@shapio/local 0.5.0

package/dist/migrator-CIKnDfZy.js

@@ -0,0 +1,4152 @@
+import { a as mysqlDriverOf, r as sqliteDriverOf } from "./advisoryLocks-COlJQc1r.js";
+import { sql } from "kysely";
+import { Migrator } from "kysely/migration";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001120000_create_platform_tables.ts
+var _20261001120000_create_platform_tables_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$34,
+	up: () => up$34
+});
+/**
+* Foundation tables shared by every package: durable versions, the job queue, the transactional outbox
+* and the audit log. Statuses are text with CHECK constraints so new states need only a constraint change.
+*/
+const up$34 = async (db) => {
+	await db.schema.createTable("system_versions").addColumn("id", "boolean", (col) => col.primaryKey().defaultTo(true).check(sql`id`)).addColumn("schema_version", "integer", (col) => col.notNull().defaultTo(0)).addColumn("permissions_version", "integer", (col) => col.notNull().defaultTo(0)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await sql`insert into system_versions default values`.execute(db);
+	await db.schema.createTable("jobs").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("type", "text", (col) => col.notNull()).addColumn("payload", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'running', 'succeeded', 'dead')`)).addColumn("priority", "integer", (col) => col.notNull().defaultTo(0)).addColumn("run_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("attempts", "integer", (col) => col.notNull().defaultTo(0)).addColumn("max_attempts", "integer", (col) => col.notNull().defaultTo(10).check(sql`max_attempts > 0`)).addColumn("idempotency_key", "text").addColumn("locked_by", "text").addColumn("locked_until", "timestamptz").addColumn("checkpoint", "jsonb").addColumn("result", "jsonb").addColumn("last_error", "text").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("finished_at", "timestamptz").execute();
+	await db.schema.createIndex("jobs_idempotency_key_uq").on("jobs").column("idempotency_key").unique().where(sql.ref("idempotency_key"), "is not", null).execute();
+	await db.schema.createIndex("jobs_pending_idx").on("jobs").columns(["priority desc", "run_at"]).where(sql.ref("status"), "=", "pending").execute();
+	await db.schema.createIndex("jobs_running_lease_idx").on("jobs").column("locked_until").where(sql.ref("status"), "=", "running").execute();
+	await db.schema.createTable("outbox_events").addColumn("id", "bigint", (col) => col.primaryKey().generatedAlwaysAsIdentity()).addColumn("event_id", "uuid", (col) => col.notNull().unique().defaultTo(sql`gen_random_uuid()`)).addColumn("type", "text", (col) => col.notNull()).addColumn("aggregate_type", "text", (col) => col.notNull()).addColumn("aggregate_id", "text", (col) => col.notNull()).addColumn("payload", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("dispatched_at", "timestamptz").addColumn("dispatch_attempts", "integer", (col) => col.notNull().defaultTo(0)).addColumn("last_dispatch_error", "text").execute();
+	await db.schema.createIndex("outbox_events_undispatched_idx").on("outbox_events").column("id").where(sql.ref("dispatched_at"), "is", null).execute();
+	await db.schema.createTable("audit_events").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("occurred_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("actor_type", "text", (col) => col.notNull().check(sql`actor_type in ('admin', 'app_user', 'token', 'anonymous', 'system')`)).addColumn("actor_id", "text").addColumn("action", "text", (col) => col.notNull()).addColumn("target_type", "text").addColumn("target_id", "text").addColumn("outcome", "text", (col) => col.notNull().check(sql`outcome in ('success', 'failure')`)).addColumn("request_id", "text").addColumn("ip", "text").addColumn("metadata", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).execute();
+	await db.schema.createIndex("audit_events_occurred_at_idx").on("audit_events").column("occurred_at desc").execute();
+	await db.schema.createIndex("audit_events_target_idx").on("audit_events").columns([
+		"target_type",
+		"target_id",
+		"occurred_at desc"
+	]).execute();
+	await db.schema.createIndex("audit_events_actor_idx").on("audit_events").columns([
+		"actor_type",
+		"actor_id",
+		"occurred_at desc"
+	]).execute();
+};
+const down$34 = async (db) => {
+	await db.schema.dropTable("audit_events").execute();
+	await db.schema.dropTable("outbox_events").execute();
+	await db.schema.dropTable("jobs").execute();
+	await db.schema.dropTable("system_versions").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001130000_create_admin_identity.ts
+var _20261001130000_create_admin_identity_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$33,
+	up: () => up$33
+});
+/**
+* Admin identity (package B, ADR 0005): admin users, roles and their permission grants, server-side
+* sessions, invitations, password resets, first-run setup tokens and API tokens. Every secret is stored
+* as a SHA-256 hash (tokens) or an argon2id hash (passwords), never in plain text.
+*/
+const withTimestamps$3 = (table) => table.addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`));
+const uuidPrimaryKey$3 = (table) => table.addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`));
+const up$33 = async (db) => {
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_users")).addColumn("email", "text", (col) => col.notNull().unique()).addColumn("name", "text", (col) => col.notNull().defaultTo("")).addColumn("password_hash", "text", (col) => col.notNull()).addColumn("status", "text", (col) => col.notNull().defaultTo("active").check(sql`status in ('active', 'disabled')`)).addColumn("last_login_at", "timestamptz").addColumn("password_changed_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))).execute();
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_roles")).addColumn("key", "text", (col) => col.notNull().unique().check(sql`key ~ '^[a-z][a-z0-9-]{0,62}$'`)).addColumn("name", "text", (col) => col.notNull()).addColumn("description", "text", (col) => col.notNull().defaultTo("")).addColumn("kind", "text", (col) => col.notNull().defaultTo("admin").check(sql`kind in ('admin', 'delivery')`)).addColumn("is_system", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("version", "integer", (col) => col.notNull().defaultTo(1))).execute();
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_role_permissions")).addColumn("role_id", "uuid", (col) => col.notNull().references("admin_roles.id").onDelete("cascade")).addColumn("action", "text", (col) => col.notNull()).addColumn("model_id", "text").addColumn("condition", "text", (col) => col.check(sql`condition in ('ownedByPrincipal')`)).addColumn("field_ids", sql`text[]`).addUniqueConstraint("admin_role_permissions_grant_uq", [
+		"role_id",
+		"action",
+		"model_id"
+	], (uc) => uc.nullsNotDistinct())).execute();
+	await withTimestamps$3(db.schema.createTable("admin_user_roles").addColumn("admin_user_id", "uuid", (col) => col.notNull().references("admin_users.id").onDelete("cascade")).addColumn("role_id", "uuid", (col) => col.notNull().references("admin_roles.id").onDelete("restrict")).addPrimaryKeyConstraint("admin_user_roles_pk", ["admin_user_id", "role_id"])).execute();
+	await db.schema.createIndex("admin_user_roles_role_idx").on("admin_user_roles").column("role_id").execute();
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_sessions")).addColumn("admin_user_id", "uuid", (col) => col.notNull().references("admin_users.id").onDelete("cascade")).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("csrf_secret", "text", (col) => col.notNull()).addColumn("ip", "text").addColumn("user_agent", "text").addColumn("last_seen_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("revoked_at", "timestamptz").addColumn("rotation_required", "boolean", (col) => col.notNull().defaultTo(false))).execute();
+	await db.schema.createIndex("admin_sessions_user_idx").on("admin_sessions").column("admin_user_id").where(sql.ref("revoked_at"), "is", null).execute();
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_invitations")).addColumn("email", "text", (col) => col.notNull()).addColumn("role_ids", sql`uuid[]`, (col) => col.notNull().defaultTo(sql`'{}'::uuid[]`)).addColumn("token_hash", "text", (col) => col.unique()).addColumn("invited_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("accepted_at", "timestamptz").addColumn("revoked_at", "timestamptz")).execute();
+	await db.schema.createIndex("admin_invitations_pending_email_idx").on("admin_invitations").column("email").where(sql`accepted_at is null and revoked_at is null`).execute();
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("password_resets")).addColumn("admin_user_id", "uuid", (col) => col.notNull().references("admin_users.id").onDelete("cascade")).addColumn("token_hash", "text", (col) => col.unique()).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("used_at", "timestamptz")).execute();
+	await db.schema.createIndex("password_resets_user_idx").on("password_resets").column("admin_user_id").execute();
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("setup_tokens")).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("used_at", "timestamptz").addColumn("superseded_at", "timestamptz")).execute();
+	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("api_tokens")).addColumn("name", "text", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("token_prefix", "text", (col) => col.notNull()).addColumn("role_id", "uuid", (col) => col.notNull().references("admin_roles.id").onDelete("restrict")).addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("expires_at", "timestamptz").addColumn("last_used_at", "timestamptz").addColumn("revoked_at", "timestamptz")).execute();
+	await db.schema.createIndex("api_tokens_role_idx").on("api_tokens").column("role_id").execute();
+};
+const down$33 = async (db) => {
+	await db.schema.dropTable("api_tokens").execute();
+	await db.schema.dropTable("setup_tokens").execute();
+	await db.schema.dropTable("password_resets").execute();
+	await db.schema.dropTable("admin_invitations").execute();
+	await db.schema.dropTable("admin_sessions").execute();
+	await db.schema.dropTable("admin_user_roles").execute();
+	await db.schema.dropTable("admin_role_permissions").execute();
+	await db.schema.dropTable("admin_roles").execute();
+	await db.schema.dropTable("admin_users").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001130500_create_system_settings.ts
+var _20261001130500_create_system_settings_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$32,
+	up: () => up$32
+});
+/**
+* Instance-wide key/value settings that must survive restarts and be shared by every instance, e.g. the
+* generated signing secret. General purpose: later packages add keys, not tables.
+*/
+const up$32 = async (db) => {
+	await db.schema.createTable("system_settings").addColumn("key", "text", (col) => col.primaryKey()).addColumn("value", "text", (col) => col.notNull()).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+};
+const down$32 = async (db) => {
+	await db.schema.dropTable("system_settings").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001140000_create_schema_tables.ts
+var _20261001140000_create_schema_tables_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$31,
+	up: () => up$31
+});
+/**
+* Schema registry (package D, ADR 0002): models and components (one table, `kind` discriminator), immutable
+* schema revisions, the per-model active pointer, schema change jobs, locales and schema settings.
+* Model definitions are data: creating or changing a model never runs DDL (CONTRIBUTING.md rule 1).
+*/
+const up$31 = async (db) => {
+	await db.schema.createTable("models").addColumn("id", "uuid", (col) => col.primaryKey()).addColumn("kind", "text", (col) => col.notNull().check(sql`kind in ('collection', 'singleton', 'component')`)).addColumn("api_key", "text", (col) => col.notNull()).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("deleted_at", "timestamptz").execute();
+	await sql`create unique index models_api_key_uq on models (lower(api_key)) where deleted_at is null`.execute(db);
+	await db.schema.createTable("schema_revisions").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("model_id", "uuid", (col) => col.notNull().references("models.id").onDelete("restrict")).addColumn("version", "integer", (col) => col.notNull().check(sql`version > 0`)).addColumn("definition", "jsonb", (col) => col.notNull()).addColumn("hash", "text", (col) => col.notNull()).addColumn("parent_revision_id", "uuid", (col) => col.references("schema_revisions.id")).addColumn("created_by_type", "text", (col) => col.notNull()).addColumn("created_by_id", "text").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addUniqueConstraint("schema_revisions_model_version_uq", ["model_id", "version"]).execute();
+	await sql`
+    create function schema_revisions_immutable() returns trigger language plpgsql as $$
+    begin
+      raise exception 'schema_revisions rows are immutable';
+    end;
+    $$
+  `.execute(db);
+	await sql`
+    create trigger schema_revisions_no_update before update on schema_revisions
+    for each row execute function schema_revisions_immutable()
+  `.execute(db);
+	await db.schema.createTable("model_active_versions").addColumn("model_id", "uuid", (col) => col.primaryKey().references("models.id").onDelete("cascade")).addColumn("revision_id", "uuid", (col) => col.notNull().references("schema_revisions.id")).addColumn("version", "integer", (col) => col.notNull()).addColumn("schema_version", "integer", (col) => col.notNull()).addColumn("activated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await db.schema.createTable("schema_change_jobs").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("target_type", "text", (col) => col.notNull().check(sql`target_type in ('model', 'locale')`)).addColumn("target_id", "text", (col) => col.notNull()).addColumn("model_id", "uuid", (col) => col.references("models.id")).addColumn("from_revision_id", "uuid", (col) => col.references("schema_revisions.id")).addColumn("to_revision_id", "uuid", (col) => col.references("schema_revisions.id")).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'running', 'activated', 'failed', 'cancelled')`)).addColumn("plan", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).addColumn("job_id", "uuid", (col) => col.references("jobs.id").onDelete("set null")).addColumn("error", "jsonb").addColumn("requested_by_type", "text", (col) => col.notNull()).addColumn("requested_by_id", "text").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("finished_at", "timestamptz").execute();
+	await sql`
+    create unique index schema_change_jobs_in_flight_uq on schema_change_jobs (target_type, target_id)
+    where status in ('pending', 'running')
+  `.execute(db);
+	await db.schema.createIndex("schema_change_jobs_model_idx").on("schema_change_jobs").columns(["model_id", "created_at desc"]).execute();
+	await db.schema.createTable("locales").addColumn("code", "text", (col) => col.primaryKey()).addColumn("label", "text", (col) => col.notNull()).addColumn("is_default", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("fallbacks", sql`text[]`, (col) => col.notNull().defaultTo(sql`'{}'::text[]`)).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await sql`create unique index locales_single_default_uq on locales (is_default) where is_default`.execute(db);
+	await sql`insert into locales (code, label, is_default) values ('en', 'English', true)`.execute(db);
+	await db.schema.createTable("schema_settings").addColumn("id", "boolean", (col) => col.primaryKey().defaultTo(true).check(sql`id`)).addColumn("read_only", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("read_only_reason", "text").addColumn("updated_by_type", "text").addColumn("updated_by_id", "text").addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await sql`insert into schema_settings default values`.execute(db);
+};
+const down$31 = async (db) => {
+	await db.schema.dropTable("schema_settings").execute();
+	await db.schema.dropTable("locales").execute();
+	await db.schema.dropTable("schema_change_jobs").execute();
+	await db.schema.dropTable("model_active_versions").execute();
+	await db.schema.dropTable("schema_revisions").execute();
+	await sql`drop function schema_revisions_immutable()`.execute(db);
+	await db.schema.dropTable("models").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001150000_create_content_tables.ts
+var _20261001150000_create_content_tables_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$30,
+	up: () => up$30
+});
+/**
+* Content storage (package E, ADR 0001): entries, immutable content revisions, mutable heads (one per
+* entry, locale and state) with every content index, derived relation edges, the unique-value registry
+* and the publication log behind `?snapshot=N`. User content models never get tables of their own
+* (CONTRIBUTING.md rule 1): their values are JSONB keyed by stable field IDs.
