT PRIMARY KEY,
+        collection TEXT NOT NULL,
+        slug TEXT NOT NULL,
+        locale TEXT NOT NULL DEFAULT 'en',
+        version INTEGER NOT NULL,
+        is_current INTEGER NOT NULL DEFAULT 1,
+        status TEXT NOT NULL DEFAULT 'draft',
+        fields TEXT NOT NULL,
+        body TEXT NOT NULL,
+        html TEXT NOT NULL DEFAULT '',
+        sections TEXT NOT NULL DEFAULT '{}',
+        source TEXT NOT NULL DEFAULT 'api',
+        file_path TEXT,
+        changed_by TEXT,
+        deleted_at TEXT,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        UNIQUE(collection, slug, locale, version)
+      )
+    `);
+        db.exec('CREATE INDEX idx_content_current ON content(collection, slug, locale) WHERE is_current = 1');
+        db.exec('CREATE INDEX idx_content_collection_status ON content(collection, status) WHERE is_current = 1');
+        db.exec('CREATE INDEX idx_content_slug ON content(slug) WHERE is_current = 1');
+        // --- Collection schemas (append-only) ---
+        db.exec(`
+      CREATE TABLE collection_schemas (
+        row_id TEXT PRIMARY KEY,
+        collection TEXT NOT NULL,
+        version INTEGER NOT NULL,
+        is_current INTEGER NOT NULL DEFAULT 1,
+        fields TEXT NOT NULL,
+        changed_by TEXT,
+        deleted_at TEXT,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        UNIQUE(collection, version)
+      )
+    `);
+        db.exec('CREATE INDEX idx_schemas_current ON collection_schemas(collection) WHERE is_current = 1');
+        // --- Content manifest ---
+        db.exec(`
+      CREATE TABLE content_manifest (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        repo_version INTEGER NOT NULL,
+        imported_at TEXT NOT NULL,
+        file_checksums TEXT NOT NULL
+      )
+    `);
+        db.exec(`
+      CREATE TABLE content_migration_conflicts (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        migration_id INTEGER NOT NULL,
+        collection TEXT NOT NULL,
+        slug TEXT NOT NULL,
+        repo_checksum TEXT NOT NULL,
+        db_checksum TEXT NOT NULL,
+        resolved INTEGER DEFAULT 0,
+        resolved_at TEXT,
+        resolution TEXT
+      )
+    `);
+        db.exec('CREATE INDEX idx_content_conflicts_unresolved ON content_migration_conflicts(resolved) WHERE resolved = 0');
+        // --- Checkpoints ---
+        db.exec(`
+      CREATE TABLE checkpoints (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        version INTEGER NOT NULL UNIQUE,
+        name TEXT,
+        trigger TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+        db.exec(`
+      CREATE TABLE checkpoint_counter (
+        id INTEGER PRIMARY KEY CHECK (id = 1),
+        next INTEGER NOT NULL DEFAULT 1
+      )
+    `);
+        db.exec('INSERT INTO checkpoint_counter (id, next) VALUES (1, 1)');
+    },
+};
+//# sourceMappingURL=v001-initial-schema.js.map

package/dist/migrations/v001-initial-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v001-initial-schema.js","sourceRoot":"","sources":["../../src/migrations/v001-initial-schema.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,gCAAgC;QAEhC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;KAoBP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CACL,4FAA4F,CAC7F,CAAA;QACD,EAAE,CAAC,IAAI,CACL,gGAAgG,CACjG,CAAA;QACD,EAAE,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAA;QAE9E,2CAA2C;QAE3C,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;KAYP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CACL,yFAAyF,CAC1F,CAAA;QAED,2BAA2B;QAE3B,EAAE,CAAC,IAAI,CAAC;;;;;;;KAOP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;KAYP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CACL,2GAA2G,CAC5G,CAAA;QAED,sBAAsB;QAEtB,EAAE,CAAC,IAAI,CAAC;;;;;;;;KAQP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC;;;;;KAKP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;IACpE,CAAC;CACF,CAAA"}

package/dist/migrations/v002-auth-tables.d.ts

@@ -0,0 +1,9 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V002: Auth tables — users and refresh tokens.
+ *
+ * Users store identity, roles, and OIDC provider linkage.
+ * Refresh tokens are stored as SHA-256 hashes with expiry.
+ */
+export declare const v002AuthTables: SqliteMigration;
+//# sourceMappingURL=v002-auth-tables.d.ts.map

