@nextblock-cms/db 0.16.1 → 0.16.3

package/supabase/migrations/00000000000016_product_revisions_and_revision_baseline.sql

@@ -1,310 +1,310 @@
--- 00000000000016_product_revisions_and_revision_baseline.sql
---
--- Revision History, part 1 of 2 (schema). The application-side rewrite lives in
--- apps/nextblock/app/cms/revisions/**.
---
--- Three things happen here:
---
---   1. products.version    — the monotonic counter the hybrid revision engine drives,
---                            mirroring pages.version / posts.version.
---
---   2. product_revisions   — a structural mirror of page_revisions / post_revisions.
---                            product_id is uuid (products.id is uuid, not bigint), and
---                            writes are gated on is_admin() to match products_*_policy
---                            rather than the ADMIN|WRITER pattern the page/post revision
---                            tables use. A WRITER who could insert a revision but not
---                            apply a restore would get a silent no-op restore, because
---                            PostgREST returns no error for an UPDATE matching zero rows.
---
---   3. Revision baseline   — every page, post and product gets a real `snapshot` row to
---                            restore to. Until now the CMS synthesised a fake "Initial
---                            Version" entry in the UI whose Restore button resolved to
---                            "current metadata + zero blocks" and wiped the content.
---                            There is now an actual stored baseline instead.
---
---                            Case A (version = 1, no revisions at all): the live row IS
---                            version 1. This covers seeded content — 00000000000003
---                            inserts every page and post at version 1 and writes no
---                            revision rows — and everything authored since the CMS save
---                            path stopped recording revisions. Snapshotting it at
---                            version 1 is what makes "restore the original seeded page"
---                            real for the first time.
---
---                            Case B (version > 1 but no snapshot at or below it): the
---                            true v1 is unrecoverable and is NOT fabricated. A snapshot
---                            of the current state is stored at the current version so the
---                            diff chain has a valid base and future restores resolve.
---
--- Forward-only, idempotent, and it modifies no existing row: every backfill is an
--- INSERT ... WHERE NOT EXISTS ... ON CONFLICT DO NOTHING.
-
--- ---------------------------------------------------------------------------
--- 1. products.version
--- ---------------------------------------------------------------------------
-
-ALTER TABLE public.products
-    ADD COLUMN IF NOT EXISTS version integer DEFAULT 1 NOT NULL;
-
-COMMENT ON COLUMN public.products.version IS 'Monotonic version number for hybrid revisions.';
-
--- ---------------------------------------------------------------------------
--- 2. product_revisions
--- ---------------------------------------------------------------------------
-
-CREATE TABLE IF NOT EXISTS public.product_revisions (
-    id bigint NOT NULL,
-    product_id uuid NOT NULL,
-    author_id uuid,
-    version integer NOT NULL,
-    revision_type public.revision_type NOT NULL,
-    content jsonb NOT NULL,
-    created_at timestamp with time zone DEFAULT now() NOT NULL
-);
-
-COMMENT ON TABLE public.product_revisions IS 'Hybrid (snapshot/diff) revisions for products.';
-COMMENT ON COLUMN public.product_revisions.content IS 'If snapshot: full content; if diff: JSON Patch array.';
-
-DO $rb$
-BEGIN
-  IF NOT EXISTS (
-    SELECT 1 FROM pg_attribute
-     WHERE attrelid = 'public.product_revisions'::regclass
-       AND attname  = 'id'
-       AND attidentity <> ''
-  ) THEN
-    ALTER TABLE public.product_revisions
-      ALTER COLUMN id ADD GENERATED BY DEFAULT AS IDENTITY (
-        SEQUENCE NAME public.product_revisions_id_seq
-        START WITH 1
-        INCREMENT BY 1
