@kywi-software/core 0.13.0 → 0.15.0

package/dist/schema/mysql-tables.js

@@ -1,5 +1,33 @@
 import { randomUUID } from 'node:crypto';
-import { mysqlTable, varchar, text, int, boolean, datetime, json, decimal, unique, } from 'drizzle-orm/mysql-core';
+import { sql } from 'drizzle-orm';
+import { mysqlTable, varchar, text, int, boolean, datetime, json, decimal, index, primaryKey, unique, check, } from 'drizzle-orm/mysql-core';
+/**
+ * MySQL twins of every Postgres table in this package (kywi-cms#75).
+ *
+ * MySQL is a supported deployment target, not a Postgres subset: every
+ * `pgTable` exported from `schema/` (plus `audiences/` and `experiments/`) has
+ * a twin here with the same table name, columns, nullability and defaults.
+ * `schema/__tests__/mysql-parity.test.ts` enforces that programmatically —
+ * add a pgTable without a twin and it fails.
+ *
+ * Where a Postgres construct has no MySQL equivalent, the twin says so in a
+ * comment and takes the closest expressible shape. The recurring cases:
+ *
+ * - **`uuid` → `varchar(36)`.** MySQL has no uuid type.
+ * - **`timestamptz` → `datetime(3)`.** MySQL's `timestamp` is 2038-bounded and
+ *   auto-updating; `datetime` with millisecond precision is the faithful twin.
+ *   `defaultNow()` becomes `DEFAULT CURRENT_TIMESTAMP(3)` ({@link mysqlNow}).
+ * - **`jsonb` → `json`.** No jsonb operator classes, so no GIN-equivalent
+ *   indexing, and a JSON column cannot take a *literal* DEFAULT — see
+ *   {@link mysqlJsonDefault}.
+ * - **`text` → `varchar(n)` when the column is keyed, indexed or defaulted.**
+ *   MySQL cannot use TEXT as a primary key, cannot index it without a prefix
+ *   length, and cannot give it a DEFAULT. Every such conversion is marked.
+ * - **Partial (`WHERE …`) unique indexes have no MySQL equivalent.** The one
+ *   place Kywi uses them — `kywi_content_permissions` — falls back to plain
+ *   lookup indexes plus the app-level dedupe already in the migrate path; see
+ *   the comment on {@link kywiContentPermissionsMysql} and docs/hosting.md.
+ */
 // ── Helper: UUID primary key for MySQL ──────────────────────────────────────
 function mysqlUuidPk() {
     return varchar({ length: 36 }).primaryKey().$defaultFn(() => randomUUID());
@@ -10,16 +38,42 @@ function mysqlUuid(name) {
 function mysqlTs(name) {
     return datetime(name, { fsp: 3 });
 }
+/**
+ * The MySQL twin of Postgres `defaultNow()`.
+ *
+ * drizzle's mysql-core exposes `.defaultNow()` only on `timestamp`, and these
+ * twins deliberately use `datetime` (see the module doc). `DEFAULT
+ * CURRENT_TIMESTAMP(3)` is what `defaultNow()` compiles to for a `datetime(3)`
+ * column, and MySQL has accepted it on DATETIME since 5.6.5.
+ *
+ * Returns a fresh `SQL` each call so no two columns share one node.
+ */
+function mysqlNow() {
+    return sql `CURRENT_TIMESTAMP(3)`;
+}
+/**
+ * The MySQL twin of a Postgres `jsonb(...).default([])`.
+ *
+ * MySQL rejects a literal DEFAULT on a JSON column outright; since 8.0.13 it
+ * accepts a *parenthesised expression* default instead, which is what this
+ * emits. On MySQL 8.0.12 and older there is no way to express the default at
+ * all and the column has to be written explicitly by the caller — the query
+ * layer already does, so the practical effect is limited to hand-written
+ * inserts. Documented in docs/hosting.md.
+ */
+function mysqlJsonDefault(literal) {
+    return sql.raw(`('${literal.replace(/'/g, "''")}')`);
+}
 // ── kywiSitesMysql ──────────────────────────────────────────────────────────
 export const kywiSitesMysql = mysqlTable('kywi_sites', {
     id: mysqlUuidPk(),
-    slug: varchar('slug', { length: 100 }).notNull(),
+    slug: varchar('slug', { length: 100 }).notNull().unique(),
     name: text('name').notNull(),
     domain: text('domain').notNull(),
     defaultLocale: varchar('default_locale', { length: 10 }).notNull().default('en'),
     theme: varchar('theme', { length: 100 }).notNull().default('default'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
 });
 // ── kywiContentMysql ────────────────────────────────────────────────────────
 export const kywiContentMysql = mysqlTable('kywi_content', {
@@ -27,7 +81,9 @@ export const kywiContentMysql = mysqlTable('kywi_content', {
     id: mysqlUuidPk(),
     siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
     parentId: mysqlUuid('parent_id'),
-    path: text('path').notNull(),
+    // pg: `text NOT NULL DEFAULT '/'`. MySQL cannot give a TEXT column a
+    // DEFAULT, so the twin narrows to varchar to keep the default.