package/dist/migrations/v002-auth-tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v002-auth-tables.d.ts","sourceRoot":"","sources":["../../src/migrations/v002-auth-tables.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,eAiC5B,CAAA"}

package/dist/migrations/v002-auth-tables.js

@@ -0,0 +1,38 @@
+/**
+ * V002: Auth tables — users and refresh tokens.
+ *
+ * Users store identity, roles, and OIDC provider linkage.
+ * Refresh tokens are stored as SHA-256 hashes with expiry.
+ */
+export const v002AuthTables = {
+    version: 2,
+    name: 'auth_tables',
+    apply: (db) => {
+        db.exec(`
+      CREATE TABLE users (
+        id TEXT PRIMARY KEY,
+        email TEXT UNIQUE,
+        name TEXT,
+        roles TEXT NOT NULL DEFAULT '["viewer"]',
+        oidc_subject TEXT,
+        oidc_issuer TEXT,
+        is_active INTEGER NOT NULL DEFAULT 1,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+        db.exec('CREATE UNIQUE INDEX idx_users_oidc ON users(oidc_issuer, oidc_subject)');
+        db.exec(`
+      CREATE TABLE refresh_tokens (
+        id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        token_hash TEXT NOT NULL UNIQUE,
+        expires_at TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+        db.exec('CREATE INDEX idx_refresh_user ON refresh_tokens(user_id)');
+        db.exec('CREATE INDEX idx_refresh_expires ON refresh_tokens(expires_at)');
+    },
+};
+//# sourceMappingURL=v002-auth-tables.js.map

package/dist/migrations/v002-auth-tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v002-auth-tables.js","sourceRoot":"","sources":["../../src/migrations/v002-auth-tables.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;KAYP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAA;QAEjF,EAAE,CAAC,IAAI,CAAC;;;;;;;;KAQP,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAA;QACnE,EAAE,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAA;IAC3E,CAAC;CACF,CAAA"}

package/dist/migrations/v003-user-permissions.d.ts

@@ -0,0 +1,9 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V003: Per-collection permission overrides.
+ *
+ * Allows a user to have a different role for specific collections.
+ * E.g., viewer globally but editor for the 'blog' collection.
+ */
+export declare const v003UserPermissions: SqliteMigration;
+//# sourceMappingURL=v003-user-permissions.d.ts.map

package/dist/migrations/v003-user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v003-user-permissions.d.ts","sourceRoot":"","sources":["../../src/migrations/v003-user-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,eAajC,CAAA"}

package/dist/migrations/v003-user-permissions.js

@@ -0,0 +1,21 @@
+/**
+ * V003: Per-collection permission overrides.
+ *
+ * Allows a user to have a different role for specific collections.
+ * E.g., viewer globally but editor for the 'blog' collection.
+ */
+export const v003UserPermissions = {
+    version: 3,
+    name: 'user_permissions',
+    apply: (db) => {
+        db.exec(`
+      CREATE TABLE user_permissions (
+        user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        collection TEXT NOT NULL,
+        role TEXT NOT NULL,
+        PRIMARY KEY (user_id, collection)
+      )
+    `);
+    },
+};
+//# sourceMappingURL=v003-user-permissions.js.map

package/dist/migrations/v003-user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v003-user-permissions.js","sourceRoot":"","sources":["../../src/migrations/v003-user-permissions.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,EAAE,CAAC,IAAI,CAAC;;;;;;;KAOP,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist/migrations/v004-media-hotspot.d.ts

@@ -0,0 +1,14 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V004: Add hotspot column to media table.
+ *
+ * Stores a JSON-encoded hotspot (center + ellipse) for adaptive
+ * aspect-ratio cropping. NULL means no hotspot defined.
+ *
+ * It ran before the `media` table was part of the migrated schema, so it is a
+ * no-op when the table is missing. It stays because applied migrations form
+ * the numbered ledger (the checksum covers only `version:name`); v011 creates
+ * `media` with the hotspot column.
+ */
+export declare const v004MediaHotspot: SqliteMigration;
+//# sourceMappingURL=v004-media-hotspot.d.ts.map

package/dist/migrations/v004-media-hotspot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v004-media-hotspot.d.ts","sourceRoot":"","sources":["../../src/migrations/v004-media-hotspot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,EAAE,eAS9B,CAAA"}