-        NO MINVALUE
-        NO MAXVALUE
-        CACHE 1
-      );
-  END IF;
-END $rb$;
-
-DO $rb$
-BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_constraint
-                  WHERE conname = 'product_revisions_pkey'
-                    AND conrelid = 'public.product_revisions'::regclass) THEN
-    ALTER TABLE ONLY public.product_revisions
-      ADD CONSTRAINT product_revisions_pkey PRIMARY KEY (id);
-  END IF;
-END $rb$;
-
-DO $rb$
-BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_constraint
-                  WHERE conname = 'product_revisions_product_version_key'
-                    AND conrelid = 'public.product_revisions'::regclass) THEN
-    ALTER TABLE ONLY public.product_revisions
-      ADD CONSTRAINT product_revisions_product_version_key UNIQUE (product_id, version);
-  END IF;
-END $rb$;
-
-DO $rb$
-BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_constraint
-                  WHERE conname = 'product_revisions_author_id_fkey'
-                    AND conrelid = 'public.product_revisions'::regclass) THEN
-    ALTER TABLE ONLY public.product_revisions
-      ADD CONSTRAINT product_revisions_author_id_fkey
-      FOREIGN KEY (author_id) REFERENCES public.profiles(id) ON DELETE SET NULL;
-  END IF;
-END $rb$;
-
-DO $rb$
-BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_constraint
-                  WHERE conname = 'product_revisions_product_id_fkey'
-                    AND conrelid = 'public.product_revisions'::regclass) THEN
-    ALTER TABLE ONLY public.product_revisions
-      ADD CONSTRAINT product_revisions_product_id_fkey
-      FOREIGN KEY (product_id) REFERENCES public.products(id) ON DELETE CASCADE;
-  END IF;
-END $rb$;
-
-CREATE INDEX IF NOT EXISTS idx_product_revisions_author_id
-    ON public.product_revisions USING btree (author_id);
-
-CREATE INDEX IF NOT EXISTS idx_product_revisions_product_id_version
-    ON public.product_revisions USING btree (product_id, version);
-
-ALTER TABLE public.product_revisions ENABLE ROW LEVEL SECURITY;
-
-DROP POLICY IF EXISTS product_revisions_read_policy ON public.product_revisions;
-CREATE POLICY product_revisions_read_policy ON public.product_revisions
-  FOR SELECT TO authenticated USING (true);
-
-DROP POLICY IF EXISTS product_revisions_insert_policy ON public.product_revisions;
-CREATE POLICY product_revisions_insert_policy ON public.product_revisions
-  FOR INSERT TO authenticated
-  WITH CHECK (((SELECT public.is_admin() AS is_admin) IS TRUE));
-
-DROP POLICY IF EXISTS product_revisions_update_policy ON public.product_revisions;
-CREATE POLICY product_revisions_update_policy ON public.product_revisions
-  FOR UPDATE TO authenticated
-  USING (((SELECT public.is_admin() AS is_admin) IS TRUE))
-  WITH CHECK (((SELECT public.is_admin() AS is_admin) IS TRUE));
-
-DROP POLICY IF EXISTS product_revisions_delete_policy ON public.product_revisions;
-CREATE POLICY product_revisions_delete_policy ON public.product_revisions
-  FOR DELETE TO authenticated
-  USING (((SELECT public.is_admin() AS is_admin) IS TRUE));
-
-GRANT ALL ON TABLE    public.product_revisions        TO anon;
-GRANT ALL ON TABLE    public.product_revisions        TO authenticated;
-GRANT ALL ON TABLE    public.product_revisions        TO service_role;
-GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO anon;
-GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO authenticated;
-GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO service_role;
-
--- ---------------------------------------------------------------------------
--- 3. Revision baseline backfill
---
--- The JSON shape must match FullPageContent / FullPostContent / FullProductContent
--- in apps/nextblock/app/cms/revisions/utils.ts exactly, or the first diff taken
--- against a baseline row will be full of phantom operations.
---
--- Timestamps are rendered with an explicit millisecond-precision UTC format so they
--- match JavaScript's Date#toISOString() ("2026-07-03T17:52:15.643Z"). Postgres'
--- default jsonb rendering of timestamptz ("2026-07-03T17:52:15.643901+00:00") would
--- differ from the value the application writes and produce a spurious diff on the
--- very next save.