+    path: varchar('path', { length: 1024 }).notNull().default('/'),
     depth: int('depth').notNull().default(0),
     sortOrder: int('sort_order').notNull().default(0),
     title: text('title').notNull(),
@@ -37,8 +93,8 @@ export const kywiContentMysql = mysqlTable('kywi_content', {
     baseType: varchar('base_type', { length: 50 }).notNull(),
     contentTypeName: varchar('content_type_name', { length: 100 }).notNull(),
     publishedAt: mysqlTs('published_at'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
     createdBy: mysqlUuid('created_by'),
     updatedBy: mysqlUuid('updated_by'),
     metaTitle: text('meta_title'),
@@ -56,7 +112,9 @@ export const kywiContentMysql = mysqlTable('kywi_content', {
     robotsFollow: varchar('robots_follow', { length: 10 }),
     deletedAt: mysqlTs('deleted_at'),
     featuredImageId: mysqlUuid('featured_image_id'),
-    featureInSection: text('feature_in_section'),
+    // pg: `text DEFAULT 'no'` — 'no' | 'yes' | ISO date string. Narrowed to
+    // varchar so MySQL can carry the default (an ISO-8601 stamp is 29 chars).
+    featureInSection: varchar('feature_in_section', { length: 64 }).default('no'),
     expiresAt: mysqlTs('expires_at'),
     excludeFromSearch: boolean('exclude_from_search').notNull().default(false),
     internalNotes: text('internal_notes'),
@@ -105,15 +163,18 @@ export const kywiContentMysql = mysqlTable('kywi_content', {
 // ── kywiUsersMysql ──────────────────────────────────────────────────────────
 export const kywiUsersMysql = mysqlTable('kywi_users', {
     id: mysqlUuidPk(),
-    email: text('email').notNull(),
+    // pg: `text NOT NULL UNIQUE`. MySQL cannot put a UNIQUE index on TEXT
+    // without a prefix length; 320 is the RFC 5321 maximum address length.
+    email: varchar('email', { length: 320 }).notNull().unique(),
     passwordHash: text('password_hash').notNull(),
-    firstName: text('first_name').notNull(),
-    lastName: text('last_name').notNull(),
+    // pg: `text NOT NULL DEFAULT ''` — narrowed so MySQL can carry the default.
+    firstName: varchar('first_name', { length: 255 }).notNull().default(''),
+    lastName: varchar('last_name', { length: 255 }).notNull().default(''),
     role: varchar('role', { length: 20 }).notNull().default('reader'),
     isActive: boolean('is_active').notNull().default(true),
     lastLoginAt: mysqlTs('last_login_at'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
     // ── Profile fields ──────────────────────────────────────────────────────────
     company: text('company'),
     jobTitle: text('job_title'),
@@ -123,6 +184,7 @@ export const kywiUsersMysql = mysqlTable('kywi_users', {
     bio: text('bio'),
     preferences: json('preferences'),
     passwordChangedAt: mysqlTs('password_changed_at'),
+    passwordResetRequired: boolean('password_reset_required').notNull().default(false),
 });
 // ── kywiGroupsMysql ─────────────────────────────────────────────────────────
 export const kywiGroupsMysql = mysqlTable('kywi_groups', {
@@ -131,7 +193,7 @@ export const kywiGroupsMysql = mysqlTable('kywi_groups', {
     name: text('name').notNull(),
     type: varchar('type', { length: 20 }).notNull().default('private'),
     defaultRole: varchar('default_role', { length: 20 }).notNull().default('reader'),
-    createdAt: mysqlTs('created_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
 });
 // ── kywiUserGroupsMysql ─────────────────────────────────────────────────────
 // #40: unique(userId, groupId) — see the matching note on kywiUserGroups in
@@ -148,9 +210,9 @@ export const kywiApiKeysMysql = mysqlTable('kywi_api_keys', {
     name: text('name').notNull(),
     keyHash: text('key_hash').notNull(),
     keyPrefix: varchar('key_prefix', { length: 12 }).notNull(),
-    scopes: json('scopes').notNull(),
+    scopes: json('scopes').notNull().default(mysqlJsonDefault('[]')),
     lastUsedAt: mysqlTs('last_used_at'),
-    createdAt: mysqlTs('created_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
 });
 // ── kywiSiteMembershipsMysql ────────────────────────────────────────────────
 // #40: unique(userId, siteId) — see the matching note on kywiSiteMemberships
@@ -160,8 +222,8 @@ export const kywiApiKeysMysql = mysqlTable('kywi_api_keys', {
 export const kywiSiteMembershipsMysql = mysqlTable('kywi_site_memberships', {
     userId: mysqlUuid('user_id').notNull().references(() => kywiUsersMysql.id, { onDelete: 'cascade' }),
     siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id, { onDelete: 'cascade' }),
-    groups: json('groups').notNull(),
-    createdAt: mysqlTs('created_at').notNull(),
+    groups: json('groups').notNull().default(mysqlJsonDefault('[]')),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
 }, (t) => [unique().on(t.userId, t.siteId)]);
 // ── kywiMediaMysql ──────────────────────────────────────────────────────────
 export const kywiMediaMysql = mysqlTable('kywi_media', {
@@ -180,8 +242,8 @@ export const kywiMediaMysql = mysqlTable('kywi_media', {
     uploadedBy: mysqlUuid('uploaded_by'),
     storageKey: text('storage_key').notNull(),
     deletedAt: mysqlTs('deleted_at'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
 });
 // ── kywiFormSubmissionsMysql ────────────────────────────────────────────────
 export const kywiFormSubmissionsMysql = mysqlTable('kywi_form_submissions', {