package/dist/migrations/v004-media-hotspot.js

@@ -0,0 +1,24 @@
+/**
+ * V004: Add hotspot column to media table.
+ *
+ * Stores a JSON-encoded hotspot (center + ellipse) for adaptive
+ * aspect-ratio cropping. NULL means no hotspot defined.
+ *
+ * It ran before the `media` table was part of the migrated schema, so it is a
+ * no-op when the table is missing. It stays because applied migrations form
+ * the numbered ledger (the checksum covers only `version:name`); v011 creates
+ * `media` with the hotspot column.
+ */
+export const v004MediaHotspot = {
+    version: 4,
+    name: 'media_hotspot',
+    apply: (db) => {
+        const columns = db.pragma('table_info(media)');
+        if (columns.length === 0)
+            return;
+        if (columns.some((c) => c.name === 'hotspot'))
+            return;
+        db.exec('ALTER TABLE media ADD COLUMN hotspot TEXT DEFAULT NULL');
+    },
+};
+//# sourceMappingURL=v004-media-hotspot.js.map

package/dist/migrations/v004-media-hotspot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v004-media-hotspot.js","sourceRoot":"","sources":["../../src/migrations/v004-media-hotspot.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAA4B,CAAA;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAChC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;YAAE,OAAM;QACrD,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;IACnE,CAAC;CACF,CAAA"}

package/dist/migrations/v005-content-locks.d.ts

@@ -0,0 +1,9 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V005: Advisory content locks.
+ *
+ * Ephemeral locks for preventing concurrent editing.
+ * 5-minute lease, renewed by Studio heartbeat.
+ */
+export declare const v005ContentLocks: SqliteMigration;
+//# sourceMappingURL=v005-content-locks.d.ts.map

package/dist/migrations/v005-content-locks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v005-content-locks.d.ts","sourceRoot":"","sources":["../../src/migrations/v005-content-locks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,eAgB9B,CAAA"}

package/dist/migrations/v005-content-locks.js

@@ -0,0 +1,24 @@
+/**
+ * V005: Advisory content locks.
+ *
+ * Ephemeral locks for preventing concurrent editing.
+ * 5-minute lease, renewed by Studio heartbeat.
+ */
+export const v005ContentLocks = {
+    version: 5,
+    name: 'content_locks',
+    apply: (db) => {
+        db.exec(`
+      CREATE TABLE content_locks (
+        collection TEXT NOT NULL,
+        slug TEXT NOT NULL,
+        locale TEXT NOT NULL DEFAULT 'en',
+        locked_by TEXT NOT NULL,
+        locked_at TEXT NOT NULL DEFAULT (datetime('now')),
+        expires_at TEXT NOT NULL,
+        PRIMARY KEY (collection, slug, locale)
+      )
+    `);
+    },
+};
+//# sourceMappingURL=v005-content-locks.js.map

package/dist/migrations/v005-content-locks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v005-content-locks.js","sourceRoot":"","sources":["../../src/migrations/v005-content-locks.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;KAUP,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist/migrations/v006-webhook-deliveries.d.ts

@@ -0,0 +1,6 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V006: Webhook delivery log with retry support.
+ */
+export declare const v006WebhookDeliveries: SqliteMigration;
+//# sourceMappingURL=v006-webhook-deliveries.d.ts.map

package/dist/migrations/v006-webhook-deliveries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v006-webhook-deliveries.d.ts","sourceRoot":"","sources":["../../src/migrations/v006-webhook-deliveries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,eAqBnC,CAAA"}

package/dist/migrations/v006-webhook-deliveries.js

@@ -0,0 +1,24 @@
+/**
+ * V006: Webhook delivery log with retry support.
+ */
+export const v006WebhookDeliveries = {
+    version: 6,
+    name: 'webhook_deliveries',
+    apply: (db) => {
+        db.exec(`
+      CREATE TABLE webhook_deliveries (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        webhook_url TEXT NOT NULL,
+        event TEXT NOT NULL,
+        payload TEXT NOT NULL,
+        status INTEGER,
+        attempts INTEGER NOT NULL DEFAULT 0,
+        next_retry_at TEXT,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        delivered_at TEXT
+      )
+    `);
+        db.exec('CREATE INDEX idx_webhook_pending ON webhook_deliveries(next_retry_at) WHERE delivered_at IS NULL AND attempts < 5');
+    },
+};
+//# sourceMappingURL=v006-webhook-deliveries.js.map

package/dist/migrations/v006-webhook-deliveries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v006-webhook-deliveries.js","sourceRoot":"","sources":["../../src/migrations/v006-webhook-deliveries.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAoB;IACpD,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;KAYP,CAAC,CAAA;QACF,EAAE,CAAC,IAAI,CACL,mHAAmH,CACpH,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/migrations/v007-media-folders.d.ts