+*/
+const up$30 = async (db) => {
+	await db.schema.createTable("entries").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("model_id", "uuid", (col) => col.notNull().references("models.id").onDelete("restrict")).addColumn("owner_app_user_id", "uuid").addColumn("created_by_admin_id", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("deleted_at", "timestamptz").execute();
+	await sql`create index entries_model_idx on entries (model_id, created_at) where deleted_at is null`.execute(db);
+	await sql`create index entries_owner_idx on entries (owner_app_user_id) where owner_app_user_id is not null`.execute(db);
+	await db.schema.createTable("content_revisions").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("entry_id", "uuid", (col) => col.notNull().references("entries.id").onDelete("restrict")).addColumn("locale", "text", (col) => col.notNull()).addColumn("schema_revision_id", "uuid", (col) => col.notNull().references("schema_revisions.id")).addColumn("data", "jsonb", (col) => col.notNull()).addColumn("reason", "text", (col) => col.notNull().check(sql`reason in ('create', 'save', 'publish', 'restore', 'duplicate', 'localize')`)).addColumn("author_type", "text", (col) => col.notNull()).addColumn("author_id", "text").addColumn("parent_revision_id", "uuid", (col) => col.references("content_revisions.id")).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await db.schema.createIndex("content_revisions_entry_idx").on("content_revisions").columns([
+		"entry_id",
+		"locale",
+		"created_at"
+	]).execute();
+	await sql`
+    create function content_revisions_immutable() returns trigger language plpgsql as $$
+    begin
+      raise exception 'content_revisions rows are immutable';
+    end;
+    $$
+  `.execute(db);
+	await sql`
+    create trigger content_revisions_no_update before update on content_revisions
+    for each row execute function content_revisions_immutable()
+  `.execute(db);
+	await sql`create sequence entry_heads_change_seq as bigint`.execute(db);
+	await db.schema.createTable("entry_heads").addColumn("entry_id", "uuid", (col) => col.notNull().references("entries.id").onDelete("cascade")).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("locale", "text", (col) => col.notNull()).addColumn("state", "text", (col) => col.notNull().check(sql`state in ('draft', 'published')`)).addColumn("revision_id", "uuid", (col) => col.notNull().references("content_revisions.id")).addColumn("data", "jsonb", (col) => col.notNull()).addColumn("autosaved_at", "timestamptz").addColumn("version", "integer", (col) => col.notNull().defaultTo(1)).addColumn("change_seq", "bigint", (col) => col.notNull().defaultTo(sql`nextval('entry_heads_change_seq')`)).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addPrimaryKeyConstraint("entry_heads_pkey", [
+		"entry_id",
+		"locale",
+		"state"
+	]).execute();
+	await sql`alter sequence entry_heads_change_seq owned by entry_heads.change_seq`.execute(db);
+	await sql`create index entry_heads_data_gin on entry_heads using gin (data jsonb_path_ops)`.execute(db);
+	await db.schema.createIndex("entry_heads_model_locale_state_idx").on("entry_heads").columns([
+		"model_id",
+		"locale",
+		"state"
+	]).execute();
+	await db.schema.createIndex("entry_heads_change_seq_idx").on("entry_heads").columns(["model_id", "change_seq"]).execute();
+	await db.schema.createTable("relation_edges").addColumn("source_entry_id", "uuid", (col) => col.notNull()).addColumn("locale", "text", (col) => col.notNull()).addColumn("state", "text", (col) => col.notNull()).addColumn("field_id", "uuid", (col) => col.notNull()).addColumn("position", "integer", (col) => col.notNull()).addColumn("target_entry_id", "uuid", (col) => col.notNull().references("entries.id")).addPrimaryKeyConstraint("relation_edges_pkey", [
+		"source_entry_id",
+		"locale",
+		"state",
+		"field_id",
+		"position"
+	]).addForeignKeyConstraint("relation_edges_head_fk", [
+		"source_entry_id",
+		"locale",
+		"state"
+	], "entry_heads", [
+		"entry_id",
+		"locale",
+		"state"
+	], (constraint) => constraint.onDelete("cascade")).execute();
+	await db.schema.createIndex("relation_edges_target_idx").on("relation_edges").columns(["target_entry_id", "state"]).execute();
+	await db.schema.createTable("unique_values").addColumn("field_id", "uuid", (col) => col.notNull()).addColumn("locale", "text", (col) => col.notNull()).addColumn("state", "text", (col) => col.notNull().check(sql`state in ('draft', 'published')`)).addColumn("value_hash", "text", (col) => col.notNull()).addColumn("entry_id", "uuid", (col) => col.notNull().references("entries.id").onDelete("cascade")).addColumn("model_id", "uuid", (col) => col.notNull()).addPrimaryKeyConstraint("unique_values_pkey", [
+		"field_id",
+		"locale",
+		"state",
+		"value_hash"
+	]).execute();
+	await db.schema.createIndex("unique_values_entry_idx").on("unique_values").column("entry_id").execute();
+	await db.schema.createTable("publication_state").addColumn("id", "boolean", (col) => col.primaryKey().defaultTo(true).check(sql`id`)).addColumn("last_seq", "bigint", (col) => col.notNull().defaultTo(0)).execute();
+	await sql`insert into publication_state default values`.execute(db);
+	await db.schema.createTable("publication_log").addColumn("id", "bigint", (col) => col.primaryKey().generatedAlwaysAsIdentity()).addColumn("entry_id", "uuid", (col) => col.notNull().references("entries.id")).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("locale", "text", (col) => col.notNull()).addColumn("revision_id", "uuid", (col) => col.notNull().references("content_revisions.id")).addColumn("from_seq", "bigint", (col) => col.notNull()).addColumn("to_seq", "bigint").addColumn("published_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await sql`create unique index publication_log_open_uq on publication_log (entry_id, locale) where to_seq is null`.execute(db);
+	await db.schema.createIndex("publication_log_model_seq_idx").on("publication_log").columns(["model_id", "from_seq"]).execute();
+};
+const down$30 = async (db) => {
+	await db.schema.dropTable("publication_log").execute();
+	await db.schema.dropTable("publication_state").execute();
+	await db.schema.dropTable("unique_values").execute();
+	await db.schema.dropTable("relation_edges").execute();
+	await db.schema.dropTable("entry_heads").execute();
+	await db.schema.dropTable("content_revisions").execute();
+	await sql`drop function content_revisions_immutable()`.execute(db);
+	await db.schema.dropTable("entries").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001160000_create_media_tables.ts
+var _20261001160000_create_media_tables_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$29,
+	up: () => up$29
+});
+/**
+* Media library (package G): folders, assets, image variants, references from content and upload grants.
+* Bytes live in a storage driver (local disk or S3-compatible); rows record which driver and key hold
+* each object, so `shapio media migrate` can move assets one at a time while the server keeps serving.
+*/
+const withTimestamps$2 = (table) => table.addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`));
+const uuidPrimaryKey$2 = (table) => table.addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`));
+const STORAGE_DRIVER_CHECK = sql`storage_driver in ('local', 's3')`;
+const VISIBILITY_CHECK = sql`visibility in ('public', 'private')`;
+const up$29 = async (db) => {
+	await withTimestamps$2(uuidPrimaryKey$2(db.schema.createTable("media_folders")).addColumn("parent_id", "uuid", (col) => col.references("media_folders.id").onDelete("restrict")).addColumn("name", "text", (col) => col.notNull().check(sql`length(name) between 1 and 255`)).addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("version", "integer", (col) => col.notNull().defaultTo(1))).execute();
+	await sql`create unique index media_folders_sibling_name_uq on media_folders
+    (coalesce(parent_id, '00000000-0000-0000-0000-000000000000'::uuid), lower(name))`.execute(db);
+	await withTimestamps$2(db.schema.createTable("media_assets").addColumn("id", "uuid", (col) => col.primaryKey()).addColumn("folder_id", "uuid", (col) => col.references("media_folders.id").onDelete("set null")).addColumn("storage_driver", "text", (col) => col.notNull().check(STORAGE_DRIVER_CHECK)).addColumn("storage_key", "text", (col) => col.notNull()).addColumn("original_filename", "text", (col) => col.notNull()).addColumn("mime_type", "text", (col) => col.notNull()).addColumn("size_bytes", "bigint", (col) => col.notNull()).addColumn("width", "integer").addColumn("height", "integer").addColumn("checksum_sha256", "text").addColumn("alt", "text", (col) => col.notNull().defaultTo("")).addColumn("caption", "text", (col) => col.notNull().defaultTo("")).addColumn("focal_x", "real", (col) => col.check(sql`focal_x between 0 and 1`)).addColumn("focal_y", "real", (col) => col.check(sql`focal_y between 0 and 1`)).addColumn("visibility", "text", (col) => col.notNull().defaultTo("public").check(VISIBILITY_CHECK)).addColumn("status", "text", (col) => col.notNull().defaultTo("processing").check(sql`status in ('processing', 'ready', 'failed')`)).addColumn("processing_error", "text").addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("version", "integer", (col) => col.notNull().defaultTo(1)).addColumn("deleted_at", "timestamptz").addCheckConstraint("media_assets_focal_point_ck", sql`(focal_x is null) = (focal_y is null)`)).execute();
+	await db.schema.createIndex("media_assets_storage_key_uq").on("media_assets").column("storage_key").unique().execute();
+	await db.schema.createIndex("media_assets_folder_idx").on("media_assets").columns([
+		"folder_id",
+		"created_at",
+		"id"
+	]).where(sql.ref("deleted_at"), "is", null).execute();
+	await db.schema.createIndex("media_assets_created_idx").on("media_assets").columns(["created_at", "id"]).where(sql.ref("deleted_at"), "is", null).execute();
+	await db.schema.createIndex("media_assets_driver_idx").on("media_assets").columns(["storage_driver", "id"]).execute();
+	await withTimestamps$2(uuidPrimaryKey$2(db.schema.createTable("media_variants")).addColumn("asset_id", "uuid", (col) => col.notNull().references("media_assets.id").onDelete("cascade")).addColumn("name", "text", (col) => col.notNull()).addColumn("width", "integer").addColumn("height", "integer").addColumn("format", "text", (col) => col.notNull()).addColumn("mime_type", "text", (col) => col.notNull()).addColumn("storage_key", "text").addColumn("size_bytes", "bigint").addColumn("checksum_sha256", "text").addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'ready', 'failed')`)).addColumn("error", "text").addUniqueConstraint("media_variants_asset_name_uq", ["asset_id", "name"])).execute();
+	await db.schema.createIndex("media_variants_storage_key_uq").on("media_variants").column("storage_key").unique().execute();
+	await db.schema.createTable("media_references").addColumn("asset_id", "uuid", (col) => col.notNull().references("media_assets.id").onDelete("cascade")).addColumn("entry_id", "uuid", (col) => col.notNull().references("entries.id").onDelete("cascade")).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("field_id", "text", (col) => col.notNull()).addColumn("locale", "text", (col) => col.notNull()).addColumn("state", "text", (col) => col.notNull().check(sql`state in ('draft', 'published')`)).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addPrimaryKeyConstraint("media_references_pk", [
+		"asset_id",
+		"entry_id",
+		"locale",
+		"state",
+		"field_id"
+	]).execute();
+	await db.schema.createIndex("media_references_entry_idx").on("media_references").columns([
+		"entry_id",
+		"locale",
+		"state"
+	]).execute();
+	await db.schema.createTable("media_upload_grants").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("asset_id", "uuid", (col) => col.notNull()).addColumn("kind", "text", (col) => col.notNull().check(sql`kind in ('create', 'replace')`)).addColumn("storage_driver", "text", (col) => col.notNull().check(STORAGE_DRIVER_CHECK)).addColumn("storage_key", "text", (col) => col.notNull().unique()).addColumn("original_filename", "text", (col) => col.notNull()).addColumn("declared_mime_type", "text", (col) => col.notNull()).addColumn("max_size_bytes", "bigint", (col) => col.notNull()).addColumn("folder_id", "uuid").addColumn("visibility", "text", (col) => col.notNull().check(VISIBILITY_CHECK)).addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("created_by_principal", "text", (col) => col.notNull()).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'consumed', 'rejected', 'expired')`)).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("consumed_at", "timestamptz").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+};
+const down$29 = async (db) => {
+	await db.schema.dropTable("media_upload_grants").execute();
+	await db.schema.dropTable("media_references").execute();
+	await db.schema.dropTable("media_variants").execute();
+	await db.schema.dropTable("media_assets").execute();
+	await db.schema.dropTable("media_folders").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001170000_create_publishing_tables.ts
+var _20261001170000_create_publishing_tables_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$28,
+	up: () => up$28
+});
+/**
+* Publishing (package H): scheduled publications, releases, webhooks and their delivery log, deployment
+* connections and runs, and preview tokens. Secrets (webhook signing secrets, provider tokens) are stored
+* encrypted with a key derived from the instance signing secret; preview tokens are stored as hashes.
+*/
+const withTimestamps$1 = (table) => table.addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`));
+const uuidPrimaryKey$1 = (table) => table.addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`));
+const createdBy = (table) => table.addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null"));
+const PUBLICATION_ACTION_CHECK = sql`action in ('publish', 'unpublish')`;
+const createSchedulingTables = async (db) => {
+	await withTimestamps$1(createdBy(uuidPrimaryKey$1(db.schema.createTable("scheduled_publications")).addColumn("entry_id", "uuid", (col) => col.notNull().references("entries.id").onDelete("cascade")).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("locale", "text", (col) => col.notNull()).addColumn("action", "text", (col) => col.notNull().check(PUBLICATION_ACTION_CHECK)).addColumn("run_at", "timestamptz", (col) => col.notNull()).addColumn("status", "text", (col) => col.notNull().defaultTo("scheduled").check(sql`status in ('scheduled', 'done', 'failed', 'cancelled')`)).addColumn("created_by_token", "uuid", (col) => col.references("api_tokens.id").onDelete("set null")).addColumn("job_id", "uuid").addColumn("snapshot_seq", "bigint").addColumn("error", "text").addColumn("executed_at", "timestamptz"))).execute();
+	await db.schema.createIndex("scheduled_publications_status_idx").on("scheduled_publications").columns(["status", "run_at"]).execute();
+	await db.schema.createIndex("scheduled_publications_entry_idx").on("scheduled_publications").columns(["entry_id", "locale"]).execute();
+	await withTimestamps$1(createdBy(uuidPrimaryKey$1(db.schema.createTable("releases")).addColumn("name", "text", (col) => col.notNull().check(sql`length(name) between 1 and 200`)).addColumn("description", "text", (col) => col.notNull().defaultTo("")).addColumn("status", "text", (col) => col.notNull().defaultTo("draft").check(sql`status in ('draft', 'scheduled', 'published', 'failed', 'cancelled')`)).addColumn("scheduled_at", "timestamptz").addColumn("schedule_job_id", "uuid").addColumn("scheduled_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("scheduled_by_token", "uuid", (col) => col.references("api_tokens.id").onDelete("set null")).addColumn("executed_at", "timestamptz").addColumn("snapshot_seq", "bigint").addColumn("error", "text").addColumn("version", "integer", (col) => col.notNull().defaultTo(1)))).execute();
+	await db.schema.createIndex("releases_status_idx").on("releases").columns(["status", "created_at"]).execute();
+	await uuidPrimaryKey$1(db.schema.createTable("release_items")).addColumn("release_id", "uuid", (col) => col.notNull().references("releases.id").onDelete("cascade")).addColumn("entry_id", "uuid", (col) => col.notNull().references("entries.id").onDelete("cascade")).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("locale", "text", (col) => col.notNull()).addColumn("action", "text", (col) => col.notNull().check(PUBLICATION_ACTION_CHECK)).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'done', 'failed')`)).addColumn("error", "text").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addUniqueConstraint("release_items_entry_locale_uq", [
+		"release_id",
+		"entry_id",
+		"locale"
+	]).execute();
+};
+const createWebhookTables = async (db) => {
+	await withTimestamps$1(createdBy(uuidPrimaryKey$1(db.schema.createTable("webhooks")).addColumn("name", "text", (col) => col.notNull().check(sql`length(name) between 1 and 200`)).addColumn("url", "text", (col) => col.notNull()).addColumn("events", sql`text[]`, (col) => col.notNull().defaultTo(sql`'{}'::text[]`)).addColumn("enabled", "boolean", (col) => col.notNull().defaultTo(true)).addColumn("secret_encrypted", "text", (col) => col.notNull()).addColumn("allow_private_network", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("max_attempts", "integer", (col) => col.notNull().defaultTo(8).check(sql`max_attempts between 1 and 20`)).addColumn("version", "integer", (col) => col.notNull().defaultTo(1)))).execute();
+	await withTimestamps$1(uuidPrimaryKey$1(db.schema.createTable("webhook_deliveries")).addColumn("webhook_id", "uuid", (col) => col.notNull().references("webhooks.id").onDelete("cascade")).addColumn("event_id", "uuid").addColumn("event_type", "text", (col) => col.notNull()).addColumn("payload", "jsonb", (col) => col.notNull()).addColumn("is_test", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'retrying', 'succeeded', 'dead')`)).addColumn("attempts", "integer", (col) => col.notNull().defaultTo(0)).addColumn("last_response_status", "integer").addColumn("last_error", "text").addColumn("attempt_log", "jsonb", (col) => col.notNull().defaultTo(sql`'[]'::jsonb`)).addColumn("job_id", "uuid").addColumn("delivered_at", "timestamptz")).execute();
+	await db.schema.createIndex("webhook_deliveries_event_uq").on("webhook_deliveries").columns(["webhook_id", "event_id"]).unique().where(sql.ref("event_id"), "is not", null).execute();
+	await db.schema.createIndex("webhook_deliveries_webhook_idx").on("webhook_deliveries").columns(["webhook_id", "created_at desc"]).execute();
+};
+const createDeploymentTables = async (db) => {
+	await withTimestamps$1(createdBy(uuidPrimaryKey$1(db.schema.createTable("deployment_connections")).addColumn("name", "text", (col) => col.notNull().check(sql`length(name) between 1 and 200`)).addColumn("provider", "text", (col) => col.notNull().check(sql`provider in ('generic_webhook', 'cloudflare_pages', 'github')`)).addColumn("settings", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).addColumn("secrets_encrypted", "text", (col) => col.notNull()).addColumn("secret_env_refs", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).addColumn("delivery_role_id", "uuid", (col) => col.references("admin_roles.id").onDelete("set null")).addColumn("preview_url_template", "text").addColumn("trigger_policy", sql`text[]`, (col) => col.notNull().defaultTo(sql`'{}'::text[]`)).addColumn("debounce_seconds", "integer", (col) => col.notNull().defaultTo(10).check(sql`debounce_seconds between 0 and 3600`)).addColumn("allow_private_network", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("enabled", "boolean", (col) => col.notNull().defaultTo(true)).addColumn("version", "integer", (col) => col.notNull().defaultTo(1)))).execute();
+	await withTimestamps$1(createdBy(uuidPrimaryKey$1(db.schema.createTable("deployment_runs")).addColumn("connection_id", "uuid", (col) => col.notNull().references("deployment_connections.id").onDelete("cascade")).addColumn("status", "text", (col) => col.notNull().defaultTo("queued").check(sql`status in ('queued', 'triggered', 'building', 'deployed', 'failed', 'unknown')`)).addColumn("status_rank", "integer", (col) => col.notNull().defaultTo(0)).addColumn("trigger", "text", (col) => col.notNull().check(sql`trigger in ('publish', 'release', 'schema', 'manual', 'retry')`)).addColumn("snapshot_seq", "bigint").addColumn("schema_version", "integer").addColumn("retry_of", "uuid", (col) => col.references("deployment_runs.id").onDelete("set null")).addColumn("provider_ref", "text").addColumn("log_url", "text").addColumn("site_url", "text").addColumn("error", "text").addColumn("timeline", "jsonb", (col) => col.notNull().defaultTo(sql`'[]'::jsonb`)).addColumn("job_id", "uuid").addColumn("triggered_at", "timestamptz").addColumn("finished_at", "timestamptz"))).execute();
+	await db.schema.createIndex("deployment_runs_queued_uq").on("deployment_runs").column("connection_id").unique().where(sql.ref("status"), "=", "queued").execute();
+	await db.schema.createIndex("deployment_runs_connection_idx").on("deployment_runs").columns(["connection_id", "created_at desc"]).execute();
+};
+const createPreviewTables = async (db) => {
+	await uuidPrimaryKey$1(db.schema.createTable("preview_tokens")).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("token_prefix", "text", (col) => col.notNull()).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("entry_id", "uuid", (col) => col.references("entries.id").onDelete("cascade")).addColumn("locale", "text").addColumn("connection_id", "uuid", (col) => col.references("deployment_connections.id").onDelete("set null")).addColumn("delivery_role_id", "uuid", (col) => col.references("admin_roles.id").onDelete("set null")).addColumn("created_by", "uuid", (col) => col.notNull().references("admin_users.id").onDelete("cascade")).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("revoked_at", "timestamptz").addColumn("last_used_at", "timestamptz").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await db.schema.createIndex("preview_tokens_entry_idx").on("preview_tokens").columns(["entry_id", "created_at desc"]).execute();
+};
+const up$28 = async (db) => {
+	await createSchedulingTables(db);
+	await createWebhookTables(db);
+	await createDeploymentTables(db);
+	await createPreviewTables(db);
+};
+const down$28 = async (db) => {
+	await db.schema.dropTable("preview_tokens").execute();
+	await db.schema.dropTable("deployment_runs").execute();
+	await db.schema.dropTable("deployment_connections").execute();
+	await db.schema.dropTable("webhook_deliveries").execute();
+	await db.schema.dropTable("webhooks").execute();
+	await db.schema.dropTable("release_items").execute();
+	await db.schema.dropTable("releases").execute();
+	await db.schema.dropTable("scheduled_publications").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261001180000_create_app_users.ts
+var _20261001180000_create_app_users_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$27,
+	up: () => up$27
+});
+/**
+* App users (package I, ADR 0005): the end users of sites and apps built on Shapio, with their own roles
+* (`public` for anonymous callers, `authenticated` for every signed-in app user, plus custom roles), rotating
+* refresh tokens with reuse detection, OAuth identities, email confirmations, password resets and the
+* short-lived codes that hand an OAuth sign-in back to the app. Secrets are stored as SHA-256 hashes (tokens,
+* codes) or argon2id hashes (passwords), never in plain text.