@@ -189,7 +251,7 @@ export const kywiFormSubmissionsMysql = mysqlTable('kywi_form_submissions', {
     siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
     formContentId: mysqlUuid('form_content_id').notNull(),
     data: json('data').notNull(),
-    submittedAt: mysqlTs('submitted_at').notNull(),
+    submittedAt: mysqlTs('submitted_at').notNull().default(mysqlNow()),
     ipAddress: varchar('ip_address', { length: 45 }),
     status: varchar('status', { length: 20 }).notNull().default('new'),
 });
@@ -203,7 +265,7 @@ export const kywiContentVersionsMysql = mysqlTable('kywi_content_versions', {
     changeNote: text('change_note'),
     status: varchar('status', { length: 20 }).notNull(),
     createdBy: mysqlUuid('created_by'),
-    createdAt: mysqlTs('created_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
 });
 // ── kywiCategoriesMysql ─────────────────────────────────────────────────────
 export const kywiCategoriesMysql = mysqlTable('kywi_categories', {
@@ -217,8 +279,8 @@ export const kywiCategoriesMysql = mysqlTable('kywi_categories', {
     isActive: boolean('is_active').notNull().default(true),
     isInterestGroup: boolean('is_interest_group').notNull().default(false),
     notes: text('notes'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
 });
 // ── kywiTagsMysql ───────────────────────────────────────────────────────────
 export const kywiTagsMysql = mysqlTable('kywi_tags', {
@@ -228,7 +290,7 @@ export const kywiTagsMysql = mysqlTable('kywi_tags', {
     label: text('label').notNull(),
     usageCount: int('usage_count').notNull().default(0),
     groupName: varchar('group_name', { length: 100 }),
-    createdAt: mysqlTs('created_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
 });
 // ── kywiCommentsMysql ───────────────────────────────────────────────────────
 export const kywiCommentsMysql = mysqlTable('kywi_comments', {
@@ -241,8 +303,8 @@ export const kywiCommentsMysql = mysqlTable('kywi_comments', {
     authorEmail: text('author_email'),
     body: text('body').notNull(),
     status: varchar('status', { length: 20 }).notNull().default('pending'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
 });
 // ── kywiExperimentsMysql ─────────────────────────────────────────────────────
 export const kywiExperimentsMysql = mysqlTable('kywi_experiments', {
@@ -261,9 +323,12 @@ export const kywiExperimentsMysql = mysqlTable('kywi_experiments', {
     pausedAt: mysqlTs('paused_at'),
     completedAt: mysqlTs('completed_at'),
     createdBy: mysqlUuid('created_by'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
-});
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+}, (t) => [
+    index('kywi_experiments_site_idx').on(t.siteId),
+    index('kywi_experiments_status_idx').on(t.status),
+]);
 // ── kywiExperimentVariantsMysql ──────────────────────────────────────────────
 export const kywiExperimentVariantsMysql = mysqlTable('kywi_experiment_variants', {
     id: mysqlUuidPk(),
@@ -273,18 +338,25 @@ export const kywiExperimentVariantsMysql = mysqlTable('kywi_experiment_variants'
     isControl: boolean('is_control').notNull().default(false),
     variantKey: text('variant_key'),
     sortOrder: int('sort_order').notNull().default(0),
-    createdAt: mysqlTs('created_at').notNull(),
-});
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+}, (t) => [
+    index('kywi_experiment_variants_experiment_idx').on(t.experimentId),
+]);
 // ── kywiExperimentAssignmentsMysql ───────────────────────────────────────────
 export const kywiExperimentAssignmentsMysql = mysqlTable('kywi_experiment_assignments', {
     id: mysqlUuidPk(),
     experimentId: mysqlUuid('experiment_id').notNull().references(() => kywiExperimentsMysql.id),
     variantId: mysqlUuid('variant_id').notNull(),
     siteId: mysqlUuid('site_id').notNull(),
-    visitorId: text('visitor_id').notNull(),
-    assignedAt: mysqlTs('assigned_at').notNull(),
+    // pg: `text`, but it is half of a UNIQUE index here — MySQL cannot index TEXT
+    // without a prefix length, so the twin narrows to varchar.
+    visitorId: varchar('visitor_id', { length: 255 }).notNull(),
+    assignedAt: mysqlTs('assigned_at').notNull().default(mysqlNow()),
     exposedAt: mysqlTs('exposed_at'),
-});
+}, (t) => [
+    unique('kywi_experiment_assignments_exp_visitor_uniq').on(t.experimentId, t.visitorId),
+    index('kywi_experiment_assignments_exp_variant_idx').on(t.experimentId, t.variantId),
+]);
 // ── kywiExperimentConversionsMysql ───────────────────────────────────────────
 export const kywiExperimentConversionsMysql = mysqlTable('kywi_experiment_conversions', {
     id: mysqlUuidPk(),
@@ -294,8 +366,10 @@ export const kywiExperimentConversionsMysql = mysqlTable('kywi_experiment_conver
     visitorId: text('visitor_id').notNull(),
     goalType: text('goal_type').notNull(),
     metadata: json('metadata'),
-    occurredAt: mysqlTs('occurred_at').notNull(),
-});
+    occurredAt: mysqlTs('occurred_at').notNull().default(mysqlNow()),
+}, (t) => [
+    index('kywi_experiment_conversions_exp_variant_idx').on(t.experimentId, t.variantId),
+]);
 // ── kywiContentTypeFieldsMysql (hybrid schema engine — admin-added fields) ────
 export const kywiContentTypeFieldsMysql = mysqlTable('kywi_content_type_fields', {
     id: mysqlUuidPk(),
@@ -312,8 +386,8 @@ export const kywiContentTypeFieldsMysql = mysqlTable('kywi_content_type_fields',
     // 'list' fields set it.