--- ---------------------------------------------------------------------------
-
--- 3a. Pages
-INSERT INTO public.page_revisions (page_id, author_id, version, revision_type, content)
-SELECT
-    p.id,
-    NULL::uuid,
-    p.version,
-    'snapshot'::public.revision_type,
-    jsonb_build_object(
-      'meta', jsonb_build_object(
-        'title',            p.title,
-        'slug',             p.slug,
-        'language_id',      p.language_id,
-        'status',           p.status,
-        'meta_title',       p.meta_title,
-        'meta_description', p.meta_description,
-        'custom_canonical', p.custom_canonical,
-        'published_at',     to_char(p.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
-        'feature_image_id', p.feature_image_id
-      ),
-      'blocks', COALESCE((
-        SELECT jsonb_agg(
-                 jsonb_build_object(
-                   'language_id', b.language_id,
-                   'block_type',  b.block_type,
-                   'content',     b.content,
-                   'order',       b."order"
-                 ) ORDER BY b."order" ASC, b.id ASC
-               )
-          FROM public.blocks b
-         WHERE b.page_id = p.id
-      ), '[]'::jsonb)
-    )
-  FROM public.pages p
- WHERE NOT EXISTS (
-         SELECT 1 FROM public.page_revisions r
-          WHERE r.page_id = p.id
-            AND r.revision_type = 'snapshot'
-            AND r.version <= p.version
-       )
-ON CONFLICT (page_id, version) DO NOTHING;
-
--- 3b. Posts
-INSERT INTO public.post_revisions (post_id, author_id, version, revision_type, content)
-SELECT
-    po.id,
-    NULL::uuid,
-    po.version,
-    'snapshot'::public.revision_type,
-    jsonb_build_object(
-      'meta', jsonb_build_object(
-        'title',            po.title,
-        'slug',             po.slug,
-        'language_id',      po.language_id,
-        'status',           po.status,
-        'meta_title',       po.meta_title,
-        'meta_description', po.meta_description,
-        'custom_canonical', po.custom_canonical,
-        'published_at',     to_char(po.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
-        'feature_image_id', po.feature_image_id,
-        'label',            po.label,
-        'excerpt',          po.excerpt,
-        'subtitle',         po.subtitle
-      ),
-      'blocks', COALESCE((
-        SELECT jsonb_agg(
-                 jsonb_build_object(
-                   'language_id', b.language_id,
-                   'block_type',  b.block_type,
-                   'content',     b.content,
-                   'order',       b."order"
-                 ) ORDER BY b."order" ASC, b.id ASC
-               )
-          FROM public.blocks b
-         WHERE b.post_id = po.id
-      ), '[]'::jsonb)
-    )
-  FROM public.posts po
- WHERE NOT EXISTS (
-         SELECT 1 FROM public.post_revisions r
-          WHERE r.post_id = po.id
-            AND r.revision_type = 'snapshot'
-            AND r.version <= po.version
-       )
-ON CONFLICT (post_id, version) DO NOTHING;
-
--- 3c. Products.
---
--- Content only. price/prices/sale_*/scheduled_*/stock/sku/average_rating/total_reviews
--- are deliberately excluded from the snapshot: pricing and inventory are mutated from
--- outside the editor (promotions, Freemius sync, order fulfilment), ratings are derived
--- aggregates, and inventory_items is keyed by bare SKU text with no FK to products — so
--- replaying commerce state on restore would reach rows the editor never touched.
--- Restoring a product restores its content, not its commerce state.
-INSERT INTO public.product_revisions (product_id, author_id, version, revision_type, content)
-SELECT
-    pr.id,
-    NULL::uuid,
-    pr.version,
-    'snapshot'::public.revision_type,
-    jsonb_build_object(
-      'meta', jsonb_build_object(
-        'title',             pr.title,
-        'slug',              pr.slug,
-        'language_id',       pr.language_id,
-        'status',            pr.status,
-        'meta_title',        pr.meta_title,
-        'meta_description',  pr.meta_description,
-        'custom_canonical',  pr.custom_canonical,
-        'published_at',      to_char(pr.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
-        'short_description', pr.short_description,
-        'description_json',  pr.description_json
-      ),
-      'blocks', COALESCE((
-        SELECT jsonb_agg(
-                 jsonb_build_object(
-                   'language_id', b.language_id,
-                   'block_type',  b.block_type,
-                   'content',     b.content,
-                   'order',       b."order"
-                 ) ORDER BY b."order" ASC, b.id ASC
-               )
-          FROM public.blocks b
-         WHERE b.product_id = pr.id
-      ), '[]'::jsonb)
-    )
-  FROM public.products pr
- WHERE NOT EXISTS (
-         SELECT 1 FROM public.product_revisions r
-          WHERE r.product_id = pr.id
-            AND r.revision_type = 'snapshot'
-            AND r.version <= pr.version
-       )
-ON CONFLICT (product_id, version) DO NOTHING;
+-- 00000000000016_product_revisions_and_revision_baseline.sql
+--
+-- Revision History, part 1 of 2 (schema). The application-side rewrite lives in
+-- apps/nextblock/app/cms/revisions/**.