+*/
+/**
+* Stable IDs of the built-in app roles. The evaluator refers to them directly (permissions/appRoles.ts holds
+* the same values); a migration never imports application code, so they are repeated here.
+*/
+const PUBLIC_ROLE_ID$1 = "00000000-0000-4000-a000-000000000001";
+const AUTHENTICATED_ROLE_ID$1 = "00000000-0000-4000-a000-000000000002";
+const withTimestamps = (table) => table.addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`));
+const uuidPrimaryKey = (table) => table.addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`));
+const createUsers = async (db) => {
+	await withTimestamps(uuidPrimaryKey(db.schema.createTable("app_users")).addColumn("email", "text", (col) => col.notNull()).addColumn("name", "text", (col) => col.notNull().defaultTo("")).addColumn("password_hash", "text").addColumn("confirmed_at", "timestamptz").addColumn("blocked_at", "timestamptz").addColumn("last_login_at", "timestamptz").addColumn("password_changed_at", "timestamptz").addColumn("deleted_at", "timestamptz")).execute();
+	await sql`create unique index app_users_email_uq on app_users (lower(email)) where deleted_at is null`.execute(db);
+	await sql`create index app_users_created_idx on app_users (created_at desc, id desc) where deleted_at is null`.execute(db);
+};
+const createRoles = async (db) => {
+	await withTimestamps(uuidPrimaryKey(db.schema.createTable("app_roles")).addColumn("key", "text", (col) => col.notNull().unique().check(sql`key ~ '^[a-z][a-z0-9-]{0,62}$'`)).addColumn("name", "text", (col) => col.notNull()).addColumn("description", "text", (col) => col.notNull().defaultTo("")).addColumn("is_system", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("version", "integer", (col) => col.notNull().defaultTo(1))).execute();
+	await withTimestamps(uuidPrimaryKey(db.schema.createTable("app_role_permissions")).addColumn("role_id", "uuid", (col) => col.notNull().references("app_roles.id").onDelete("cascade")).addColumn("action", "text", (col) => col.notNull().check(sql`action in ('read', 'create', 'update', 'delete', 'publish')`)).addColumn("model_id", "text").addColumn("condition", "text", (col) => col.check(sql`condition in ('ownedByPrincipal')`)).addColumn("field_ids", sql`text[]`).addUniqueConstraint("app_role_permissions_grant_uq", [
+		"role_id",
+		"action",
+		"model_id"
+	], (uc) => uc.nullsNotDistinct())).execute();
+	await db.schema.createTable("app_user_roles").addColumn("app_user_id", "uuid", (col) => col.notNull().references("app_users.id").onDelete("cascade")).addColumn("role_id", "uuid", (col) => col.notNull().references("app_roles.id").onDelete("restrict")).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addPrimaryKeyConstraint("app_user_roles_pk", ["app_user_id", "role_id"]).execute();
+	await db.schema.createIndex("app_user_roles_role_idx").on("app_user_roles").column("role_id").execute();
+	await sql`
+    insert into app_roles (id, key, name, description, is_system) values
+      (${PUBLIC_ROLE_ID$1}, 'public', 'Public',
+        'Applies to every caller without a token. Grants nothing until you add permissions.', true),
+      (${AUTHENTICATED_ROLE_ID$1}, 'authenticated', 'Authenticated',
+        'Held by every signed-in app user, in addition to their custom roles. Grants nothing until you add permissions.', true)
+  `.execute(db);
+};
+const createCredentials = async (db) => {
+	await db.schema.createTable("app_refresh_tokens").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("app_user_id", "uuid", (col) => col.notNull().references("app_users.id").onDelete("cascade")).addColumn("family_id", "uuid", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("used_at", "timestamptz").addColumn("reuse_grace_used_at", "timestamptz").addColumn("revoked_at", "timestamptz").addColumn("revoked_reason", "text").addColumn("ip", "text").addColumn("user_agent", "text").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+	await db.schema.createIndex("app_refresh_tokens_family_idx").on("app_refresh_tokens").column("family_id").execute();
+	await db.schema.createIndex("app_refresh_tokens_user_idx").on("app_refresh_tokens").column("app_user_id").where(sql.ref("revoked_at"), "is", null).execute();
+	await withTimestamps(uuidPrimaryKey(db.schema.createTable("app_oauth_accounts")).addColumn("app_user_id", "uuid", (col) => col.notNull().references("app_users.id").onDelete("cascade")).addColumn("provider", "text", (col) => col.notNull().check(sql`provider in ('google', 'github')`)).addColumn("provider_user_id", "text", (col) => col.notNull()).addColumn("email", "text").addUniqueConstraint("app_oauth_accounts_identity_uq", ["provider", "provider_user_id"])).execute();
+	await db.schema.createIndex("app_oauth_accounts_user_idx").on("app_oauth_accounts").column("app_user_id").execute();
+	for (const table of ["email_confirmations", "app_password_resets"]) {
+		await withTimestamps(uuidPrimaryKey(db.schema.createTable(table)).addColumn("app_user_id", "uuid", (col) => col.notNull().references("app_users.id").onDelete("cascade")).addColumn("email", "text", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.unique()).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("used_at", "timestamptz")).execute();
+		await db.schema.createIndex(`${table}_user_idx`).on(table).column("app_user_id").execute();
+	}
+	await db.schema.createTable("app_login_codes").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("app_user_id", "uuid", (col) => col.notNull().references("app_users.id").onDelete("cascade")).addColumn("code_hash", "text", (col) => col.notNull().unique()).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("used_at", "timestamptz").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
+};
+const up$27 = async (db) => {
+	await createUsers(db);
+	await createRoles(db);
+	await createCredentials(db);
+	await sql`update entries set owner_app_user_id = null where owner_app_user_id is not null`.execute(db);
+	await sql`
+    alter table entries add constraint entries_owner_app_user_fk
+      foreign key (owner_app_user_id) references app_users (id) on delete set null
+  `.execute(db);
+};
+const down$27 = async (db) => {
+	await sql`alter table entries drop constraint if exists entries_owner_app_user_fk`.execute(db);
+	await db.schema.dropTable("app_login_codes").execute();
+	await db.schema.dropTable("app_password_resets").execute();
+	await db.schema.dropTable("email_confirmations").execute();
+	await db.schema.dropTable("app_oauth_accounts").execute();
+	await db.schema.dropTable("app_refresh_tokens").execute();
+	await db.schema.dropTable("app_user_roles").execute();
+	await db.schema.dropTable("app_role_permissions").execute();
+	await db.schema.dropTable("app_roles").execute();
+	await db.schema.dropTable("app_users").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261002120000_create_extension_hook_runs.ts
+var _20261002120000_create_extension_hook_runs_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$26,
+	up: () => up$26
+});
+/**
+* Extension points (package K, ADR 0009): the ledger of post-commit lifecycle hooks (`afterCreate`,
+* `afterPublish`, ...) that have run. One row per (outbox event, hook name), written in the same transaction
+* as the hook's own database work, so a hook re-run after a worker crash finds its row and is skipped:
+* exactly once for everything the hook does through its transaction.
+*/
+const up$26 = async (db) => {
+	await db.schema.createTable("extension_hook_runs").addColumn("event_id", "uuid", (col) => col.notNull()).addColumn("hook", "text", (col) => col.notNull()).addColumn("job_id", "uuid").addColumn("completed_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addPrimaryKeyConstraint("extension_hook_runs_pkey", ["event_id", "hook"]).execute();
+};
+const down$26 = async (db) => {
+	await db.schema.dropTable("extension_hook_runs").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261002130000_app_auth_token_version_and_login_code_pkce.ts
+var _20261002130000_app_auth_token_version_and_login_code_pkce_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$25,
+	up: () => up$25
+});
+/**
+* App users (ADR 0005):
+* - `app_users.token_version`: carried in every access token and bumped on logout, block, password change,
+*   password reset and deletion, so the account's outstanding access tokens stop working on their next
+*   request instead of living out their TTL.
+* - `app_login_codes.code_challenge`: the PKCE-style S256 challenge the app sent when it started the OAuth
+*   sign-in; the one-time login code is only exchanged with the matching verifier. Codes live a minute, so
+*   any pending ones (issued without a challenge) are dropped rather than given a placeholder.
+*/
+const up$25 = async (db) => {
+	await db.schema.alterTable("app_users").addColumn("token_version", "integer", (col) => col.notNull().defaultTo(0)).execute();
+	await sql`delete from app_login_codes`.execute(db);
+	await db.schema.alterTable("app_login_codes").addColumn("code_challenge", "text", (col) => col.notNull()).execute();
+};
+const down$25 = async (db) => {
+	await db.schema.alterTable("app_login_codes").dropColumn("code_challenge").execute();
+	await db.schema.alterTable("app_users").dropColumn("token_version").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261002180000_add_publication_log_diff_indexes.ts
+var _20261002180000_add_publication_log_diff_indexes_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$24,
+	up: () => up$24
+});
+/**
+* The snapshot diff (repositories/snapshotDiff.ts) finds the (entry, locale) pairs whose live period opened
+* or closed between two publication sequence numbers, then reads each pair's live revision at both ends.
+* - `to_seq` range: periods that closed in the range (the open ones have no `to_seq` and are left out).
+* - `(entry_id, locale, from_seq)`: "the row live at seq N" is the latest row starting at or before N.
+* Periods that opened in the range use the existing `(model_id, from_seq)` index.
+*/
+const up$24 = async (db) => {
+	await sql`create index publication_log_to_seq_idx on publication_log (to_seq) where to_seq is not null`.execute(db);
+	await db.schema.createIndex("publication_log_entry_locale_from_idx").on("publication_log").columns([
+		"entry_id",
+		"locale",
+		"from_seq"
+	]).execute();
+};
+const down$24 = async (db) => {
+	await db.schema.dropIndex("publication_log_entry_locale_from_idx").execute();
+	await db.schema.dropIndex("publication_log_to_seq_idx").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261002180100_create_usage_tables.ts
+var _20261002180100_create_usage_tables_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$23,
+	up: () => up$23
+});
+/**
+* Field usage from delivery traffic (plan developer-face §5): daily counters written by the in-memory
+* aggregator (usage/aggregator.ts) in one multi-row upsert per flush, never per request. Counts only, no
+* payloads. `principal_key` is `token:<id>`, `app_users` or `anonymous`. Pruned by the retention job
+* after USAGE_RETENTION_DAYS.
+*/
+const up$23 = async (db) => {
+	await db.schema.createTable("field_reads").addColumn("day", "date", (col) => col.notNull()).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("field_path", "text", (col) => col.notNull()).addColumn("principal_key", "text", (col) => col.notNull()).addColumn("selection", "text", (col) => col.notNull().check(sql`selection in ('explicit', 'implicit')`)).addColumn("reads", "bigint", (col) => col.notNull().defaultTo(0)).addColumn("last_read_at", "timestamptz", (col) => col.notNull()).addPrimaryKeyConstraint("field_reads_pkey", [
+		"day",
+		"model_id",
+		"field_path",
+		"principal_key",
+		"selection"
+	]).execute();
+	await db.schema.createIndex("field_reads_model_day_idx").on("field_reads").columns(["model_id", "day"]).execute();
+	await db.schema.createTable("token_reads").addColumn("day", "date", (col) => col.notNull()).addColumn("principal_key", "text", (col) => col.notNull()).addColumn("requests", "bigint", (col) => col.notNull().defaultTo(0)).addColumn("last_snapshot", "bigint").addColumn("last_read_at", "timestamptz", (col) => col.notNull()).addPrimaryKeyConstraint("token_reads_pkey", ["day", "principal_key"]).execute();
+};
+const down$23 = async (db) => {
+	await db.schema.dropTable("token_reads").execute();
+	await db.schema.dropTable("field_reads").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261002180200_create_change_sets.ts
+var _20261002180200_create_change_sets_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$22,
+	up: () => up$22
+});
+/**
+* Change sets (developer-face plan §5, ADR 0010): schema drafts and entry publications that ship as ONE
+* publication snapshot. Replaces releases (a clean rename: rows, permission strings, webhook event patterns,
+* deployment trigger policy and pending jobs move over; nothing keeps the old names).
+*
+* - `change_sets` / `change_set_items`: the set and its items (entry publications or schema drafts).
+* - `schema_drafts`: mutable proposed definitions; real (immutable) schema revisions are written at ship.
+* - `publication_snapshots`: one ledger row per publication sequence number (who, why, schema version),
+*   backfilled for existing numbers as `legacy`.
+* - `schema_change_jobs.change_set_id` and `deployment_runs.change_set_id` link execution records to a set.