     itemType: varchar('item_type', { length: 50 }),
     sortOrder: int('sort_order').notNull().default(0),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
 }, (t) => [unique().on(t.contentTypeName, t.name)]);
 // ── kywiContentTypesMysql (visual type designer — admin-created types) ────────
 export const kywiContentTypesMysql = mysqlTable('kywi_content_types', {
@@ -325,8 +399,8 @@ export const kywiContentTypesMysql = mysqlTable('kywi_content_types', {
     // Whether the Title field is required on this type (kywi-cms#12). Defaults
     // true — back-compat with every type created before this setting existed.
     titleRequired: boolean('title_required').notNull().default(true),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
 });
 // ── kywiMenusMysql (#110 — named owner-manageable navigation menus) ───────────
 export const kywiMenusMysql = mysqlTable('kywi_menus', {
@@ -334,8 +408,8 @@ export const kywiMenusMysql = mysqlTable('kywi_menus', {
     siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
     slug: varchar('slug', { length: 255 }).notNull(),
     name: text('name').notNull(),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
 }, (t) => [unique().on(t.siteId, t.slug)]);
 // ── kywiMenuItemsMysql (#110) ────────────────────────────────────────────────
 // See the Postgres twin in base.ts for the contentId-XOR-externalUrl rule (it
@@ -346,11 +420,512 @@ export const kywiMenuItemsMysql = mysqlTable('kywi_menu_items', {
     parentId: mysqlUuid('parent_id'),
     sortOrder: int('sort_order').notNull().default(0),
     label: text('label').notNull(),
-    contentId: mysqlUuid('content_id'),
+    kind: varchar('kind', { length: 20 }).notNull().default('link'),
+    contentId: mysqlUuid('content_id').references(() => kywiContentMysql.id, { onDelete: 'set null' }),
     externalUrl: text('external_url'),
     openInNewWindow: boolean('open_in_new_window').notNull().default(false),
     description: text('description'),
-    createdAt: mysqlTs('created_at').notNull(),
-    updatedAt: mysqlTs('updated_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+// ═════════════════════════════════════════════════════════════════════════════
+// Twins added by the #75 parity sweep. Ordered to mirror the Postgres modules:
+// base.ts, audiences/, webhooks.ts, extensions.ts, then the small per-feature
+// modules. Every one is asserted against its Postgres original by
+// __tests__/mysql-parity.test.ts.
+// ═════════════════════════════════════════════════════════════════════════════
+// ── base.ts ──────────────────────────────────────────────────────────────────
+export const kywiContentDisplayIntervalsMysql = mysqlTable('kywi_content_display_intervals', {
+    id: mysqlUuidPk(),
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    dayOfWeek: int('day_of_week'),
+    startTime: text('start_time').notNull(),
+    endTime: text('end_time').notNull(),
+    startDate: mysqlTs('start_date'),
+    endDate: mysqlTs('end_date'),
+});
+export const kywiFeedsMysql = mysqlTable('kywi_feeds', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    name: text('name').notNull(),
+    slug: varchar('slug', { length: 255 }).notNull(),
+    query: json('query').notNull(),
+    cacheTtl: int('cache_ttl'),
+    createdBy: mysqlUuid('created_by'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiFormSubmissionDraftsMysql = mysqlTable('kywi_form_submission_drafts', {
+    id: mysqlUuidPk(),
+    formContentId: mysqlUuid('form_content_id').notNull(),
+    token: varchar('token', { length: 64 }).notNull().unique(),
+    data: json('data').notNull(),
+    currentStep: int('current_step').notNull().default(0),
+    expiresAt: mysqlTs('expires_at').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiAuditLogMysql = mysqlTable('kywi_audit_log', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    action: varchar('action', { length: 30 }).notNull(),
+    fromStatus: varchar('from_status', { length: 20 }),
+    toStatus: varchar('to_status', { length: 20 }),
+    changedFields: json('changed_fields'),
+    userId: mysqlUuid('user_id').notNull(),
+    userEmail: text('user_email').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiContentCategoriesMysql = mysqlTable('kywi_content_categories', {
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    categoryId: mysqlUuid('category_id').notNull().references(() => kywiCategoriesMysql.id, { onDelete: 'cascade' }),
+    isFeatured: boolean('is_featured').notNull().default(false),
+    featuredUntil: mysqlTs('featured_until'),
+});
+export const kywiContentTagsMysql = mysqlTable('kywi_content_tags', {
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    tagId: mysqlUuid('tag_id').notNull().references(() => kywiTagsMysql.id, { onDelete: 'cascade' }),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+}, (t) => [primaryKey({ columns: [t.contentId, t.tagId] })]);
+export const kywiOAuthClientsMysql = mysqlTable('kywi_oauth_clients', {
+    id: mysqlUuidPk(),
+    clientId: varchar('client_id', { length: 64 }).notNull().unique(),
+    clientSecret: text('client_secret').notNull(),
+    name: text('name').notNull(),
+    scopes: json('scopes').notNull().default(mysqlJsonDefault('[]')),
+    redirectUris: json('redirect_uris').notNull().default(mysqlJsonDefault('[]')),
+    rateLimitPerMinute: int('rate_limit_per_minute').notNull().default(60),
+    createdBy: mysqlUuid('created_by'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiLoginStrikesMysql = mysqlTable('kywi_login_strikes', {
+    id: mysqlUuidPk(),
+    userId: text('user_id').notNull(),
+    ip: text('ip').notNull(),
+    attemptedAt: mysqlTs('attempted_at').notNull().default(mysqlNow()),
+});
+export const kywiMfaSecretsMysql = mysqlTable('kywi_mfa_secrets', {
+    id: mysqlUuidPk(),
+    // pg: `text NOT NULL UNIQUE`, holding a kywi_users.id. MySQL cannot index
+    // TEXT without a prefix length, so the twin narrows to the uuid width.