+--
+-- Three things happen here:
+--
+--   1. products.version    — the monotonic counter the hybrid revision engine drives,
+--                            mirroring pages.version / posts.version.
+--
+--   2. product_revisions   — a structural mirror of page_revisions / post_revisions.
+--                            product_id is uuid (products.id is uuid, not bigint), and
+--                            writes are gated on is_admin() to match products_*_policy
+--                            rather than the ADMIN|WRITER pattern the page/post revision
+--                            tables use. A WRITER who could insert a revision but not
+--                            apply a restore would get a silent no-op restore, because
+--                            PostgREST returns no error for an UPDATE matching zero rows.
+--
+--   3. Revision baseline   — every page, post and product gets a real `snapshot` row to
+--                            restore to. Until now the CMS synthesised a fake "Initial
+--                            Version" entry in the UI whose Restore button resolved to
+--                            "current metadata + zero blocks" and wiped the content.
+--                            There is now an actual stored baseline instead.
+--
+--                            Case A (version = 1, no revisions at all): the live row IS
+--                            version 1. This covers seeded content — 00000000000003
+--                            inserts every page and post at version 1 and writes no
+--                            revision rows — and everything authored since the CMS save
+--                            path stopped recording revisions. Snapshotting it at
+--                            version 1 is what makes "restore the original seeded page"
+--                            real for the first time.
+--
+--                            Case B (version > 1 but no snapshot at or below it): the
+--                            true v1 is unrecoverable and is NOT fabricated. A snapshot
+--                            of the current state is stored at the current version so the
+--                            diff chain has a valid base and future restores resolve.
+--
+-- Forward-only, idempotent, and it modifies no existing row: every backfill is an
+-- INSERT ... WHERE NOT EXISTS ... ON CONFLICT DO NOTHING.
+
+-- ---------------------------------------------------------------------------
+-- 1. products.version
+-- ---------------------------------------------------------------------------
+
+ALTER TABLE public.products
+    ADD COLUMN IF NOT EXISTS version integer DEFAULT 1 NOT NULL;
+
+COMMENT ON COLUMN public.products.version IS 'Monotonic version number for hybrid revisions.';
+
+-- ---------------------------------------------------------------------------
+-- 2. product_revisions
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS public.product_revisions (
+    id bigint NOT NULL,
+    product_id uuid NOT NULL,
+    author_id uuid,
+    version integer NOT NULL,
+    revision_type public.revision_type NOT NULL,
+    content jsonb NOT NULL,
+    created_at timestamp with time zone DEFAULT now() NOT NULL
+);
+
+COMMENT ON TABLE public.product_revisions IS 'Hybrid (snapshot/diff) revisions for products.';
+COMMENT ON COLUMN public.product_revisions.content IS 'If snapshot: full content; if diff: JSON Patch array.';
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_attribute
+     WHERE attrelid = 'public.product_revisions'::regclass
+       AND attname  = 'id'
+       AND attidentity <> ''
+  ) THEN
+    ALTER TABLE public.product_revisions
+      ALTER COLUMN id ADD GENERATED BY DEFAULT AS IDENTITY (