+*/
+const RELEASE_EVENT_RENAMES = [
+	["release.*", "change_set.*"],
+	["release.scheduled", "change_set.scheduled"],
+	["release.published", "change_set.shipped"],
+	["release.failed", "change_set.failed"]
+];
+const createTables = async (db) => {
+	await sql`
+    create table change_sets (
+      id uuid primary key default gen_random_uuid(),
+      title text not null check (length(title) between 1 and 200),
+      description text not null default '',
+      status text not null default 'open'
+        check (status in ('open', 'scheduled', 'shipping', 'shipped', 'failed', 'discarded')),
+      ship_phase text check (ship_phase in ('preparing', 'activating')),
+      source text not null default 'manual' check (source in ('manual', 'release', 'restore', 'builder')),
+      restore_of_seq bigint,
+      scheduled_for timestamptz,
+      schedule_job_id uuid,
+      scheduled_by uuid references admin_users(id) on delete set null,
+      scheduled_by_token uuid references api_tokens(id) on delete set null,
+      ship_job_id uuid,
+      ship_mode text check (ship_mode in ('interactive', 'scheduled')),
+      ship_requested_by uuid references admin_users(id) on delete set null,
+      ship_requested_by_token uuid references api_tokens(id) on delete set null,
+      acknowledge_breaking boolean not null default false,
+      acknowledge_destructive boolean not null default false,
+      deployment_connection_id uuid references deployment_connections(id) on delete set null,
+      deployment_run_id uuid references deployment_runs(id) on delete set null,
+      shipped_at timestamptz,
+      shipped_seq bigint,
+      schema_version_after integer,
+      error jsonb,
+      restore_report jsonb not null default '[]'::jsonb,
+      created_by uuid references admin_users(id) on delete set null,
+      created_by_token uuid references api_tokens(id) on delete set null,
+      version integer not null default 1,
+      created_at timestamptz not null default now(),
+      updated_at timestamptz not null default now()
+    )
+  `.execute(db);
+	await sql`create index change_sets_status_idx on change_sets (status, created_at desc)`.execute(db);
+	await sql`
+    create table schema_drafts (
+      id uuid primary key default gen_random_uuid(),
+      change_set_id uuid not null references change_sets(id) on delete cascade,
+      definition_id uuid not null,
+      kind text not null check (kind in ('collection', 'singleton', 'component')),
+      api_key text not null,
+      base_version integer,
+      definition jsonb,
+      version integer not null default 1,
+      updated_by_type text not null,
+      updated_by_id text,
+      created_at timestamptz not null default now(),
+      updated_at timestamptz not null default now(),
+      constraint schema_drafts_set_definition_uq unique (change_set_id, definition_id)
+    )
+  `.execute(db);
+	await sql`create index schema_drafts_definition_idx on schema_drafts (definition_id)`.execute(db);
+	await sql`
+    create table change_set_items (
+      id uuid primary key default gen_random_uuid(),
+      change_set_id uuid not null references change_sets(id) on delete cascade,
+      kind text not null check (kind in ('entry', 'schema')),
+      position integer not null,
+      entry_id uuid references entries(id) on delete cascade,
+      model_id uuid,
+      locale text,
+      action text check (action in ('publish', 'unpublish')),
+      source_revision_id uuid references content_revisions(id),
+      schema_draft_id uuid references schema_drafts(id) on delete cascade,
+      status text not null default 'pending' check (status in ('pending', 'done', 'failed')),
+      error text,
+      ship_state jsonb,
+      created_at timestamptz not null default now(),
+      constraint change_set_items_shape_check check (
+        (kind = 'entry' and entry_id is not null and model_id is not null and locale is not null
+          and action is not null and schema_draft_id is null)
+        or (kind = 'schema' and schema_draft_id is not null and entry_id is null and source_revision_id is null)
+      )
+    )
+  `.execute(db);
+	await sql`
+    create unique index change_set_items_entry_uq on change_set_items (change_set_id, entry_id, locale)
+    where kind = 'entry'
+  `.execute(db);
+	await sql`create unique index change_set_items_draft_uq on change_set_items (schema_draft_id)`.execute(db);
+	await sql`create index change_set_items_set_idx on change_set_items (change_set_id, position)`.execute(db);
+	await sql`create index change_set_items_entry_idx on change_set_items (entry_id) where entry_id is not null`.execute(db);
+	await sql`
+    create table publication_snapshots (
+      seq bigint primary key,
+      schema_version integer,
+      source text not null,
+      change_set_id uuid references change_sets(id) on delete set null,
+      actor_type text,
+      actor_id text,
+      created_at timestamptz not null default now()
+    )
+  `.execute(db);
+	await sql`create index publication_snapshots_change_set_idx on publication_snapshots (change_set_id)
+    where change_set_id is not null`.execute(db);
+};
+const linkExecutionRecords = async (db) => {
+	await sql`alter table schema_change_jobs
+    add column change_set_id uuid references change_sets(id) on delete set null`.execute(db);
+	await sql`create index schema_change_jobs_change_set_idx on schema_change_jobs (change_set_id)
+    where change_set_id is not null`.execute(db);
+	await sql`alter table deployment_runs
+    add column change_set_id uuid references change_sets(id) on delete set null`.execute(db);
+	await sql`alter table deployment_runs drop constraint deployment_runs_trigger_check`.execute(db);
+	await sql`update deployment_runs set trigger = 'change_set' where trigger = 'release'`.execute(db);
+	await sql`alter table deployment_runs add constraint deployment_runs_trigger_check
+    check (trigger in ('publish', 'change_set', 'schema', 'manual', 'retry'))`.execute(db);
+	await sql`update deployment_connections
+    set trigger_policy = array_replace(trigger_policy, 'release', 'change_set')`.execute(db);
+};
+/** Revisions written by activation-time value conversions (published heads roll to them in the log). */
+const allowConversionRevisions = async (db) => {
+	await sql`alter table content_revisions drop constraint content_revisions_reason_check`.execute(db);
+	await sql`alter table content_revisions add constraint content_revisions_reason_check
+    check (reason in ('create', 'save', 'publish', 'restore', 'duplicate', 'localize', 'conversion'))`.execute(db);
+};
+const backfillSnapshots = async (db) => {
+	await sql`
+    insert into publication_snapshots (seq, schema_version, source, created_at)
+    select s, null, 'legacy',
+      coalesce((select min(published_at) from publication_log where from_seq = s), now())
+    from generate_series(1::bigint, (select last_seq from publication_state)) as s
+  `.execute(db);
+};
+const migrateReleases = async (db) => {
+	await sql`
+    insert into change_sets (id, title, description, status, source, scheduled_for, schedule_job_id,
+      scheduled_by, scheduled_by_token, shipped_at, shipped_seq, error, created_by, version, created_at,
+      updated_at)
+    select id, name, description,
+      case status when 'draft' then 'open' when 'published' then 'shipped' when 'cancelled' then 'discarded'
+        else status end,
+      'release', scheduled_at, schedule_job_id, scheduled_by, scheduled_by_token, executed_at, snapshot_seq,
+      case when error is null then null
+        else jsonb_build_object('code', 'PUBLICATION_FAILED', 'message', error, 'itemId',
+          (select ri.id from release_items ri where ri.release_id = releases.id and ri.status = 'failed' limit 1))
+      end,
+      created_by, version, created_at, updated_at
+    from releases
+  `.execute(db);
+	await sql`
+    insert into change_set_items (id, change_set_id, kind, position, entry_id, model_id, locale, action, status,
+      error, created_at)
+    select id, release_id, 'entry',
+      row_number() over (partition by release_id order by created_at, id) - 1,
+      entry_id, model_id, locale, action, status, error, created_at
+    from release_items
+  `.execute(db);
+	await sql`
+    update jobs set type = 'changeSet.ship',
+      payload = jsonb_build_object('changeSetId', payload->>'releaseId', 'mode', 'scheduled')
+    where type = 'publishing.release' and status in ('pending', 'running')
+  `.execute(db);
+	await sql`update admin_role_permissions set action = 'changes.manage' where action = 'releases.manage'`.execute(db);
+	for (const [from, to] of RELEASE_EVENT_RENAMES) await sql`update webhooks set events = array_replace(events, ${from}, ${to})`.execute(db);
+	await sql`drop table release_items`.execute(db);
+	await sql`drop table releases`.execute(db);
+};
+const up$22 = async (db) => {
+	await createTables(db);
+	await linkExecutionRecords(db);
+	await allowConversionRevisions(db);
+	await backfillSnapshots(db);
+	await migrateReleases(db);
+};
+/** Recreates releases from the change sets that hold only entry items; schema drafts and the ledger go. */
+const restoreReleases = async (db) => {
+	await sql`
+    create table releases (
+      id uuid primary key default gen_random_uuid(),
+      name text not null check (length(name) between 1 and 200),
+      description text not null default '',
+      status text not null default 'draft'
+        check (status in ('draft', 'scheduled', 'published', 'failed', 'cancelled')),
+      scheduled_at timestamptz,
+      schedule_job_id uuid,
+      scheduled_by uuid references admin_users(id) on delete set null,
+      scheduled_by_token uuid references api_tokens(id) on delete set null,
+      executed_at timestamptz,
+      snapshot_seq bigint,
+      error text,
+      version integer not null default 1,
+      created_by uuid references admin_users(id) on delete set null,
+      created_at timestamptz not null default now(),
+      updated_at timestamptz not null default now()
+    )
+  `.execute(db);
+	await sql`create index releases_status_idx on releases (status, created_at)`.execute(db);
+	await sql`
+    create table release_items (
+      id uuid primary key default gen_random_uuid(),
+      release_id uuid not null references releases(id) on delete cascade,
+      entry_id uuid not null references entries(id) on delete cascade,
+      model_id uuid not null,
+      locale text not null,
+      action text not null check (action in ('publish', 'unpublish')),
+      status text not null default 'pending' check (status in ('pending', 'done', 'failed')),
+      error text,
+      created_at timestamptz not null default now(),
+      constraint release_items_entry_locale_uq unique (release_id, entry_id, locale)
+    )
+  `.execute(db);
+	await sql`
+    insert into releases (id, name, description, status, scheduled_at, schedule_job_id, scheduled_by,
+      scheduled_by_token, executed_at, snapshot_seq, error, version, created_by, created_at, updated_at)
+    select id, title, description,
+      case status when 'open' then 'draft' when 'shipped' then 'published' when 'discarded' then 'cancelled'
+        when 'shipping' then 'draft' else status end,
+      scheduled_for, schedule_job_id, scheduled_by, scheduled_by_token, shipped_at, shipped_seq,
+      error->>'message', version, created_by, created_at, updated_at
+    from change_sets cs
+    where not exists (select 1 from change_set_items i where i.change_set_id = cs.id and i.kind = 'schema')
+  `.execute(db);
+	await sql`
+    insert into release_items (id, release_id, entry_id, model_id, locale, action, status, error, created_at)
+    select i.id, i.change_set_id, i.entry_id, i.model_id, i.locale, i.action, i.status, i.error, i.created_at
+    from change_set_items i join releases r on r.id = i.change_set_id
+    where i.kind = 'entry'
+  `.execute(db);
+	await sql`
+    update jobs set type = 'publishing.release', payload = jsonb_build_object('releaseId', payload->>'changeSetId')
+    where type = 'changeSet.ship' and status in ('pending', 'running')
+      and (payload->>'changeSetId')::uuid in (select id from releases)
+  `.execute(db);
+	await sql`delete from jobs where type like 'changeSet.%' and status in ('pending', 'running')`.execute(db);
+	await sql`update admin_role_permissions set action = 'releases.manage' where action = 'changes.manage'`.execute(db);
+	for (const [from, to] of RELEASE_EVENT_RENAMES) await sql`update webhooks set events = array_replace(events, ${to}, ${from})`.execute(db);
+	await sql`update webhooks set events = array_remove(array_remove(events, 'change_set.shipping'),
+    'change_set.discarded')`.execute(db);
+};
+const down$22 = async (db) => {
+	await restoreReleases(db);
+	await sql`alter table content_revisions drop constraint content_revisions_reason_check`.execute(db);
+	await sql`alter table content_revisions add constraint content_revisions_reason_check
+    check (reason in ('create', 'save', 'publish', 'restore', 'duplicate', 'localize')) not valid`.execute(db);
+	await sql`update deployment_connections
+    set trigger_policy = array_replace(trigger_policy, 'change_set', 'release')`.execute(db);
+	await sql`alter table deployment_runs drop constraint deployment_runs_trigger_check`.execute(db);
+	await sql`update deployment_runs set trigger = 'release' where trigger = 'change_set'`.execute(db);
+	await sql`alter table deployment_runs add constraint deployment_runs_trigger_check
+    check (trigger in ('publish', 'release', 'schema', 'manual', 'retry'))`.execute(db);
+	await sql`alter table deployment_runs drop column change_set_id`.execute(db);
+	await sql`alter table schema_change_jobs drop column change_set_id`.execute(db);
+	await sql`drop table publication_snapshots`.execute(db);
+	await sql`drop table change_set_items`.execute(db);
+	await sql`drop table schema_drafts`.execute(db);
+	await sql`drop table change_sets`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261002190000_create_editor_presence_and_content_health.ts
+var _20261002190000_create_editor_presence_and_content_health_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$21,
+	up: () => up$21
+});
+/**
+* Editor experience (plan editor-experience §9):
+*
+* - `editor_presence`: who has an entry open, one row per browser tab, refreshed by a heartbeat and read
+*   with a TTL. UNLOGGED: it is advisory and rebuilt within one heartbeat, so it skips the WAL and is
+*   simply emptied after a crash. Correct across any number of server processes without NOTIFY.
+* - `content_health_findings`: open and recently resolved findings of the health rules per entry and
+*   locale (`*` for the entry as a whole). An evaluation upserts what it found and resolves the rest.
+*/
+const up$21 = async (db) => {
+	await sql`
+    create unlogged table editor_presence (
+      entry_id uuid not null,
+      model_id uuid not null,
+      admin_user_id uuid not null,
+      tab_id text not null check (length(tab_id) between 1 and 64),
+      locale text,
+      started_at timestamptz not null default now(),
+      last_seen_at timestamptz not null default now(),
+      primary key (entry_id, admin_user_id, tab_id)
+    )
+  `.execute(db);
+	await sql`create index editor_presence_model_idx on editor_presence (model_id, last_seen_at)`.execute(db);
+	await sql`create index editor_presence_seen_idx on editor_presence (last_seen_at)`.execute(db);
+	await sql`
+    create table content_health_findings (
+      id uuid primary key default gen_random_uuid(),
+      entry_id uuid not null references entries(id) on delete cascade,
+      model_id uuid not null,
+      locale text not null,
+      rule text not null,
+      subject text not null default '',
+      severity text not null check (severity in ('error', 'warning')),
+      path text,
+      details jsonb not null default '{}'::jsonb,
+      first_seen_at timestamptz not null default now(),
+      last_seen_at timestamptz not null default now(),
+      resolved_at timestamptz,
+      unique (entry_id, locale, rule, subject)
+    )
+  `.execute(db);
+	await sql`create index content_health_findings_open_idx on content_health_findings (rule, last_seen_at desc, id)
+    where resolved_at is null`.execute(db);
+	await sql`create index content_health_findings_resolved_idx on content_health_findings (resolved_at)
+    where resolved_at is not null`.execute(db);
+};
+const down$21 = async (db) => {
+	await sql`drop table content_health_findings`.execute(db);
+	await sql`drop table editor_presence`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261003120000_add_changes_ship_permission.ts
+var _20261003120000_add_changes_ship_permission_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$20,
+	up: () => up$20
+});
+/**
+* `changes.ship` (agentic plan §I): shipping a change set (and scheduling a ship) becomes its own global
+* action, split from `changes.manage`, so a role can prepare change sets without being able to make them
+* live. Every role that holds `changes.manage` today keeps what it could do: it gets `changes.ship` too.
+* The permissions version moves only when grants changed, so running instances reload exactly then.
+*/
+const up$20 = async (db) => {
+	await sql`
+    with granted as (
+      insert into admin_role_permissions (role_id, action, model_id, condition, field_ids)
+      select role_id, 'changes.ship', null, null, null
+      from admin_role_permissions
+      where action = 'changes.manage' and model_id is null
+      on conflict on constraint admin_role_permissions_grant_uq do nothing
+      returning 1
+    )
+    update system_versions set permissions_version = permissions_version + 1, updated_at = now()
+    where exists (select 1 from granted)
+  `.execute(db);
+};
+const down$20 = async (db) => {
+	await sql`
+    with revoked as (
+      delete from admin_role_permissions where action = 'changes.ship' returning 1
+    )
+    update system_versions set permissions_version = permissions_version + 1, updated_at = now()
+    where exists (select 1 from revoked)
+  `.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261003130000_create_sites.ts
+var _20261003130000_create_sites_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$19,
+	up: () => up$19
+});
+/**
+* Sites (plan agentic-ecosystem §H, ADR 0011): one instance hosts many sites with one schema and one login.
+* A site owns its content, media, tokens, change sets, snapshots, app users and usage counters; models,
+* locales, admin users and roles stay instance-wide. Role assignments carry a site (null = every site).
+*
+* Every existing row moves to the primary site (fixed ID below, key `default`). Columns are added with a
+* constant default, which PostgreSQL records in the catalog without rewriting the table, and the default is
+* dropped straight after: from here on every insert must name its site. Copies of the entry's site (heads,
+* the publication log, unique values, findings, schedules, preview tokens) carry a composite foreign key to
+* `entries (id, site_id)`, so a copy can never disagree with its entry.
+*
+* `down` refuses while more than one site exists (merging sites would merge their snapshot ledgers and
+* uniqueness, and widen role assignments). With one site it is lossless.