+    userId: varchar('user_id', { length: 36 }).notNull().unique(),
+    secret: text('secret').notNull(),
+    recoveryCodes: text('recovery_codes').notNull(),
+    enabledAt: mysqlTs('enabled_at'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiMagicLinkTokensMysql = mysqlTable('kywi_magic_link_tokens', {
+    id: mysqlUuidPk(),
+    userId: text('user_id').notNull(),
+    tokenHash: text('token_hash').notNull(),
+    expiresAt: mysqlTs('expires_at').notNull(),
+    usedAt: mysqlTs('used_at'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiChangesetsMysql = mysqlTable('kywi_changesets', {
+    id: mysqlUuidPk(),
+    siteId: text('site_id').notNull(),
+    name: text('name').notNull(),
+    description: text('description'),
+    // pg: `text NOT NULL DEFAULT 'open'` — narrowed so MySQL can carry the default.
+    status: varchar('status', { length: 20 }).notNull().default('open'),
+    scheduledPublishAt: mysqlTs('scheduled_publish_at'),
+    publishedAt: mysqlTs('published_at'),
+    publishedBy: text('published_by'),
+    createdBy: text('created_by').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiChangesetItemsMysql = mysqlTable('kywi_changeset_items', {
+    id: mysqlUuidPk(),
+    changesetId: text('changeset_id').notNull(),
+    contentId: text('content_id').notNull(),
+    versionId: text('version_id'),
+    action: text('action').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiChangesetAuditMysql = mysqlTable('kywi_changeset_audit', {
+    id: mysqlUuidPk(),
+    changesetId: text('changeset_id').notNull(),
+    siteId: text('site_id').notNull(),
+    action: varchar('action', { length: 20 }).notNull(),
+    userId: text('user_id').notNull(),
+    detail: json('detail'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiFilenameArchiveMysql = mysqlTable('kywi_filename_archive', {
+    id: mysqlUuidPk(),
+    siteId: text('site_id').notNull(),
+    oldPath: text('old_path').notNull(),
+    newPath: text('new_path').notNull(),
+    contentId: text('content_id').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiContentLocksMysql = mysqlTable('kywi_content_locks', {
+    // pg: `text PRIMARY KEY`. MySQL cannot use TEXT as a primary key, so the twin
+    // narrows to the uuid width the column actually holds.
+    contentId: varchar('content_id', { length: 36 }).primaryKey(),
+    userId: text('user_id').notNull(),
+    lockedAt: mysqlTs('locked_at').notNull().default(mysqlNow()),
+    expiresAt: mysqlTs('expires_at').notNull(),
+});
+export const kywiContentStatsMysql = mysqlTable('kywi_content_stats', {
+    // pg: `text PRIMARY KEY` — same TEXT-as-PK narrowing as kywi_content_locks.
+    contentId: varchar('content_id', { length: 36 }).primaryKey(),
+    views: int('views').notNull().default(0),
+    downloads: int('downloads').notNull().default(0),
+    commentCount: int('comment_count').notNull().default(0),
+    lastViewedAt: mysqlTs('last_viewed_at'),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiViewLogMysql = mysqlTable('kywi_view_log', {
+    id: mysqlUuidPk(),
+    contentId: text('content_id').notNull(),
+    visitorId: text('visitor_id'),
+    viewedAt: mysqlTs('viewed_at').notNull().default(mysqlNow()),
+});
+export const kywiSectionTemplatesMysql = mysqlTable('kywi_section_templates', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    name: text('name').notNull(),
+    category: varchar('category', { length: 100 }).notNull().default('general'),
+    definition: json('definition').notNull(),
+    createdBy: mysqlUuid('created_by'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiApprovalChainsMysql = mysqlTable('kywi_approval_chains', {
+    id: mysqlUuidPk(),
+    siteId: text('site_id').notNull(),
+    name: text('name').notNull(),
+    steps: json('steps').notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiApprovalActionsMysql = mysqlTable('kywi_approval_actions', {
+    id: mysqlUuidPk(),
+    chainId: text('chain_id').notNull(),
+    contentId: text('content_id').notNull(),
+    stepIndex: int('step_index').notNull(),
+    action: varchar('action', { length: 20 }).notNull(),
+    userId: text('user_id').notNull(),
+    comment: text('comment'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiAnalyticsEventsMysql = mysqlTable('kywi_analytics_events', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull(),
+    audienceId: mysqlUuid('audience_id').notNull(),
+    visitorId: text('visitor_id').notNull(),
+    // pg: `text` with an enum of 'matched' | 'impression' | 'click'. Postgres
+    // renders a text-with-enum column as plain text; varchar is the MySQL twin.