+        SEQUENCE NAME public.product_revisions_id_seq
+        START WITH 1
+        INCREMENT BY 1
+        NO MINVALUE
+        NO MAXVALUE
+        CACHE 1
+      );
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_pkey'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_pkey PRIMARY KEY (id);
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_product_version_key'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_product_version_key UNIQUE (product_id, version);
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_author_id_fkey'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_author_id_fkey
+      FOREIGN KEY (author_id) REFERENCES public.profiles(id) ON DELETE SET NULL;
+  END IF;
+END $rb$;
+
+DO $rb$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint
+                  WHERE conname = 'product_revisions_product_id_fkey'
+                    AND conrelid = 'public.product_revisions'::regclass) THEN
+    ALTER TABLE ONLY public.product_revisions
+      ADD CONSTRAINT product_revisions_product_id_fkey
+      FOREIGN KEY (product_id) REFERENCES public.products(id) ON DELETE CASCADE;
+  END IF;
+END $rb$;
+
+CREATE INDEX IF NOT EXISTS idx_product_revisions_author_id
+    ON public.product_revisions USING btree (author_id);
+
+CREATE INDEX IF NOT EXISTS idx_product_revisions_product_id_version
+    ON public.product_revisions USING btree (product_id, version);
+
+ALTER TABLE public.product_revisions ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS product_revisions_read_policy ON public.product_revisions;
+CREATE POLICY product_revisions_read_policy ON public.product_revisions
+  FOR SELECT TO authenticated USING (true);
+
+DROP POLICY IF EXISTS product_revisions_insert_policy ON public.product_revisions;
+CREATE POLICY product_revisions_insert_policy ON public.product_revisions
+  FOR INSERT TO authenticated
+  WITH CHECK (((SELECT public.is_admin() AS is_admin) IS TRUE));
+
+DROP POLICY IF EXISTS product_revisions_update_policy ON public.product_revisions;
+CREATE POLICY product_revisions_update_policy ON public.product_revisions
+  FOR UPDATE TO authenticated
+  USING (((SELECT public.is_admin() AS is_admin) IS TRUE))
+  WITH CHECK (((SELECT public.is_admin() AS is_admin) IS TRUE));
+
+DROP POLICY IF EXISTS product_revisions_delete_policy ON public.product_revisions;
+CREATE POLICY product_revisions_delete_policy ON public.product_revisions
+  FOR DELETE TO authenticated
+  USING (((SELECT public.is_admin() AS is_admin) IS TRUE));
+
+GRANT ALL ON TABLE    public.product_revisions        TO anon;
+GRANT ALL ON TABLE    public.product_revisions        TO authenticated;
+GRANT ALL ON TABLE    public.product_revisions        TO service_role;
+GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO anon;
+GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO authenticated;
+GRANT ALL ON SEQUENCE public.product_revisions_id_seq TO service_role;
+
+-- ---------------------------------------------------------------------------
+-- 3. Revision baseline backfill
+--
+-- The JSON shape must match FullPageContent / FullPostContent / FullProductContent
+-- in apps/nextblock/app/cms/revisions/utils.ts exactly, or the first diff taken
+-- against a baseline row will be full of phantom operations.
+--
+-- Timestamps are rendered with an explicit millisecond-precision UTC format so they
+-- match JavaScript's Date#toISOString() ("2026-07-03T17:52:15.643Z"). Postgres'
+-- default jsonb rendering of timestamptz ("2026-07-03T17:52:15.643901+00:00") would
+-- differ from the value the application writes and produce a spurious diff on the
+-- very next save.