+*/
+/** The primary site every existing row belongs to. Repeated in constants/sites.ts (migrations never import app code). */
+const PRIMARY_SITE_ID = "00000000-0000-4000-b000-000000000001";
+const PUBLIC_ROLE_ID = "00000000-0000-4000-a000-000000000001";
+const AUTHENTICATED_ROLE_ID = "00000000-0000-4000-a000-000000000002";
+/** Tables whose rows always belong to one site, and what deleting a site does to them. */
+const REQUIRED_SITE_TABLES = [
+	["entries", "restrict"],
+	["entry_heads", "restrict"],
+	["unique_values", "restrict"],
+	["publication_log", "restrict"],
+	["scheduled_publications", "restrict"],
+	["content_health_findings", "restrict"],
+	["media_folders", "restrict"],
+	["media_assets", "restrict"],
+	["change_sets", "restrict"],
+	["app_users", "restrict"],
+	["app_user_roles", "restrict"],
+	["app_oauth_accounts", "restrict"],
+	["publication_state", "cascade"],
+	["publication_snapshots", "cascade"],
+	["media_upload_grants", "cascade"],
+	["preview_tokens", "cascade"],
+	["deployment_connections", "cascade"],
+	["field_reads", "cascade"],
+	["token_reads", "cascade"]
+];
+/** Null means "every site" (network): tokens, webhooks, role assignments; or "not about a site": history. */
+const OPTIONAL_SITE_TABLES = [
+	["api_tokens", "cascade"],
+	["webhooks", "cascade"],
+	["admin_user_roles", "cascade"],
+	["outbox_events", "set null"],
+	["audit_events", "set null"]
+];
+/** Copies of the entry's site, tied to it by a composite foreign key. */
+const ENTRY_SITE_COPIES = [
+	["entry_heads", "cascade"],
+	["unique_values", "cascade"],
+	["publication_log", "restrict"],
+	["scheduled_publications", "cascade"],
+	["content_health_findings", "cascade"],
+	["preview_tokens", "cascade"]
+];
+const createSites = async (db) => {
+	await sql`
+    create table sites (
+      id uuid primary key default gen_random_uuid(),
+      key text not null unique check (key ~ '^[a-z][a-z0-9-]{0,62}$'),
+      name text not null check (length(name) between 1 and 200),
+      is_primary boolean not null default false,
+      version integer not null default 1,
+      created_at timestamptz not null default now(),
+      updated_at timestamptz not null default now()
+    )
+  `.execute(db);
+	await sql`create unique index sites_single_primary_uq on sites (is_primary) where is_primary`.execute(db);
+	await sql`insert into sites (id, key, name, is_primary) values (${PRIMARY_SITE_ID}, 'default', 'Default site', true)`.execute(db);
+	await sql`
+    create table site_app_roles (
+      site_id uuid not null references sites(id) on delete cascade,
+      audience text not null check (audience in ('public', 'authenticated')),
+      role_id uuid not null references app_roles(id) on delete cascade,
+      created_at timestamptz not null default now(),
+      primary key (site_id, audience, role_id)
+    )
+  `.execute(db);
+	await sql`create index site_app_roles_role_idx on site_app_roles (role_id)`.execute(db);
+	await sql`
+    insert into site_app_roles (site_id, audience, role_id) values
+      (${PRIMARY_SITE_ID}, 'public', ${PUBLIC_ROLE_ID}),
+      (${PRIMARY_SITE_ID}, 'authenticated', ${AUTHENTICATED_ROLE_ID})
+  `.execute(db);
+};
+const siteForeignKey = async (db, table, onDelete) => {
+	const name = sql.id(`${table}_site_fk`);
+	await sql`alter table ${sql.table(table)} add constraint ${name}
+    foreign key (site_id) references sites(id) on delete ${sql.raw(onDelete)} not valid`.execute(db);
+	await sql`alter table ${sql.table(table)} validate constraint ${name}`.execute(db);
+};
+const addSiteColumns = async (db) => {
+	for (const [table, onDelete] of REQUIRED_SITE_TABLES) {
+		await sql`alter table ${sql.table(table)}
+      add column site_id uuid not null default ${sql.lit(PRIMARY_SITE_ID)}::uuid`.execute(db);
+		await sql`alter table ${sql.table(table)} alter column site_id drop default`.execute(db);
+		await siteForeignKey(db, table, onDelete);
+	}
+	for (const [table, onDelete] of OPTIONAL_SITE_TABLES) {
+		await sql`alter table ${sql.table(table)} add column site_id uuid`.execute(db);
+		await siteForeignKey(db, table, onDelete);
+	}
+	await sql`
+    update api_tokens t set site_id = ${PRIMARY_SITE_ID}
+    from admin_roles r where r.id = t.role_id and r.kind = 'delivery'
+  `.execute(db);
+};
+const tieCopiesToEntries = async (db) => {
+	await sql`alter table entries add constraint entries_id_site_uq unique (id, site_id)`.execute(db);
+	for (const [table, onDelete] of ENTRY_SITE_COPIES) {
+		const name = sql.id(`${table}_entry_site_fk`);
+		await sql`alter table ${sql.table(table)} add constraint ${name}
+      foreign key (entry_id, site_id) references entries(id, site_id) on delete ${sql.raw(onDelete)} not valid`.execute(db);
+		await sql`alter table ${sql.table(table)} validate constraint ${name}`.execute(db);
+	}
+};
+const rekeyContent = async (db) => {
+	await sql`drop index entries_model_idx`.execute(db);
+	await sql`create index entries_model_idx on entries (site_id, model_id, created_at) where deleted_at is null`.execute(db);
+	await sql`drop index entry_heads_model_locale_state_idx`.execute(db);
+	await sql`create index entry_heads_model_locale_state_idx on entry_heads (site_id, model_id, locale, state)`.execute(db);
+	await sql`alter table unique_values drop constraint unique_values_pkey`.execute(db);
+	await sql`alter table unique_values add constraint unique_values_pkey
+    primary key (site_id, field_id, locale, state, value_hash)`.execute(db);
+	await sql`alter table publication_state drop constraint publication_state_pkey`.execute(db);
+	await sql`alter table publication_state drop column id`.execute(db);
+	await sql`alter table publication_state add constraint publication_state_pkey primary key (site_id)`.execute(db);
+	await sql`alter table publication_snapshots drop constraint publication_snapshots_pkey`.execute(db);
+	await sql`alter table publication_snapshots add constraint publication_snapshots_pkey primary key (site_id, seq)`.execute(db);
+	await sql`drop index publication_log_to_seq_idx`.execute(db);
+	await sql`create index publication_log_to_seq_idx on publication_log (site_id, to_seq) where to_seq is not null`.execute(db);
+	await sql`drop index publication_log_model_seq_idx`.execute(db);
+	await sql`create index publication_log_model_seq_idx on publication_log (site_id, model_id, from_seq)`.execute(db);
+	await sql`create index scheduled_publications_site_idx on scheduled_publications (site_id, run_at)`.execute(db);
+	await sql`drop index content_health_findings_open_idx`.execute(db);
+	await sql`create index content_health_findings_open_idx on content_health_findings
+    (site_id, rule, last_seen_at desc, id) where resolved_at is null`.execute(db);
+	await sql`drop index change_sets_status_idx`.execute(db);
+	await sql`create index change_sets_status_idx on change_sets (site_id, status, created_at desc)`.execute(db);
+};
+const rekeyMedia = async (db) => {
+	await sql`alter table media_folders add constraint media_folders_id_site_uq unique (id, site_id)`.execute(db);
+	await sql`drop index media_folders_sibling_name_uq`.execute(db);
+	await sql`create unique index media_folders_sibling_name_uq on media_folders
+    (site_id, coalesce(parent_id, '00000000-0000-0000-0000-000000000000'::uuid), lower(name))`.execute(db);
+	await sql`alter table media_folders drop constraint media_folders_parent_id_fkey`.execute(db);
+	await sql`alter table media_folders add constraint media_folders_parent_id_fkey
+    foreign key (parent_id, site_id) references media_folders(id, site_id) on delete restrict`.execute(db);
+	await sql`alter table media_assets drop constraint media_assets_folder_id_fkey`.execute(db);
+	await sql`alter table media_assets add constraint media_assets_folder_id_fkey
+    foreign key (folder_id, site_id) references media_folders(id, site_id) on delete set null (folder_id)`.execute(db);
+	await sql`drop index media_assets_created_idx`.execute(db);
+	await sql`create index media_assets_created_idx on media_assets (site_id, created_at, id) where deleted_at is null`.execute(db);
+};
+const rekeyAppUsersAndUsage = async (db) => {
+	await sql`drop index app_users_email_uq`.execute(db);
+	await sql`create unique index app_users_email_uq on app_users (site_id, lower(email)) where deleted_at is null`.execute(db);
+	await sql`drop index app_users_created_idx`.execute(db);
+	await sql`create index app_users_created_idx on app_users (site_id, created_at desc, id desc)
+    where deleted_at is null`.execute(db);
+	await sql`alter table app_oauth_accounts drop constraint app_oauth_accounts_identity_uq`.execute(db);
+	await sql`alter table app_oauth_accounts add constraint app_oauth_accounts_identity_uq
+    unique (site_id, provider, provider_user_id)`.execute(db);
+	await sql`alter table field_reads drop constraint field_reads_pkey`.execute(db);
+	await sql`alter table field_reads add constraint field_reads_pkey
+    primary key (day, site_id, model_id, field_path, principal_key, selection)`.execute(db);
+	await sql`alter table token_reads drop constraint token_reads_pkey`.execute(db);
+	await sql`alter table token_reads add constraint token_reads_pkey primary key (day, site_id, principal_key)`.execute(db);
+};
+/** A role is assigned on one site or on every site (null). */
+const siteRoleAssignments = async (db) => {
+	await sql`alter table admin_user_roles drop constraint admin_user_roles_pk`.execute(db);
+	await sql`alter table admin_user_roles add column id uuid not null default gen_random_uuid()`.execute(db);
+	await sql`alter table admin_user_roles add constraint admin_user_roles_pk primary key (id)`.execute(db);
+	await sql`alter table admin_user_roles add constraint admin_user_roles_assignment_uq
+    unique nulls not distinct (admin_user_id, role_id, site_id)`.execute(db);
+	await sql`alter table admin_invitations
+    add column role_assignments jsonb not null default '[]'::jsonb`.execute(db);
+	await sql`
+    update admin_invitations set role_assignments = coalesce(
+      (select jsonb_agg(jsonb_build_object('roleId', r, 'siteId', null)) from unnest(role_ids) as r), '[]'::jsonb)
+  `.execute(db);
+	await sql`alter table admin_invitations drop column role_ids`.execute(db);
+};
+const up$19 = async (db) => {
+	await createSites(db);
+	await addSiteColumns(db);
+	await tieCopiesToEntries(db);
+	await rekeyContent(db);
+	await rekeyMedia(db);
+	await rekeyAppUsersAndUsage(db);
+	await siteRoleAssignments(db);
+};
+const assertSingleSite = async (db) => {
+	const { rows } = await sql`select count(*)::text as count from sites`.execute(db);
+	if (Number(rows[0]?.count ?? 0) > 1) throw new Error("Cannot roll back sites while more than one site exists: merging them would merge their snapshot ledgers and uniqueness and widen role assignments. Delete the other sites first.");
+};
+const down$19 = async (db) => {
+	await assertSingleSite(db);
+	await sql`alter table admin_invitations add column role_ids uuid[] not null default '{}'::uuid[]`.execute(db);
+	await sql`
+    update admin_invitations set role_ids = coalesce(
+      (select array_agg(distinct (a->>'roleId')::uuid) from jsonb_array_elements(role_assignments) as a), '{}'::uuid[])
+  `.execute(db);
+	await sql`alter table admin_invitations drop column role_assignments`.execute(db);
+	await sql`
+    delete from admin_user_roles a using admin_user_roles b
+    where a.admin_user_id = b.admin_user_id and a.role_id = b.role_id and a.id > b.id
+  `.execute(db);
+	await sql`alter table admin_user_roles drop constraint admin_user_roles_assignment_uq`.execute(db);
+	await sql`alter table admin_user_roles drop constraint admin_user_roles_pk`.execute(db);
+	await sql`alter table admin_user_roles drop column id`.execute(db);
+	await sql`alter table admin_user_roles add constraint admin_user_roles_pk primary key (admin_user_id, role_id)`.execute(db);
+	await sql`alter table token_reads drop constraint token_reads_pkey`.execute(db);
+	await sql`alter table token_reads add constraint token_reads_pkey primary key (day, principal_key)`.execute(db);
+	await sql`alter table field_reads drop constraint field_reads_pkey`.execute(db);
+	await sql`alter table field_reads add constraint field_reads_pkey
+    primary key (day, model_id, field_path, principal_key, selection)`.execute(db);
+	await sql`alter table app_oauth_accounts drop constraint app_oauth_accounts_identity_uq`.execute(db);
+	await sql`alter table app_oauth_accounts add constraint app_oauth_accounts_identity_uq
+    unique (provider, provider_user_id)`.execute(db);
+	await sql`drop index app_users_created_idx`.execute(db);
+	await sql`create index app_users_created_idx on app_users (created_at desc, id desc) where deleted_at is null`.execute(db);
+	await sql`drop index app_users_email_uq`.execute(db);
+	await sql`create unique index app_users_email_uq on app_users (lower(email)) where deleted_at is null`.execute(db);
+	await sql`drop index media_assets_created_idx`.execute(db);
+	await sql`create index media_assets_created_idx on media_assets (created_at, id) where deleted_at is null`.execute(db);
+	await sql`alter table media_assets drop constraint media_assets_folder_id_fkey`.execute(db);
+	await sql`alter table media_assets add constraint media_assets_folder_id_fkey
+    foreign key (folder_id) references media_folders(id) on delete set null`.execute(db);
+	await sql`alter table media_folders drop constraint media_folders_parent_id_fkey`.execute(db);
+	await sql`alter table media_folders add constraint media_folders_parent_id_fkey
+    foreign key (parent_id) references media_folders(id) on delete restrict`.execute(db);
+	await sql`drop index media_folders_sibling_name_uq`.execute(db);
+	await sql`create unique index media_folders_sibling_name_uq on media_folders
+    (coalesce(parent_id, '00000000-0000-0000-0000-000000000000'::uuid), lower(name))`.execute(db);
+	await sql`alter table media_folders drop constraint media_folders_id_site_uq`.execute(db);
+	await sql`drop index change_sets_status_idx`.execute(db);
+	await sql`create index change_sets_status_idx on change_sets (status, created_at desc)`.execute(db);
+	await sql`drop index content_health_findings_open_idx`.execute(db);
+	await sql`create index content_health_findings_open_idx on content_health_findings (rule, last_seen_at desc, id)
+    where resolved_at is null`.execute(db);
+	await sql`drop index scheduled_publications_site_idx`.execute(db);
+	await sql`drop index publication_log_model_seq_idx`.execute(db);
+	await sql`create index publication_log_model_seq_idx on publication_log (model_id, from_seq)`.execute(db);
+	await sql`drop index publication_log_to_seq_idx`.execute(db);
+	await sql`create index publication_log_to_seq_idx on publication_log (to_seq) where to_seq is not null`.execute(db);
+	await sql`alter table publication_snapshots drop constraint publication_snapshots_pkey`.execute(db);
+	await sql`alter table publication_snapshots add constraint publication_snapshots_pkey primary key (seq)`.execute(db);
+	await sql`alter table publication_state drop constraint publication_state_pkey`.execute(db);
+	await sql`alter table publication_state add column id boolean not null default true check (id)`.execute(db);
+	await sql`alter table publication_state add constraint publication_state_pkey primary key (id)`.execute(db);
+	await sql`alter table unique_values drop constraint unique_values_pkey`.execute(db);
+	await sql`alter table unique_values add constraint unique_values_pkey
+    primary key (field_id, locale, state, value_hash)`.execute(db);
+	await sql`drop index entry_heads_model_locale_state_idx`.execute(db);
+	await sql`create index entry_heads_model_locale_state_idx on entry_heads (model_id, locale, state)`.execute(db);
+	await sql`drop index entries_model_idx`.execute(db);
+	await sql`create index entries_model_idx on entries (model_id, created_at) where deleted_at is null`.execute(db);
+	for (const [table] of ENTRY_SITE_COPIES) await sql`alter table ${sql.table(table)} drop constraint ${sql.id(`${table}_entry_site_fk`)}`.execute(db);
+	await sql`alter table entries drop constraint entries_id_site_uq`.execute(db);
+	for (const [table] of [...REQUIRED_SITE_TABLES, ...OPTIONAL_SITE_TABLES]) await sql`alter table ${sql.table(table)} drop column site_id`.execute(db);
+	await sql`drop table site_app_roles`.execute(db);
+	await sql`drop table sites`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261003140200_enqueue_field_index_layout.ts
+var _20261003140200_enqueue_field_index_layout_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$18,
+	up: () => up$18
+});
+/**
+* Field index layout v2 (sites plan §H): per-field expression indexes on `entry_heads` lead with `site_id`,
+* because every content query names its site. Building them is `CREATE INDEX CONCURRENTLY`, which cannot run
+* in a migration's transaction and may take a while, so this migration only enqueues the
+* `schema.fieldIndexLayout` job (schema/planner/indexLayout.ts), which rebuilds the indexes and drops the
+* old ones while the instance keeps serving. Nothing to rebuild (no field index yet, e.g. a new install):
+* no job.
+*/
+const JOB_TYPE$1 = "schema.fieldIndexLayout";
+const IDEMPOTENCY_KEY$1 = "schema.fieldIndexLayout:v2";
+const up$18 = async (db) => {
+	await sql`
+    insert into jobs (type, payload, max_attempts, idempotency_key)
+    select ${JOB_TYPE$1}, '{}'::jsonb, 5, ${IDEMPOTENCY_KEY$1}
+    where exists (
+      select 1 from pg_catalog.pg_index i
+      join pg_catalog.pg_class c on c.oid = i.indexrelid
+      where i.indrelid = 'entry_heads'::regclass and c.relname like 'eh\\_%'
+    )
+    on conflict do nothing
+  `.execute(db);
+};
+/** The layout job is idempotent; rolling back only forgets it if it has not run yet. */
+const down$18 = async (db) => {
+	await sql`delete from jobs where idempotency_key = ${IDEMPOTENCY_KEY$1} and status = 'pending'`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261003140500_change_set_items_site_and_preview_entry.ts
+var _20261003140500_change_set_items_site_and_preview_entry_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$17,
+	up: () => up$17
+});
+/**
+* Sites, publishing (plan agentic-ecosystem §H, package G5).