+    eventType: varchar('event_type', { length: 20 }).notNull(),
+    contentId: text('content_id'),
+    variantId: text('variant_id'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── audiences/schema.ts ──────────────────────────────────────────────────────
+export const kywiAudiencesMysql = mysqlTable('kywi_audiences', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    name: text('name').notNull(),
+    description: text('description'),
+    priority: int('priority').notNull(),
+    status: varchar('status', { length: 20 }).notNull().default('draft'),
+    scoreThreshold: int('score_threshold'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+}, (t) => [
+    index('kywi_audiences_site_idx').on(t.siteId),
+    unique('kywi_audiences_site_priority_uniq').on(t.siteId, t.priority),
+]);
+export const kywiConditionGroupsMysql = mysqlTable('kywi_condition_groups', {
+    id: mysqlUuidPk(),
+    audienceId: mysqlUuid('audience_id').notNull().references(() => kywiAudiencesMysql.id, { onDelete: 'cascade' }),
+    sortOrder: int('sort_order').notNull().default(0),
 });
+export const kywiConditionsMysql = mysqlTable('kywi_conditions', {
+    id: mysqlUuidPk(),
+    groupId: mysqlUuid('group_id').notNull().references(() => kywiConditionGroupsMysql.id, { onDelete: 'cascade' }),
+    type: varchar('type', { length: 20 }).notNull(),
+    signal: text('signal'),
+    operator: text('operator'),
+    value: json('value'),
+    // `trigger` is a MySQL reserved word; drizzle backtick-quotes every
+    // identifier it emits, so the column name needs no rename.
+    trigger: text('trigger'),
+    points: int('points'),
+    threshold: int('threshold'),
+    category: text('category'),
+    pattern: text('pattern'),
+    sortOrder: int('sort_order').notNull().default(0),
+});
+export const kywiSelfIdFieldsMysql = mysqlTable('kywi_selfid_fields', {
+    // pg: `text PRIMARY KEY` (a caller-supplied field key, not a uuid).
+    id: varchar('id', { length: 255 }).primaryKey(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    label: text('label').notNull(),
+    picklist: json('picklist').notNull(),
+    required: boolean('required').notNull().default(false),
+    sortOrder: int('sort_order').notNull().default(0),
+});
+export const kywiSelfIdWidgetConfigMysql = mysqlTable('kywi_selfid_widget_config', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    displayMode: varchar('display_mode', { length: 20 }).notNull().default('modal'),
+    trigger: json('trigger').notNull(),
+    headline: text('headline').notNull(),
+    subheadline: text('subheadline'),
+    fieldIds: json('field_ids').notNull(),
+    // pg: `text NOT NULL DEFAULT 'Submit'` — narrowed to carry the default.
+    submitLabel: varchar('submit_label', { length: 100 }).notNull().default('Submit'),
+    skipLabel: text('skip_label'),
+    frequency: varchar('frequency', { length: 20 }).notNull().default('once_visitor'),
+});
+export const kywiPreviewTokenDenylistMysql = mysqlTable('kywi_preview_token_denylist', {
+    // pg: `text PRIMARY KEY` — a JWT jti.
+    jti: varchar('jti', { length: 255 }).primaryKey(),
+    audienceId: mysqlUuid('audience_id').notNull(),
+    expiresAt: mysqlTs('expires_at').notNull(),
+    revokedAt: mysqlTs('revoked_at').notNull().default(mysqlNow()),
+});
+export const kywiAdapterIdentityStoreMysql = mysqlTable('kywi_adapter_identity_store', {
+    id: mysqlUuidPk(),
+    // pg: `text`, but both columns form a UNIQUE index — narrowed so MySQL can
+    // index them without a prefix length.
+    visitorId: varchar('visitor_id', { length: 255 }).notNull(),
+    adapterId: varchar('adapter_id', { length: 100 }).notNull(),
+    payload: json('payload').notNull(),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+}, (t) => [
+    unique('kywi_adapter_identity_visitor_adapter_uniq').on(t.visitorId, t.adapterId),
+]);
+// ── webhooks.ts ──────────────────────────────────────────────────────────────
+export const kywiWebhookEndpointsMysql = mysqlTable('kywi_webhook_endpoints', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    url: text('url').notNull(),
+    secret: text('secret').notNull(),
+    events: json('events').notNull().default(mysqlJsonDefault('[]')),
+    isActive: boolean('is_active').notNull().default(true),
+    createdBy: mysqlUuid('created_by'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiWebhookDeliveriesMysql = mysqlTable('kywi_webhook_deliveries', {
+    id: mysqlUuidPk(),
+    endpointId: mysqlUuid('endpoint_id').notNull().references(() => kywiWebhookEndpointsMysql.id, { onDelete: 'cascade' }),
+    event: varchar('event', { length: 100 }).notNull(),
+    payload: json('payload').notNull(),
+    status: varchar('status', { length: 20 }).notNull().default('pending'),
+    httpStatus: int('http_status'),
+    responseBody: text('response_body'),
+    attempts: int('attempts').notNull().default(0),
+    nextRetryAt: mysqlTs('next_retry_at'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── extensions.ts ────────────────────────────────────────────────────────────
+export const kywiExtendSubtypesMysql = mysqlTable('kywi_extend_subtypes', {
+    id: mysqlUuidPk(),
+    name: varchar('name', { length: 100 }).notNull(),