+-- ---------------------------------------------------------------------------
+
+-- 3a. Pages
+INSERT INTO public.page_revisions (page_id, author_id, version, revision_type, content)
+SELECT
+    p.id,
+    NULL::uuid,
+    p.version,
+    'snapshot'::public.revision_type,
+    jsonb_build_object(
+      'meta', jsonb_build_object(
+        'title',            p.title,
+        'slug',             p.slug,
+        'language_id',      p.language_id,
+        'status',           p.status,
+        'meta_title',       p.meta_title,
+        'meta_description', p.meta_description,
+        'custom_canonical', p.custom_canonical,
+        'published_at',     to_char(p.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
+        'feature_image_id', p.feature_image_id
+      ),
+      'blocks', COALESCE((
+        SELECT jsonb_agg(
+                 jsonb_build_object(
+                   'language_id', b.language_id,
+                   'block_type',  b.block_type,
+                   'content',     b.content,
+                   'order',       b."order"
+                 ) ORDER BY b."order" ASC, b.id ASC
+               )
+          FROM public.blocks b
+         WHERE b.page_id = p.id
+      ), '[]'::jsonb)
+    )
+  FROM public.pages p
+ WHERE NOT EXISTS (
+         SELECT 1 FROM public.page_revisions r
+          WHERE r.page_id = p.id
+            AND r.revision_type = 'snapshot'
+            AND r.version <= p.version
+       )
+ON CONFLICT (page_id, version) DO NOTHING;
+
+-- 3b. Posts
+INSERT INTO public.post_revisions (post_id, author_id, version, revision_type, content)
+SELECT
+    po.id,
+    NULL::uuid,
+    po.version,
+    'snapshot'::public.revision_type,
+    jsonb_build_object(
+      'meta', jsonb_build_object(
+        'title',            po.title,
+        'slug',             po.slug,
+        'language_id',      po.language_id,
+        'status',           po.status,
+        'meta_title',       po.meta_title,
+        'meta_description', po.meta_description,
+        'custom_canonical', po.custom_canonical,
+        'published_at',     to_char(po.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
+        'feature_image_id', po.feature_image_id,
+        'label',            po.label,
+        'excerpt',          po.excerpt,
+        'subtitle',         po.subtitle
+      ),
+      'blocks', COALESCE((
+        SELECT jsonb_agg(
+                 jsonb_build_object(
+                   'language_id', b.language_id,
+                   'block_type',  b.block_type,
+                   'content',     b.content,
+                   'order',       b."order"
+                 ) ORDER BY b."order" ASC, b.id ASC
+               )
+          FROM public.blocks b
+         WHERE b.post_id = po.id
+      ), '[]'::jsonb)
+    )
+  FROM public.posts po
+ WHERE NOT EXISTS (
+         SELECT 1 FROM public.post_revisions r
+          WHERE r.post_id = po.id
+            AND r.revision_type = 'snapshot'
+            AND r.version <= po.version
+       )
+ON CONFLICT (post_id, version) DO NOTHING;
+
+-- 3c. Products.
+--
+-- Content only. price/prices/sale_*/scheduled_*/stock/sku/average_rating/total_reviews
+-- are deliberately excluded from the snapshot: pricing and inventory are mutated from
+-- outside the editor (promotions, Freemius sync, order fulfilment), ratings are derived
+-- aggregates, and inventory_items is keyed by bare SKU text with no FK to products — so
+-- replaying commerce state on restore would reach rows the editor never touched.
+-- Restoring a product restores its content, not its commerce state.
+INSERT INTO public.product_revisions (product_id, author_id, version, revision_type, content)
+SELECT
+    pr.id,
+    NULL::uuid,
+    pr.version,
+    'snapshot'::public.revision_type,
+    jsonb_build_object(
+      'meta', jsonb_build_object(
+        'title',             pr.title,
+        'slug',              pr.slug,
+        'language_id',       pr.language_id,
+        'status',            pr.status,
+        'meta_title',        pr.meta_title,
+        'meta_description',  pr.meta_description,
+        'custom_canonical',  pr.custom_canonical,
+        'published_at',      to_char(pr.published_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'),
+        'short_description', pr.short_description,
+        'description_json',  pr.description_json
+      ),
+      'blocks', COALESCE((
+        SELECT jsonb_agg(
+                 jsonb_build_object(
+                   'language_id', b.language_id,
+                   'block_type',  b.block_type,
+                   'content',     b.content,
+                   'order',       b."order"
+                 ) ORDER BY b."order" ASC, b.id ASC
+               )
+          FROM public.blocks b
+         WHERE b.product_id = pr.id
+      ), '[]'::jsonb)
+    )
+  FROM public.products pr
+ WHERE NOT EXISTS (
+         SELECT 1 FROM public.product_revisions r
+          WHERE r.product_id = pr.id
+            AND r.revision_type = 'snapshot'
+            AND r.version <= pr.version
+       )
+ON CONFLICT (product_id, version) DO NOTHING;