+*
+* - `change_set_items.site_id`: a copy of the set's site, tied to the set and to the item's entry by
+*   composite foreign keys, so a change set can never hold another site's entry (schema items have no entry;
+*   their entry key is null and the entry foreign key does not apply).
+* - `preview_tokens.entry_id` becomes required: a preview token previews one entry of one site. Model-wide
+*   tokens (short-lived by design) are deleted; whoever needs one opens the entry's preview again.
+*/
+const up$17 = async (db) => {
+	await sql`alter table change_sets add constraint change_sets_id_site_uq unique (id, site_id)`.execute(db);
+	await sql`alter table change_set_items add column site_id uuid`.execute(db);
+	await sql`
+    update change_set_items i set site_id = s.site_id from change_sets s where s.id = i.change_set_id
+  `.execute(db);
+	await sql`alter table change_set_items alter column site_id set not null`.execute(db);
+	await sql`alter table change_set_items add constraint change_set_items_set_site_fk
+    foreign key (change_set_id, site_id) references change_sets(id, site_id) on delete cascade not valid`.execute(db);
+	await sql`alter table change_set_items validate constraint change_set_items_set_site_fk`.execute(db);
+	await sql`alter table change_set_items add constraint change_set_items_entry_site_fk
+    foreign key (entry_id, site_id) references entries(id, site_id) on delete cascade not valid`.execute(db);
+	await sql`alter table change_set_items validate constraint change_set_items_entry_site_fk`.execute(db);
+	await sql`delete from preview_tokens where entry_id is null`.execute(db);
+	await sql`alter table preview_tokens alter column entry_id set not null`.execute(db);
+};
+const down$17 = async (db) => {
+	await sql`alter table preview_tokens alter column entry_id drop not null`.execute(db);
+	await sql`alter table change_set_items drop constraint change_set_items_entry_site_fk`.execute(db);
+	await sql`alter table change_set_items drop constraint change_set_items_set_site_fk`.execute(db);
+	await sql`alter table change_set_items drop column site_id`.execute(db);
+	await sql`alter table change_sets drop constraint change_sets_id_site_uq`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261003150000_widen_deployment_providers.ts
+var _20261003150000_widen_deployment_providers_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$16,
+	up: () => up$16
+});
+/**
+* Deploy adapters (plan agentic-ecosystem §B2): deployment connections may use the Vercel and Netlify
+* providers. The check is re-added NOT VALID and then validated, so existing rows are checked without
+* blocking writes for the scan.
+*/
+const WIDENED = sql`provider in ('generic_webhook', 'cloudflare_pages', 'vercel', 'netlify', 'github')`;
+const ORIGINAL = sql`provider in ('generic_webhook', 'cloudflare_pages', 'github')`;
+const replaceCheck = async (db, check) => {
+	await sql`alter table deployment_connections drop constraint deployment_connections_provider_check`.execute(db);
+	await sql`alter table deployment_connections add constraint deployment_connections_provider_check
+    check (${check}) not valid`.execute(db);
+	await sql`alter table deployment_connections validate constraint deployment_connections_provider_check`.execute(db);
+};
+const up$16 = async (db) => {
+	await replaceCheck(db, WIDENED);
+};
+/** Refuses while Vercel or Netlify connections exist: a down migration never deletes user data. */
+const down$16 = async (db) => {
+	const { rows } = await sql`
+    select count(*)::text as count from deployment_connections where provider in ('vercel', 'netlify')
+  `.execute(db);
+	const count = Number(rows[0]?.count ?? 0);
+	if (count > 0) throw new Error(`Cannot roll back: ${count} deployment connection(s) use Vercel or Netlify. Delete them in the admin (Publishing → Deployments) first, then run the rollback again.`);
+	await replaceCheck(db, ORIGINAL);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261003160000_create_assist_runs.ts
+var _20261003160000_create_assist_runs_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$15,
+	up: () => up$15
+});
+/**
+* Editor assists (plan agentic-ecosystem §A0, §I): one `assist_runs` row per assist request (who, which
+* action, which model, token usage, duration, outcome). Never prompt or response text. Content-ops runs are
+* jobs: `job_id` points at the job whose result holds the proposals. Pruned by the retention job after
+* USAGE_RETENTION_DAYS. Change sets an assist run opens are marked `source = 'assist'`.
+*/
+const ACTIONS = sql`action in ('alt_text', 'summarize', 'translate', 'rewrite', 'schema_draft', 'content_ops')`;
+const SOURCES_WIDENED = sql`source in ('manual', 'release', 'restore', 'builder', 'assist')`;
+const SOURCES_ORIGINAL = sql`source in ('manual', 'release', 'restore', 'builder')`;
+const replaceSourceCheck = async (db, check) => {
+	await sql`alter table change_sets drop constraint change_sets_source_check`.execute(db);
+	await sql`alter table change_sets add constraint change_sets_source_check check (${check}) not valid`.execute(db);
+	await sql`alter table change_sets validate constraint change_sets_source_check`.execute(db);
+};
+const up$15 = async (db) => {
+	await db.schema.createTable("assist_runs").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("site_id", "uuid", (col) => col.notNull().references("sites.id").onDelete("cascade")).addColumn("actor_type", "text", (col) => col.notNull()).addColumn("actor_id", "text", (col) => col.notNull()).addColumn("action", "text", (col) => col.notNull().check(ACTIONS)).addColumn("rule", "text").addColumn("provider", "text", (col) => col.notNull()).addColumn("model", "text", (col) => col.notNull()).addColumn("input_tokens", "integer", (col) => col.notNull().defaultTo(0)).addColumn("output_tokens", "integer", (col) => col.notNull().defaultTo(0)).addColumn("duration_ms", "integer", (col) => col.notNull().defaultTo(0)).addColumn("status", "text", (col) => col.notNull().check(sql`status in ('queued', 'running', 'succeeded', 'failed')`)).addColumn("error_code", "text").addColumn("job_id", "uuid", (col) => col.references("jobs.id").onDelete("set null")).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("finished_at", "timestamptz").execute();
+	await db.schema.createIndex("assist_runs_site_created_idx").on("assist_runs").columns(["site_id", "created_at"]).execute();
+	await db.schema.createIndex("assist_runs_created_idx").on("assist_runs").column("created_at").execute();
+	await replaceSourceCheck(db, SOURCES_WIDENED);
+};
+/** Refuses while change sets opened by assist exist: a down migration never deletes user data. */
+const down$15 = async (db) => {
+	const { rows } = await sql`
+    select count(*)::text as count from change_sets where source = 'assist'
+  `.execute(db);
+	const count = Number(rows[0]?.count ?? 0);
+	if (count > 0) throw new Error(`Cannot roll back: ${count} change set(s) were opened by assist. Discard and delete them first, then run the rollback again.`);
+	await replaceSourceCheck(db, SOURCES_ORIGINAL);
+	await db.schema.dropTable("assist_runs").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261003170000_audit_events_seq.ts
+var _20261003170000_audit_events_seq_exports$2 = /* @__PURE__ */ __exportAll({
+	down: () => down$14,
+	up: () => up$14
+});
+/**
+* `audit_events.seq`: a monotonic tiebreaker after `occurred_at`, so events written in the same instant (one
+* transaction shares `now()`; SQLite and MySQL store milliseconds) list in the order they were written. The
+* UUID `id` is random and cannot order them. Adding an identity column rewrites the table once; existing rows
+* are numbered in the order the rewrite reads them. No index: the audit queries filter and sort by
+* `occurred_at` first, and `seq` only breaks ties.
+*/
+const up$14 = async (db) => {
+	await db.schema.alterTable("audit_events").addColumn("seq", "bigint", (col) => col.notNull().generatedAlwaysAsIdentity()).execute();
+};
+const down$14 = async (db) => {
+	await db.schema.alterTable("audit_events").dropColumn("seq").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261004120000_models_site_scope.ts
+var _20261004120000_models_site_scope_exports$2 = /* @__PURE__ */ __exportAll({
+	down: () => down$13,
+	up: () => up$13
+});
+/**
+* Per-site schema (plan site-schema): a definition belongs to one site (`models.site_id`) or is shared by every
+* site (null, what every existing definition becomes). API IDs are unique per scope; whether a shared API ID
+* collides with a site's is the planner's rule (every view a change touches must stay valid), checked under
+* the schema lock. `schema_drafts.shared` says whether a change set's draft creates a shared definition; a
+* draft otherwise takes its change set's site. Nothing here runs DDL per model (CONTRIBUTING.md rule 1).
+*
+* `down` refuses while any definition belongs to a site: two sites may each have a `post`, which one index
+* over `lower(api_key)` cannot hold. Share or delete them first; then `down` is lossless.
+*/
+const NIL_UUID$1 = "00000000-0000-0000-0000-000000000000";
+const up$13 = async (db) => {
+	await sql`alter table models add column site_id uuid references sites (id)`.execute(db);
+	await sql`create index models_site_idx on models (site_id)`.execute(db);
+	await sql`drop index models_api_key_uq`.execute(db);
+	await sql`
+    create unique index models_api_key_uq on models (coalesce(site_id, ${sql.lit(NIL_UUID$1)}::uuid), lower(api_key))
+    where deleted_at is null
+  `.execute(db);
+	await sql`alter table schema_drafts add column shared boolean not null default false`.execute(db);
+};
+const down$13 = async (db) => {
+	const { rows } = await sql`select count(*)::text as count from models where site_id is not null`.execute(db);
+	if (Number(rows[0]?.count ?? 0) > 0) throw new Error("Cannot roll back per-site schema while definitions belong to a site: two sites may share an API ID. Share or delete the site definitions first.");
+	await sql`alter table schema_drafts drop column shared`.execute(db);
+	await sql`drop index models_api_key_uq`.execute(db);
+	await sql`create unique index models_api_key_uq on models (lower(api_key)) where deleted_at is null`.execute(db);
+	await sql`drop index models_site_idx`.execute(db);
+	await sql`alter table models drop column site_id`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261004130000_site_seo_settings.ts
+var _20261004130000_site_seo_settings_exports$2 = /* @__PURE__ */ __exportAll({
+	down: () => down$12,
+	up: () => up$12
+});
+/**
+* SEO defaults per site (plan seo-fields): `sites.seo_defaults` holds the site's default texts per locale, its
+* default social image and Twitter handle (`SeoDefaults` in @shapio/schema). Nullable, no default: a
+* catalog-only change, no table rewrite.
+*
+* `site.settings` is the site action that edits them. Every role that holds `publishing.manage` (everything
+* about what a site publishes) gets it; the built-in owner and admin roles get it from `ensureSystemRoles`.
+* The permissions version moves only when grants changed, so running instances reload exactly then.
+*/
+const up$12 = async (db) => {
+	await sql`alter table sites add column seo_defaults jsonb`.execute(db);
+	await sql`
+    with granted as (
+      insert into admin_role_permissions (role_id, action, model_id, condition, field_ids)
+      select role_id, 'site.settings', null, null, null
+      from admin_role_permissions
+      where action = 'publishing.manage' and model_id is null
+      on conflict on constraint admin_role_permissions_grant_uq do nothing
+      returning 1
+    )
+    update system_versions set permissions_version = permissions_version + 1, updated_at = now()
+    where exists (select 1 from granted)
+  `.execute(db);
+};
+const down$12 = async (db) => {
+	await sql`
+    with revoked as (
+      delete from admin_role_permissions where action = 'site.settings' returning 1
+    )
+    update system_versions set permissions_version = permissions_version + 1, updated_at = now()
+    where exists (select 1 from revoked)
+  `.execute(db);
+	await sql`alter table sites drop column seo_defaults`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261005120000_entry_heads_entry_created_at.ts
+var _20261005120000_entry_heads_entry_created_at_exports$2 = /* @__PURE__ */ __exportAll({
+	down: () => down$11,
+	up: () => up$11
+});
+/**
+* Delivery perf 2 (ADR 0001 amendment): the entry's `created_at` on each head (`entry_created_at`), so a list
+* in the default newest-first order walks `entry_heads_entry_order_idx` and stops at the page instead of
+* joining every matching head to `entries` and sorting them. `entries.created_at` never changes, and every head
+* insert copies it (repositories `entryHeads.insert`, `transferImport.insertHead`).
+*
+* The column is added nullable (a catalog-only change) and backfilled here in batches. The index is built
+* here on an empty table (a new install). With heads present it is built `CONCURRENTLY`, which cannot run
+* in a migration's transaction, by the `schema.entryOrderIndex` job this migration enqueues
+* (schema/planner/indexes.ts), so writes continue while it builds; queries are correct without it.
+*/
+const INDEX$2 = "entry_heads_entry_order_idx";
+const JOB_TYPE = "schema.entryOrderIndex";
+const IDEMPOTENCY_KEY = "schema.entryOrderIndex:v1";
+const BATCH$1 = 5e3;
+const up$11 = async (db) => {
+	await sql`alter table entry_heads add column entry_created_at timestamptz`.execute(db);
+	for (;;) {
+		const result = await sql`
+      update entry_heads h set entry_created_at = e.created_at
+      from entries e
+      where e.id = h.entry_id and (h.entry_id, h.locale, h.state) in (
+        select entry_id, locale, state from entry_heads where entry_created_at is null limit ${BATCH$1}
+      )
+    `.execute(db);
+		if (Number(result.numAffectedRows ?? 0n) < BATCH$1) break;
+	}
+	const { rows } = await sql`select exists (select 1 from entry_heads) as present`.execute(db);
+	if (rows[0]?.present) {
+		await sql`
+      insert into jobs (type, payload, max_attempts, idempotency_key)
+      values (${JOB_TYPE}, '{}'::jsonb, 5, ${IDEMPOTENCY_KEY})
+      on conflict do nothing
+    `.execute(db);
+		return;
+	}
+	await sql`
+    create index ${sql.id(INDEX$2)} on entry_heads (site_id, model_id, state, entry_created_at desc, entry_id)
+  `.execute(db);
+};
+const down$11 = async (db) => {
+	await sql`delete from jobs where idempotency_key = ${IDEMPOTENCY_KEY} and status = 'pending'`.execute(db);
+	await sql`drop index if exists ${sql.id(INDEX$2)}`.execute(db);
+	await sql`alter table entry_heads drop column entry_created_at`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/20261006120000_system_versions_release.ts
+var _20261006120000_system_versions_release_exports = /* @__PURE__ */ __exportAll({
+	dialectNeutral: () => true,
+	down: () => down$10,
+	up: () => up$10
+});
+const up$10 = async (db) => {
+	await db.schema.alterTable("system_versions").addColumn("release", "text").execute();
+};
+const down$10 = async (db) => {
+	await db.schema.alterTable("system_versions").dropColumn("release").execute();
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/mysql/0001_baseline.ts
+var _0001_baseline_exports$1 = /* @__PURE__ */ __exportAll({
+	down: () => down$9,
+	up: () => up$9
+});
+/**
+* MySQL baseline: Shapio's whole system schema as of PostgreSQL migration
+* `20261003160000_create_assist_runs`, in one step, with the rows those migrations seed. Later migrations
+* follow the twin rule (`./index.ts`).
+*
+* Written from the migrated PostgreSQL catalog (types in `db/mysql/codec.ts`), then kept honest by
+* `test/mysqlBaseline.int.test.ts`, which migrates both databases and compares the logical schema and the
+* seeded rows. Differences that are deliberate:
+* - Tables default to `utf8mb4` with the binary `utf8mb4_0900_bin` collation (case-sensitive, NO PAD,
+*   code point order); UUIDs are `CHAR(36)` ASCII with a case-insensitive collation, like PostgreSQL's uuid
+*   input. Text in a key or index is `VARCHAR(n)` (`LONGTEXT` cannot be indexed whole); other text is
+*   `LONGTEXT`.
+* - Partial unique indexes are unique indexes on `(case when <predicate> then <column> end)` key parts:
+*   MySQL has no partial index, and a NULL key part never conflicts. Partial non-unique indexes are plain.
+*   The three `NULLS NOT DISTINCT` constraints index `coalesce(column, '')`.
+* - `entry_heads_data_gin` (GIN, containment) has no MySQL equivalent and is left out.
+* - `entry_heads.change_seq` has no default: the MySQL plugin fills it from
+*   `sequence_entry_heads_change_seq` (AUTO_INCREMENT, no lock held to commit). UUID keys default to
+*   `uuid()` but the plugin fills them first (v4, known before the insert, for emulated RETURNING).
+* - `media_assets_folder_id_fkey` sets only `folder_id` to null on delete (PostgreSQL's column list),
+*   which MySQL expresses as a trigger; immutability triggers signal SQLSTATE 45000. With binary logging
+*   on, creating triggers needs SUPER or `log_bin_trust_function_creators = 1` (documentation/mysql.md).
+* - `editor_presence` is a plain table (UNLOGGED has no MySQL meaning).
+* - MySQL-only tables: `advisory_locks` (transaction-level advisory locks as row locks),
+*   `notifications` (LISTEN/NOTIFY as a polled table), `sequence_entry_heads_change_seq`.
+* - Identity keys are `AUTO_INCREMENT`. MySQL creates an index for a foreign key no index covers.