+    baseContentType: varchar('base_content_type', { length: 100 }).notNull(),
+    description: text('description'),
+    isActive: boolean('is_active').notNull().default(true),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiExtendSetsMysql = mysqlTable('kywi_extend_sets', {
+    id: mysqlUuidPk(),
+    subtypeId: mysqlUuid('subtype_id').notNull().references(() => kywiExtendSubtypesMysql.id, { onDelete: 'cascade' }),
+    name: varchar('name', { length: 100 }).notNull(),
+    label: varchar('label', { length: 200 }).notNull(),
+    sortOrder: int('sort_order').notNull().default(0),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiExtendAttributesMysql = mysqlTable('kywi_extend_attributes', {
+    id: mysqlUuidPk(),
+    setId: mysqlUuid('set_id').notNull().references(() => kywiExtendSetsMysql.id, { onDelete: 'cascade' }),
+    name: varchar('name', { length: 100 }).notNull(),
+    label: varchar('label', { length: 200 }).notNull(),
+    type: varchar('type', { length: 50 }).notNull(),
+    defaultValue: text('default_value'),
+    validation: json('validation'),
+    sortOrder: int('sort_order').notNull().default(0),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+export const kywiExtendDataMysql = mysqlTable('kywi_extend_data', {
+    id: mysqlUuidPk(),
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    attributeId: mysqlUuid('attribute_id').notNull().references(() => kywiExtendAttributesMysql.id, { onDelete: 'cascade' }),
+    stringValue: text('string_value'),
+    numberValue: decimal('number_value', { precision: 20, scale: 6 }),
+    dateValue: mysqlTs('date_value'),
+    booleanValue: boolean('boolean_value'),
+    jsonValue: json('json_value'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+export const kywiExtendRelatedSetsMysql = mysqlTable('kywi_extend_related_sets', {
+    id: mysqlUuidPk(),
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    setId: mysqlUuid('set_id').notNull().references(() => kywiExtendSetsMysql.id, { onDelete: 'cascade' }),
+    data: json('data').notNull(),
+    sortOrder: int('sort_order').notNull().default(0),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── reminders.ts ─────────────────────────────────────────────────────────────
+export const kywiRemindersMysql = mysqlTable('kywi_reminders', {
+    id: mysqlUuidPk(),
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    userId: mysqlUuid('user_id').notNull().references(() => kywiUsersMysql.id, { onDelete: 'cascade' }),
+    message: text('message').notNull(),
+    remindAt: mysqlTs('remind_at').notNull(),
+    dismissed: boolean('dismissed').notNull().default(false),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── components.ts ────────────────────────────────────────────────────────────
+export const kywiComponentsMysql = mysqlTable('kywi_components', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    name: text('name').notNull(),
+    description: text('description'),
+    // Widened with its Postgres twin (kywi-cms#170) — `'moduleVariantContainer'`
+    // is 22 characters and did not fit the old 20.
+    type: varchar('type', { length: 40 }).notNull(),
+    moduleType: varchar('module_type', { length: 100 }),
+    definition: json('definition').notNull(),
+    createdBy: mysqlUuid('created_by'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+/**
+ * Holder-polymorphic since kywi-cms#156 — see the Postgres table's doc.
+ *
+ * The two placement indexes are the one place the twin reads differently from
+ * Postgres and means the same thing. Postgres declares them PARTIAL (`WHERE
+ * content_id IS NOT NULL`); MySQL has no partial indexes, but it does not need
+ * one here: a UNIQUE index ignores rows whose indexed columns include a NULL in
+ * both engines, so a plain `UNIQUE (component_id, content_id, node_id)` already
+ * constrains exactly the content rows and lets every blueprint row (content_id
+ * NULL) through — which is precisely what the partial index says out loud. This
+ * is NOT the `kywi_content_permissions` situation, where uniqueness genuinely
+ * could not be expressed and fell back to the application.
+ *
+ * The one-holder CHECK — which also ties `holder_kind` to whichever id column
+ * is set — is expressible directly: MySQL 8.0.16+ enforces table CHECK
+ * constraints. Older MySQL parses and ignores it, so on those versions the
+ * invariant rests on the query layer, which never writes another shape.
+ */
+export const kywiComponentInstancesMysql = mysqlTable('kywi_component_instances', {
+    id: mysqlUuidPk(),
+    componentId: mysqlUuid('component_id').notNull().references(() => kywiComponentsMysql.id, { onDelete: 'cascade' }),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id),
+    holderKind: varchar('holder_kind', { length: 20 }).notNull().default('content'),
+    contentId: mysqlUuid('content_id').references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    blueprintId: mysqlUuid('blueprint_id').references(() => kywiSectionTemplatesMysql.id, { onDelete: 'cascade' }),
+    contentType: varchar('content_type', { length: 100 }).notNull(),
+    // pg: `text`, but it is the third column of the placement UNIQUE index —
+    // MySQL cannot index TEXT without a prefix length, so the twin narrows it.