@@ -0,0 +1,10 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V007: Media folders — hierarchical folder structure for media organization.
+ *
+ * Replaces the flat `folder` TEXT column on media with a proper
+ * `media_folders` table supporting parent-child nesting.
+ * The media table's `folder` column now stores a folder ID (FK).
+ */
+export declare const v007MediaFolders: SqliteMigration;
+//# sourceMappingURL=v007-media-folders.d.ts.map

package/dist/migrations/v007-media-folders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v007-media-folders.d.ts","sourceRoot":"","sources":["../../src/migrations/v007-media-folders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,eAc9B,CAAA"}

package/dist/migrations/v007-media-folders.js

@@ -0,0 +1,23 @@
+/**
+ * V007: Media folders — hierarchical folder structure for media organization.
+ *
+ * Replaces the flat `folder` TEXT column on media with a proper
+ * `media_folders` table supporting parent-child nesting.
+ * The media table's `folder` column now stores a folder ID (FK).
+ */
+export const v007MediaFolders = {
+    version: 7,
+    name: 'media_folders',
+    apply: (db) => {
+        db.exec(`
+      CREATE TABLE media_folders (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        parent_id TEXT REFERENCES media_folders(id),
+        created_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+        db.exec('CREATE INDEX idx_media_folders_parent ON media_folders(parent_id)');
+    },
+};
+//# sourceMappingURL=v007-media-folders.js.map

package/dist/migrations/v007-media-folders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v007-media-folders.js","sourceRoot":"","sources":["../../src/migrations/v007-media-folders.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,EAAE,CAAC,IAAI,CAAC;;;;;;;KAOP,CAAC,CAAA;QACF,EAAE,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAA;IAC9E,CAAC;CACF,CAAA"}

package/dist/migrations/v008-site-settings.d.ts

@@ -0,0 +1,9 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V008: Site settings — runtime-configurable key-value settings.
+ *
+ * Used for locale configuration and other admin-editable site settings
+ * that shouldn't require a code deploy to change.
+ */
+export declare const v008SiteSettings: SqliteMigration;
+//# sourceMappingURL=v008-site-settings.d.ts.map

package/dist/migrations/v008-site-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v008-site-settings.d.ts","sourceRoot":"","sources":["../../src/migrations/v008-site-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,eAY9B,CAAA"}

package/dist/migrations/v008-site-settings.js

@@ -0,0 +1,20 @@
+/**
+ * V008: Site settings — runtime-configurable key-value settings.
+ *
+ * Used for locale configuration and other admin-editable site settings
+ * that shouldn't require a code deploy to change.
+ */
+export const v008SiteSettings = {
+    version: 8,
+    name: 'site_settings',
+    apply: (db) => {
+        db.exec(`
+      CREATE TABLE site_settings (
+        key TEXT PRIMARY KEY,
+        value TEXT NOT NULL,
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+    },
+};
+//# sourceMappingURL=v008-site-settings.js.map

package/dist/migrations/v008-site-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v008-site-settings.js","sourceRoot":"","sources":["../../src/migrations/v008-site-settings.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACZ,EAAE,CAAC,IAAI,CAAC;;;;;;KAMP,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist/migrations/v009-seo-config.d.ts

@@ -0,0 +1,15 @@
+import type { SqliteMigration } from '../migration-runner.js';
+/**
+ * V009: SEO configuration — structured entity graph per site, collection,
+ * document, or route.
+ *
+ * Stores a single `config` JSON column holding a `SeoConfigData` object
+ * with an ordered entity array and optional field-mapping overrides.
+ * Four scopes:
+ * - site: global business identity and site-level entities
+ * - collection: default archetype per content collection (primary)
+ * - route: URL-pattern override (optional, advanced)
+ * - document: per-page override
+ */
+export declare const v009SeoConfig: SqliteMigration;
+//# sourceMappingURL=v009-seo-config.d.ts.map

package/dist/migrations/v009-seo-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v009-seo-config.d.ts","sourceRoot":"","sources":["../../src/migrations/v009-seo-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,EAAE,eAe3B,CAAA"}