+* MySQL runs DDL outside transactions: if the baseline fails part-way, drop the database's tables and
+* migrate again.
+*/
+const STATEMENTS$1 = [
+	`create table \`system_versions\` (
+  \`id\` tinyint(1) not null default 1,
+  \`schema_version\` int not null default 0,
+  \`permissions_version\` int not null default 0,
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`system_versions_pkey\` primary key (\`id\`),
+  constraint \`system_versions_id_check\` check (\`id\` = 1)
+)`,
+	`create table \`jobs\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`type\` longtext not null,
+  \`payload\` json not null default (json_object()),
+  \`status\` longtext not null default ('pending'),
+  \`priority\` int not null default 0,
+  \`run_at\` datetime(6) not null default current_timestamp(6),
+  \`attempts\` int not null default 0,
+  \`max_attempts\` int not null default 10,
+  \`idempotency_key\` varchar(512),
+  \`locked_by\` longtext,
+  \`locked_until\` datetime(6),
+  \`checkpoint\` json,
+  \`result\` json,
+  \`last_error\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`finished_at\` datetime(6),
+  constraint \`jobs_pkey\` primary key (\`id\`),
+  constraint \`jobs_max_attempts_check\` check ((\`max_attempts\` > 0)),
+  constraint \`jobs_status_check\` check ((\`status\` in ('pending', 'running', 'succeeded', 'dead')))
+)`,
+	`create table \`outbox_events\` (
+  \`id\` bigint not null auto_increment,
+  \`event_id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`type\` longtext not null,
+  \`aggregate_type\` longtext not null,
+  \`aggregate_id\` longtext not null,
+  \`payload\` json not null default (json_object()),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`dispatched_at\` datetime(6),
+  \`dispatch_attempts\` int not null default 0,
+  \`last_dispatch_error\` longtext,
+  \`site_id\` char(36) character set ascii collate ascii_general_ci,
+  unique key \`outbox_events_event_id_key\` (\`event_id\`),
+  constraint \`outbox_events_pkey\` primary key (\`id\`)
+)`,
+	`create table \`audit_events\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`occurred_at\` datetime(6) not null default current_timestamp(6),
+  \`actor_type\` varchar(64) not null,
+  \`actor_id\` varchar(255),
+  \`action\` longtext not null,
+  \`target_type\` varchar(64),
+  \`target_id\` varchar(255),
+  \`outcome\` longtext not null,
+  \`request_id\` longtext,
+  \`ip\` longtext,
+  \`metadata\` json not null default (json_object()),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci,
+  constraint \`audit_events_pkey\` primary key (\`id\`),
+  constraint \`audit_events_actor_type_check\` check ((\`actor_type\` in ('admin', 'app_user', 'token', 'anonymous', 'system'))),
+  constraint \`audit_events_outcome_check\` check ((\`outcome\` in ('success', 'failure')))
+)`,
+	`create table \`admin_users\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`email\` varchar(255) not null,
+  \`name\` longtext not null default (''),
+  \`password_hash\` longtext not null,
+  \`status\` longtext not null default ('active'),
+  \`last_login_at\` datetime(6),
+  \`password_changed_at\` datetime(6) not null default current_timestamp(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`admin_users_email_key\` (\`email\`),
+  constraint \`admin_users_pkey\` primary key (\`id\`),
+  constraint \`admin_users_status_check\` check ((\`status\` in ('active', 'disabled')))
+)`,
+	`create table \`admin_roles\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`key\` varchar(64) not null,
+  \`name\` longtext not null,
+  \`description\` longtext not null default (''),
+  \`kind\` longtext not null default ('admin'),
+  \`is_system\` tinyint(1) not null default 0,
+  \`version\` int not null default 1,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`admin_roles_key_key\` (\`key\`),
+  constraint \`admin_roles_pkey\` primary key (\`id\`),
+  constraint \`admin_roles_key_check\` check ((regexp_like(\`key\`, '^[a-z][a-z0-9-]{0,62}$', 'c'))),
+  constraint \`admin_roles_kind_check\` check ((\`kind\` in ('admin', 'delivery')))
+)`,
+	`create table \`admin_role_permissions\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`role_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`action\` varchar(64) not null,
+  \`model_id\` varchar(255),
+  \`condition\` longtext,
+  \`field_ids\` json,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`admin_role_permissions_grant_uq\` (\`role_id\`, \`action\`, (coalesce(\`model_id\`, ''))),
+  constraint \`admin_role_permissions_pkey\` primary key (\`id\`),
+  constraint \`admin_role_permissions_condition_check\` check ((\`condition\` = 'ownedByPrincipal'))
+)`,
+	`create table \`admin_user_roles\` (
+  \`admin_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`role_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci,
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  unique key \`admin_user_roles_assignment_uq\` (\`admin_user_id\`, \`role_id\`, (coalesce(\`site_id\`, ''))),
+  constraint \`admin_user_roles_pk\` primary key (\`id\`)
+)`,
+	`create table \`admin_sessions\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`admin_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`token_hash\` varchar(128) not null,
+  \`csrf_secret\` longtext not null,
+  \`ip\` longtext,
+  \`user_agent\` longtext,
+  \`last_seen_at\` datetime(6) not null default current_timestamp(6),
+  \`expires_at\` datetime(6) not null,
+  \`revoked_at\` datetime(6),
+  \`rotation_required\` tinyint(1) not null default 0,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`admin_sessions_token_hash_key\` (\`token_hash\`),
+  constraint \`admin_sessions_pkey\` primary key (\`id\`)
+)`,
+	`create table \`admin_invitations\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`email\` varchar(255) not null,
+  \`token_hash\` varchar(128),
+  \`invited_by\` char(36) character set ascii collate ascii_general_ci,
+  \`expires_at\` datetime(6) not null,
+  \`accepted_at\` datetime(6),
+  \`revoked_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`role_assignments\` json not null default (json_array()),
+  unique key \`admin_invitations_token_hash_key\` (\`token_hash\`),
+  constraint \`admin_invitations_pkey\` primary key (\`id\`)
+)`,
+	`create table \`password_resets\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`admin_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`token_hash\` varchar(128),
+  \`expires_at\` datetime(6) not null,
+  \`used_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`password_resets_token_hash_key\` (\`token_hash\`),
+  constraint \`password_resets_pkey\` primary key (\`id\`)
+)`,
+	`create table \`setup_tokens\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`token_hash\` varchar(128) not null,
+  \`used_at\` datetime(6),
+  \`superseded_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`setup_tokens_token_hash_key\` (\`token_hash\`),
+  constraint \`setup_tokens_pkey\` primary key (\`id\`)
+)`,
+	`create table \`api_tokens\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`name\` longtext not null,
+  \`token_hash\` varchar(128) not null,
+  \`token_prefix\` longtext not null,
+  \`role_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`expires_at\` datetime(6),
+  \`last_used_at\` datetime(6),
+  \`revoked_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci,
+  unique key \`api_tokens_token_hash_key\` (\`token_hash\`),
+  constraint \`api_tokens_pkey\` primary key (\`id\`)
+)`,
+	`create table \`system_settings\` (
+  \`key\` varchar(64) not null,
+  \`value\` longtext not null,
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`system_settings_pkey\` primary key (\`key\`)
+)`,
+	`create table \`models\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`kind\` longtext not null,
+  \`api_key\` varchar(255) not null,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`deleted_at\` datetime(6),
+  constraint \`models_pkey\` primary key (\`id\`),
+  constraint \`models_kind_check\` check ((\`kind\` in ('collection', 'singleton', 'component')))
+)`,
+	`create table \`schema_revisions\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`version\` int not null,
+  \`definition\` json not null,
+  \`hash\` longtext not null,
+  \`parent_revision_id\` char(36) character set ascii collate ascii_general_ci,
+  \`created_by_type\` longtext not null,
+  \`created_by_id\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`schema_revisions_model_version_uq\` (\`model_id\`, \`version\`),
+  constraint \`schema_revisions_pkey\` primary key (\`id\`),
+  constraint \`schema_revisions_version_check\` check ((\`version\` > 0))
+)`,
+	`create table \`model_active_versions\` (
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`revision_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`version\` int not null,
+  \`schema_version\` int not null,
+  \`activated_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`model_active_versions_pkey\` primary key (\`model_id\`)
+)`,
+	`create table \`schema_change_jobs\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`target_type\` varchar(64) not null,
+  \`target_id\` varchar(255) not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci,
+  \`from_revision_id\` char(36) character set ascii collate ascii_general_ci,
+  \`to_revision_id\` char(36) character set ascii collate ascii_general_ci,
+  \`status\` longtext not null default ('pending'),
+  \`plan\` json not null default (json_object()),
+  \`job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`error\` json,
+  \`requested_by_type\` longtext not null,
+  \`requested_by_id\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`finished_at\` datetime(6),
+  \`change_set_id\` char(36) character set ascii collate ascii_general_ci,
+  constraint \`schema_change_jobs_pkey\` primary key (\`id\`),
+  constraint \`schema_change_jobs_status_check\` check ((\`status\` in ('pending', 'running', 'activated', 'failed', 'cancelled'))),
+  constraint \`schema_change_jobs_target_type_check\` check ((\`target_type\` in ('model', 'locale')))
+)`,
+	`create table \`locales\` (
+  \`code\` varchar(64) not null,
+  \`label\` longtext not null,
+  \`is_default\` tinyint(1) not null default 0,
+  \`fallbacks\` json not null default (json_array()),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`locales_pkey\` primary key (\`code\`)
+)`,
+	`create table \`schema_settings\` (
+  \`id\` tinyint(1) not null default 1,
+  \`read_only\` tinyint(1) not null default 0,
+  \`read_only_reason\` longtext,
+  \`updated_by_type\` longtext,
+  \`updated_by_id\` longtext,
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`schema_settings_pkey\` primary key (\`id\`),
+  constraint \`schema_settings_id_check\` check (\`id\` = 1)
+)`,
+	`create table \`entries\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`owner_app_user_id\` char(36) character set ascii collate ascii_general_ci,
+  \`created_by_admin_id\` char(36) character set ascii collate ascii_general_ci,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`deleted_at\` datetime(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  unique key \`entries_id_site_uq\` (\`id\`, \`site_id\`),
+  constraint \`entries_pkey\` primary key (\`id\`)
+)`,
+	`create table \`content_revisions\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` varchar(64) not null,
+  \`schema_revision_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`data\` json not null,
+  \`reason\` longtext not null,
+  \`author_type\` longtext not null,
+  \`author_id\` longtext,
+  \`parent_revision_id\` char(36) character set ascii collate ascii_general_ci,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`content_revisions_pkey\` primary key (\`id\`),
+  constraint \`content_revisions_reason_check\` check ((\`reason\` in ('create', 'save', 'publish', 'restore', 'duplicate', 'localize', 'conversion')))
+)`,
+	`create table \`entry_heads\` (
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` varchar(64) not null,
+  \`state\` varchar(64) not null,
+  \`revision_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`data\` json not null,
+  \`autosaved_at\` datetime(6),
+  \`version\` int not null default 1,
+  \`change_seq\` bigint not null,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`entry_heads_pkey\` primary key (\`entry_id\`, \`locale\`, \`state\`),
+  constraint \`entry_heads_state_check\` check ((\`state\` in ('draft', 'published')))
+)`,
+	`create table \`relation_edges\` (
+  \`source_entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` varchar(64) not null,
+  \`state\` varchar(64) not null,
+  \`field_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`position\` int not null,
+  \`target_entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`relation_edges_pkey\` primary key (\`source_entry_id\`, \`locale\`, \`state\`, \`field_id\`, \`position\`)
+)`,
+	`create table \`unique_values\` (
+  \`field_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` varchar(64) not null,
+  \`state\` varchar(64) not null,
+  \`value_hash\` varchar(128) not null,
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`unique_values_pkey\` primary key (\`site_id\`, \`field_id\`, \`locale\`, \`state\`, \`value_hash\`),
+  constraint \`unique_values_state_check\` check ((\`state\` in ('draft', 'published')))
+)`,
+	`create table \`publication_state\` (
+  \`last_seq\` bigint not null default 0,
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`publication_state_pkey\` primary key (\`site_id\`)
+)`,
+	`create table \`publication_log\` (
+  \`id\` bigint not null auto_increment,
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` varchar(64) not null,
+  \`revision_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`from_seq\` bigint not null,
+  \`to_seq\` bigint,
+  \`published_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`publication_log_pkey\` primary key (\`id\`)
+)`,
+	`create table \`media_folders\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`parent_id\` char(36) character set ascii collate ascii_general_ci,
+  \`name\` varchar(255) not null,
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`version\` int not null default 1,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  unique key \`media_folders_id_site_uq\` (\`id\`, \`site_id\`),
+  constraint \`media_folders_pkey\` primary key (\`id\`),
+  constraint \`media_folders_name_check\` check (((char_length(\`name\`) >= 1) AND (char_length(\`name\`) <= 255)))
+)`,
+	`create table \`media_assets\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`folder_id\` char(36) character set ascii collate ascii_general_ci,
+  \`storage_driver\` varchar(64) not null,
+  \`storage_key\` varchar(768) not null,
+  \`original_filename\` longtext not null,
+  \`mime_type\` longtext not null,
+  \`size_bytes\` bigint not null,
+  \`width\` int,
+  \`height\` int,
+  \`checksum_sha256\` longtext,
+  \`alt\` longtext not null default (''),
+  \`caption\` longtext not null default (''),
+  \`focal_x\` float,
+  \`focal_y\` float,
+  \`visibility\` longtext not null default ('public'),
+  \`status\` longtext not null default ('processing'),
+  \`processing_error\` longtext,
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`version\` int not null default 1,
+  \`deleted_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`media_assets_pkey\` primary key (\`id\`),
+  constraint \`media_assets_focal_point_ck\` check (((\`focal_x\` IS NULL) = (\`focal_y\` IS NULL))),
+  constraint \`media_assets_focal_x_check\` check (((\`focal_x\` >= (0)) AND (\`focal_x\` <= (1)))),
+  constraint \`media_assets_focal_y_check\` check (((\`focal_y\` >= (0)) AND (\`focal_y\` <= (1)))),
+  constraint \`media_assets_status_check\` check ((\`status\` in ('processing', 'ready', 'failed'))),
+  constraint \`media_assets_storage_driver_check\` check ((\`storage_driver\` in ('local', 's3'))),
+  constraint \`media_assets_visibility_check\` check ((\`visibility\` in ('public', 'private')))
+)`,
+	`create table \`media_variants\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`asset_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`name\` varchar(255) not null,
+  \`width\` int,
+  \`height\` int,
+  \`format\` longtext not null,
+  \`mime_type\` longtext not null,
+  \`storage_key\` varchar(768),
+  \`size_bytes\` bigint,
+  \`checksum_sha256\` longtext,
+  \`status\` longtext not null default ('pending'),
+  \`error\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`media_variants_asset_name_uq\` (\`asset_id\`, \`name\`),
+  constraint \`media_variants_pkey\` primary key (\`id\`),
+  constraint \`media_variants_status_check\` check ((\`status\` in ('pending', 'ready', 'failed')))
+)`,
+	`create table \`media_references\` (
+  \`asset_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`field_id\` varchar(255) not null,
+  \`locale\` varchar(64) not null,
+  \`state\` varchar(64) not null,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`media_references_pk\` primary key (\`asset_id\`, \`entry_id\`, \`locale\`, \`state\`, \`field_id\`),
+  constraint \`media_references_state_check\` check ((\`state\` in ('draft', 'published')))
+)`,
+	`create table \`media_upload_grants\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`asset_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`kind\` longtext not null,
+  \`storage_driver\` longtext not null,
+  \`storage_key\` varchar(768) not null,
+  \`original_filename\` longtext not null,
+  \`declared_mime_type\` longtext not null,
+  \`max_size_bytes\` bigint not null,
+  \`folder_id\` char(36) character set ascii collate ascii_general_ci,
+  \`visibility\` longtext not null,
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`created_by_principal\` longtext not null,
+  \`status\` longtext not null default ('pending'),
+  \`expires_at\` datetime(6) not null,
+  \`consumed_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  unique key \`media_upload_grants_storage_key_key\` (\`storage_key\`),
+  constraint \`media_upload_grants_pkey\` primary key (\`id\`),
+  constraint \`media_upload_grants_kind_check\` check ((\`kind\` in ('create', 'replace'))),
+  constraint \`media_upload_grants_status_check\` check ((\`status\` in ('pending', 'consumed', 'rejected', 'expired'))),
+  constraint \`media_upload_grants_storage_driver_check\` check ((\`storage_driver\` in ('local', 's3'))),
+  constraint \`media_upload_grants_visibility_check\` check ((\`visibility\` in ('public', 'private')))
+)`,
+	`create table \`scheduled_publications\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` varchar(64) not null,
+  \`action\` longtext not null,
+  \`run_at\` datetime(6) not null,
+  \`status\` varchar(64) not null default 'scheduled',
+  \`created_by_token\` char(36) character set ascii collate ascii_general_ci,
+  \`job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`snapshot_seq\` bigint,