+    nodeId: varchar('node_id', { length: 255 }).notNull(),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+}, (t) => [
+    unique('kywi_component_instances_placement').on(t.componentId, t.contentId, t.nodeId),
+    unique('kywi_component_instances_blueprint_placement').on(t.componentId, t.blueprintId, t.nodeId),
+    index('kywi_component_instances_by_content').on(t.contentId),
+    index('kywi_component_instances_by_blueprint').on(t.blueprintId),
+    check('kywi_component_instances_one_holder', sql `(${t.holderKind} = 'content' and ${t.contentId} is not null and ${t.blueprintId} is null)
+      or (${t.holderKind} = 'blueprint' and ${t.blueprintId} is not null and ${t.contentId} is null)`),
+]);
+// ── comment-subscriptions.ts ─────────────────────────────────────────────────
+export const kywiCommentSubscriptionsMysql = mysqlTable('kywi_comment_subscriptions', {
+    id: mysqlUuidPk(),
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    email: text('email').notNull(),
+    userId: mysqlUuid('user_id').references(() => kywiUsersMysql.id, { onDelete: 'cascade' }),
+    isActive: boolean('is_active').notNull().default(true),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── content-permissions.ts ───────────────────────────────────────────────────
+/**
+ * The one place a Postgres construct has **no** MySQL equivalent.
+ *
+ * The Postgres table carries two PARTIAL unique indexes — `unique(content_id,
+ * user_id, action) WHERE group_id IS NULL` and its group-side mirror — because
+ * a grant row always has exactly one of user_id/group_id set, and `NULL !=
+ * NULL` for uniqueness in both dialects, so a plain four-column unique cannot
+ * express "no duplicate grant".
+ *
+ * MySQL has no partial indexes. The twin therefore declares the same two column
+ * tuples as PLAIN (non-unique) indexes: they still serve the read path that
+ * matters — `access-control.ts`'s permission check and the permissions-tab
+ * listing — but uniqueness is left to the application:
+ *
+ *  - `grantContentPermission` (db/content-permission-queries.ts) checks for an
+ *    existing identical grant before inserting, and
+ *  - `kywi migrate` runs `dedupeContentPermissionRows` for existing databases.
+ *
+ * A MySQL 8 alternative would be a unique index over generated columns
+ * (`COALESCE(user_id, '-')`), which drizzle's mysql-core cannot declare today;
+ * it is recorded as a follow-up rather than hand-written DDL here.
+ */
+export const kywiContentPermissionsMysql = mysqlTable('kywi_content_permissions', {
+    id: mysqlUuidPk(),
+    contentId: mysqlUuid('content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    userId: mysqlUuid('user_id').references(() => kywiUsersMysql.id, { onDelete: 'cascade' }),
+    groupId: mysqlUuid('group_id').references(() => kywiGroupsMysql.id, { onDelete: 'cascade' }),
+    action: varchar('action', { length: 20 }).notNull(),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+}, (t) => [
+    index('kywi_content_permissions_user_grant').on(t.contentId, t.userId, t.action),
+    index('kywi_content_permissions_group_grant').on(t.contentId, t.groupId, t.action),
+]);
+// ── content-references.ts ────────────────────────────────────────────────────
+export const kywiContentReferencesMysql = mysqlTable('kywi_content_references', {
+    id: mysqlUuidPk(),
+    sourceSiteId: mysqlUuid('source_site_id').notNull().references(() => kywiSitesMysql.id),
+    sourceContentId: mysqlUuid('source_content_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    targetSiteId: mysqlUuid('target_site_id').notNull().references(() => kywiSitesMysql.id),
+    targetContentId: mysqlUuid('target_content_id').notNull().references(() => kywiContentMysql.id),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── relationships.ts ─────────────────────────────────────────────────────────
+export const kywiContentRelationshipsMysql = mysqlTable('kywi_content_relationships', {
+    id: mysqlUuidPk(),
+    sourceId: mysqlUuid('source_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    targetId: mysqlUuid('target_id').notNull().references(() => kywiContentMysql.id, { onDelete: 'cascade' }),
+    type: varchar('type', { length: 50 }).notNull().default('related'),
+    sortOrder: int('sort_order').notNull().default(0),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── password-reset-tokens.ts ─────────────────────────────────────────────────
+export const kywiPasswordResetTokensMysql = mysqlTable('kywi_password_reset_tokens', {
+    id: mysqlUuidPk(),
+    userId: mysqlUuid('user_id').notNull().references(() => kywiUsersMysql.id, { onDelete: 'cascade' }),
+    tokenHash: text('token_hash').notNull(),
+    expiresAt: mysqlTs('expires_at').notNull(),
+    usedAt: mysqlTs('used_at'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+});
+// ── site-plugins.ts ──────────────────────────────────────────────────────────
+export const kywiSitePluginsMysql = mysqlTable('kywi_site_plugins', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id, { onDelete: 'cascade' }),
+    pluginPackage: varchar('plugin_package', { length: 200 }).notNull(),
+    isActive: boolean('is_active').notNull().default(true),
+    config: json('config'),
+    createdAt: mysqlTs('created_at').notNull().default(mysqlNow()),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+});
+// ── site-settings.ts ─────────────────────────────────────────────────────────
+export const kywiSiteSettingsMysql = mysqlTable('kywi_site_settings', {
+    id: mysqlUuidPk(),
+    siteId: mysqlUuid('site_id').notNull().references(() => kywiSitesMysql.id, { onDelete: 'cascade' }),
+    // `key` is a MySQL reserved word; drizzle backtick-quotes identifiers.
+    key: varchar('key', { length: 100 }).notNull(),
+    value: json('value').notNull(),
+    updatedAt: mysqlTs('updated_at').notNull().default(mysqlNow()),
+}, (t) => [
+    unique('kywi_site_settings_site_id_key_unique').on(t.siteId, t.key),
+]);
 //# sourceMappingURL=mysql-tables.js.map