+  \`error\` longtext,
+  \`executed_at\` datetime(6),
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`scheduled_publications_pkey\` primary key (\`id\`),
+  constraint \`scheduled_publications_action_check\` check ((\`action\` in ('publish', 'unpublish'))),
+  constraint \`scheduled_publications_status_check\` check ((\`status\` in ('scheduled', 'done', 'failed', 'cancelled')))
+)`,
+	`create table \`webhooks\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`name\` longtext not null,
+  \`url\` longtext not null,
+  \`events\` json not null default (json_array()),
+  \`enabled\` tinyint(1) not null default 1,
+  \`secret_encrypted\` longtext not null,
+  \`allow_private_network\` tinyint(1) not null default 0,
+  \`max_attempts\` int not null default 8,
+  \`version\` int not null default 1,
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci,
+  constraint \`webhooks_pkey\` primary key (\`id\`),
+  constraint \`webhooks_max_attempts_check\` check (((\`max_attempts\` >= 1) AND (\`max_attempts\` <= 20))),
+  constraint \`webhooks_name_check\` check (((char_length(\`name\`) >= 1) AND (char_length(\`name\`) <= 200)))
+)`,
+	`create table \`webhook_deliveries\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`webhook_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`event_id\` char(36) character set ascii collate ascii_general_ci,
+  \`event_type\` longtext not null,
+  \`payload\` json not null,
+  \`is_test\` tinyint(1) not null default 0,
+  \`status\` longtext not null default ('pending'),
+  \`attempts\` int not null default 0,
+  \`last_response_status\` int,
+  \`last_error\` longtext,
+  \`attempt_log\` json not null default (json_array()),
+  \`job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`delivered_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`webhook_deliveries_pkey\` primary key (\`id\`),
+  constraint \`webhook_deliveries_status_check\` check ((\`status\` in ('pending', 'retrying', 'succeeded', 'dead')))
+)`,
+	`create table \`deployment_connections\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`name\` longtext not null,
+  \`provider\` longtext not null,
+  \`settings\` json not null default (json_object()),
+  \`secrets_encrypted\` longtext not null,
+  \`secret_env_refs\` json not null default (json_object()),
+  \`delivery_role_id\` char(36) character set ascii collate ascii_general_ci,
+  \`preview_url_template\` longtext,
+  \`trigger_policy\` json not null default (json_array()),
+  \`debounce_seconds\` int not null default 10,
+  \`allow_private_network\` tinyint(1) not null default 0,
+  \`enabled\` tinyint(1) not null default 1,
+  \`version\` int not null default 1,
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`deployment_connections_pkey\` primary key (\`id\`),
+  constraint \`deployment_connections_debounce_seconds_check\` check (((\`debounce_seconds\` >= 0) AND (\`debounce_seconds\` <= 3600))),
+  constraint \`deployment_connections_name_check\` check (((char_length(\`name\`) >= 1) AND (char_length(\`name\`) <= 200))),
+  constraint \`deployment_connections_provider_check\` check ((\`provider\` in ('generic_webhook', 'cloudflare_pages', 'vercel', 'netlify', 'github')))
+)`,
+	`create table \`deployment_runs\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`connection_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`status\` longtext not null default ('queued'),
+  \`status_rank\` int not null default 0,
+  \`trigger\` longtext not null,
+  \`snapshot_seq\` bigint,
+  \`schema_version\` int,
+  \`retry_of\` char(36) character set ascii collate ascii_general_ci,
+  \`provider_ref\` longtext,
+  \`log_url\` longtext,
+  \`site_url\` longtext,
+  \`error\` longtext,
+  \`timeline\` json not null default (json_array()),
+  \`job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`triggered_at\` datetime(6),
+  \`finished_at\` datetime(6),
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`change_set_id\` char(36) character set ascii collate ascii_general_ci,
+  constraint \`deployment_runs_pkey\` primary key (\`id\`),
+  constraint \`deployment_runs_status_check\` check ((\`status\` in ('queued', 'triggered', 'building', 'deployed', 'failed', 'unknown'))),
+  constraint \`deployment_runs_trigger_check\` check ((\`trigger\` in ('publish', 'change_set', 'schema', 'manual', 'retry')))
+)`,
+	`create table \`preview_tokens\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`token_hash\` varchar(128) not null,
+  \`token_prefix\` longtext not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` longtext,
+  \`connection_id\` char(36) character set ascii collate ascii_general_ci,
+  \`delivery_role_id\` char(36) character set ascii collate ascii_general_ci,
+  \`created_by\` char(36) character set ascii collate ascii_general_ci not null,
+  \`expires_at\` datetime(6) not null,
+  \`revoked_at\` datetime(6),
+  \`last_used_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  unique key \`preview_tokens_token_hash_key\` (\`token_hash\`),
+  constraint \`preview_tokens_pkey\` primary key (\`id\`)
+)`,
+	`create table \`app_users\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`email\` varchar(255) not null,
+  \`name\` longtext not null default (''),
+  \`password_hash\` longtext,
+  \`confirmed_at\` datetime(6),
+  \`blocked_at\` datetime(6),
+  \`last_login_at\` datetime(6),
+  \`password_changed_at\` datetime(6),
+  \`deleted_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`token_version\` int not null default 0,
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`app_users_pkey\` primary key (\`id\`)
+)`,
+	`create table \`app_roles\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`key\` varchar(64) not null,
+  \`name\` longtext not null,
+  \`description\` longtext not null default (''),
+  \`is_system\` tinyint(1) not null default 0,
+  \`version\` int not null default 1,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`app_roles_key_key\` (\`key\`),
+  constraint \`app_roles_pkey\` primary key (\`id\`),
+  constraint \`app_roles_key_check\` check ((regexp_like(\`key\`, '^[a-z][a-z0-9-]{0,62}$', 'c')))
+)`,
+	`create table \`app_role_permissions\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`role_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`action\` varchar(64) not null,
+  \`model_id\` varchar(255),
+  \`condition\` longtext,
+  \`field_ids\` json,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`app_role_permissions_grant_uq\` (\`role_id\`, \`action\`, (coalesce(\`model_id\`, ''))),
+  constraint \`app_role_permissions_pkey\` primary key (\`id\`),
+  constraint \`app_role_permissions_action_check\` check ((\`action\` in ('read', 'create', 'update', 'delete', 'publish'))),
+  constraint \`app_role_permissions_condition_check\` check ((\`condition\` = 'ownedByPrincipal'))
+)`,
+	`create table \`app_user_roles\` (
+  \`app_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`role_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`app_user_roles_pk\` primary key (\`app_user_id\`, \`role_id\`)
+)`,
+	`create table \`app_refresh_tokens\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`app_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`family_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`token_hash\` varchar(128) not null,
+  \`expires_at\` datetime(6) not null,
+  \`used_at\` datetime(6),
+  \`reuse_grace_used_at\` datetime(6),
+  \`revoked_at\` datetime(6),
+  \`revoked_reason\` longtext,
+  \`ip\` longtext,
+  \`user_agent\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`app_refresh_tokens_token_hash_key\` (\`token_hash\`),
+  constraint \`app_refresh_tokens_pkey\` primary key (\`id\`)
+)`,
+	`create table \`app_oauth_accounts\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`app_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`provider\` varchar(64) not null,
+  \`provider_user_id\` varchar(255) not null,
+  \`email\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  unique key \`app_oauth_accounts_identity_uq\` (\`site_id\`, \`provider\`, \`provider_user_id\`),
+  constraint \`app_oauth_accounts_pkey\` primary key (\`id\`),
+  constraint \`app_oauth_accounts_provider_check\` check ((\`provider\` in ('google', 'github')))
+)`,
+	`create table \`email_confirmations\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`app_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`email\` longtext not null,
+  \`token_hash\` varchar(128),
+  \`expires_at\` datetime(6) not null,
+  \`used_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`email_confirmations_token_hash_key\` (\`token_hash\`),
+  constraint \`email_confirmations_pkey\` primary key (\`id\`)
+)`,
+	`create table \`app_password_resets\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`app_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`email\` longtext not null,
+  \`token_hash\` varchar(128),
+  \`expires_at\` datetime(6) not null,
+  \`used_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`app_password_resets_token_hash_key\` (\`token_hash\`),
+  constraint \`app_password_resets_pkey\` primary key (\`id\`)
+)`,
+	`create table \`app_login_codes\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`app_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`code_hash\` varchar(128) not null,
+  \`expires_at\` datetime(6) not null,
+  \`used_at\` datetime(6),
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`code_challenge\` longtext not null,
+  unique key \`app_login_codes_code_hash_key\` (\`code_hash\`),
+  constraint \`app_login_codes_pkey\` primary key (\`id\`)
+)`,
+	`create table \`extension_hook_runs\` (
+  \`event_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`hook\` varchar(255) not null,
+  \`job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`completed_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`extension_hook_runs_pkey\` primary key (\`event_id\`, \`hook\`)
+)`,
+	`create table \`field_reads\` (
+  \`day\` date not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`field_path\` varchar(400) not null,
+  \`principal_key\` varchar(255) not null,
+  \`selection\` varchar(64) not null,
+  \`reads\` bigint not null default 0,
+  \`last_read_at\` datetime(6) not null,
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`field_reads_pkey\` primary key (\`day\`, \`site_id\`, \`model_id\`, \`field_path\`, \`principal_key\`, \`selection\`),
+  constraint \`field_reads_selection_check\` check ((\`selection\` in ('explicit', 'implicit')))
+)`,
+	`create table \`token_reads\` (
+  \`day\` date not null,
+  \`principal_key\` varchar(255) not null,
+  \`requests\` bigint not null default 0,
+  \`last_snapshot\` bigint,
+  \`last_read_at\` datetime(6) not null,
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`token_reads_pkey\` primary key (\`day\`, \`site_id\`, \`principal_key\`)
+)`,
+	`create table \`change_sets\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`title\` longtext not null,
+  \`description\` longtext not null default (''),
+  \`status\` varchar(64) not null default 'open',
+  \`ship_phase\` longtext,
+  \`source\` longtext not null default ('manual'),
+  \`restore_of_seq\` bigint,
+  \`scheduled_for\` datetime(6),
+  \`schedule_job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`scheduled_by\` char(36) character set ascii collate ascii_general_ci,
+  \`scheduled_by_token\` char(36) character set ascii collate ascii_general_ci,
+  \`ship_job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`ship_mode\` longtext,
+  \`ship_requested_by\` char(36) character set ascii collate ascii_general_ci,
+  \`ship_requested_by_token\` char(36) character set ascii collate ascii_general_ci,
+  \`acknowledge_breaking\` tinyint(1) not null default 0,
+  \`acknowledge_destructive\` tinyint(1) not null default 0,
+  \`deployment_connection_id\` char(36) character set ascii collate ascii_general_ci,
+  \`deployment_run_id\` char(36) character set ascii collate ascii_general_ci,
+  \`shipped_at\` datetime(6),
+  \`shipped_seq\` bigint,
+  \`schema_version_after\` int,
+  \`error\` json,
+  \`restore_report\` json not null default (json_array()),
+  \`created_by\` char(36) character set ascii collate ascii_general_ci,
+  \`created_by_token\` char(36) character set ascii collate ascii_general_ci,
+  \`version\` int not null default 1,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  unique key \`change_sets_id_site_uq\` (\`id\`, \`site_id\`),
+  constraint \`change_sets_pkey\` primary key (\`id\`),
+  constraint \`change_sets_ship_mode_check\` check ((\`ship_mode\` in ('interactive', 'scheduled'))),
+  constraint \`change_sets_ship_phase_check\` check ((\`ship_phase\` in ('preparing', 'activating'))),
+  constraint \`change_sets_source_check\` check ((\`source\` in ('manual', 'release', 'restore', 'builder', 'assist'))),
+  constraint \`change_sets_status_check\` check ((\`status\` in ('open', 'scheduled', 'shipping', 'shipped', 'failed', 'discarded'))),
+  constraint \`change_sets_title_check\` check (((char_length(\`title\`) >= 1) AND (char_length(\`title\`) <= 200)))
+)`,
+	`create table \`schema_drafts\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`change_set_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`definition_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`kind\` longtext not null,
+  \`api_key\` longtext not null,
+  \`base_version\` int,
+  \`definition\` json,
+  \`version\` int not null default 1,
+  \`updated_by_type\` longtext not null,
+  \`updated_by_id\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`schema_drafts_set_definition_uq\` (\`change_set_id\`, \`definition_id\`),
+  constraint \`schema_drafts_pkey\` primary key (\`id\`),
+  constraint \`schema_drafts_kind_check\` check ((\`kind\` in ('collection', 'singleton', 'component')))
+)`,
+	`create table \`change_set_items\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`change_set_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`kind\` longtext not null,
+  \`position\` int not null,
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci,
+  \`locale\` varchar(64),
+  \`action\` longtext,
+  \`source_revision_id\` char(36) character set ascii collate ascii_general_ci,
+  \`schema_draft_id\` char(36) character set ascii collate ascii_general_ci,
+  \`status\` longtext not null default ('pending'),
+  \`error\` longtext,
+  \`ship_state\` json,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`change_set_items_pkey\` primary key (\`id\`),
+  constraint \`change_set_items_action_check\` check ((\`action\` in ('publish', 'unpublish'))),
+  constraint \`change_set_items_kind_check\` check ((\`kind\` in ('entry', 'schema'))),
+  constraint \`change_set_items_shape_check\` check ((((\`kind\` = 'entry') AND (\`entry_id\` IS NOT NULL) AND (\`model_id\` IS NOT NULL) AND (\`locale\` IS NOT NULL) AND (\`action\` IS NOT NULL) AND (\`schema_draft_id\` IS NULL)) OR ((\`kind\` = 'schema') AND (\`schema_draft_id\` IS NOT NULL) AND (\`entry_id\` IS NULL) AND (\`source_revision_id\` IS NULL)))),
+  constraint \`change_set_items_status_check\` check ((\`status\` in ('pending', 'done', 'failed')))
+)`,
+	`create table \`publication_snapshots\` (
+  \`seq\` bigint not null,
+  \`schema_version\` int,
+  \`source\` longtext not null,
+  \`change_set_id\` char(36) character set ascii collate ascii_general_ci,
+  \`actor_type\` longtext,
+  \`actor_id\` longtext,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  constraint \`publication_snapshots_pkey\` primary key (\`site_id\`, \`seq\`)
+)`,
+	`create table \`editor_presence\` (
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`admin_user_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`tab_id\` varchar(64) not null,
+  \`locale\` longtext,
+  \`started_at\` datetime(6) not null default current_timestamp(6),
+  \`last_seen_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`editor_presence_pkey\` primary key (\`entry_id\`, \`admin_user_id\`, \`tab_id\`),
+  constraint \`editor_presence_tab_id_check\` check (((char_length(\`tab_id\`) >= 1) AND (char_length(\`tab_id\`) <= 64)))
+)`,
+	`create table \`content_health_findings\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`entry_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`model_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`locale\` varchar(64) not null,
+  \`rule\` varchar(255) not null,
+  \`subject\` varchar(255) not null default '',
+  \`severity\` longtext not null,
+  \`path\` longtext,
+  \`details\` json not null default (json_object()),
+  \`first_seen_at\` datetime(6) not null default current_timestamp(6),
+  \`last_seen_at\` datetime(6) not null default current_timestamp(6),
+  \`resolved_at\` datetime(6),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  unique key \`content_health_findings_entry_id_locale_rule_subject_key\` (\`entry_id\`, \`locale\`, \`rule\`, \`subject\`),
+  constraint \`content_health_findings_pkey\` primary key (\`id\`),
+  constraint \`content_health_findings_severity_check\` check ((\`severity\` in ('error', 'warning')))
+)`,
+	`create table \`sites\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`key\` varchar(64) not null,
+  \`name\` longtext not null,
+  \`is_primary\` tinyint(1) not null default 0,
+  \`version\` int not null default 1,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`updated_at\` datetime(6) not null default current_timestamp(6),
+  unique key \`sites_key_key\` (\`key\`),
+  constraint \`sites_pkey\` primary key (\`id\`),
+  constraint \`sites_key_check\` check ((regexp_like(\`key\`, '^[a-z][a-z0-9-]{0,62}$', 'c'))),
+  constraint \`sites_name_check\` check (((char_length(\`name\`) >= 1) AND (char_length(\`name\`) <= 200)))
+)`,
+	`create table \`site_app_roles\` (
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`audience\` varchar(64) not null,
+  \`role_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`site_app_roles_pkey\` primary key (\`site_id\`, \`audience\`, \`role_id\`),
+  constraint \`site_app_roles_audience_check\` check ((\`audience\` in ('public', 'authenticated')))
+)`,
+	`create table \`assist_runs\` (
+  \`id\` char(36) character set ascii collate ascii_general_ci not null default (uuid()),
+  \`site_id\` char(36) character set ascii collate ascii_general_ci not null,
+  \`actor_type\` longtext not null,
+  \`actor_id\` longtext not null,
+  \`action\` longtext not null,
+  \`rule\` longtext,
+  \`provider\` longtext not null,
+  \`model\` longtext not null,
+  \`input_tokens\` int not null default 0,
+  \`output_tokens\` int not null default 0,
+  \`duration_ms\` int not null default 0,
+  \`status\` longtext not null,
+  \`error_code\` longtext,
+  \`job_id\` char(36) character set ascii collate ascii_general_ci,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  \`finished_at\` datetime(6),
+  constraint \`assist_runs_pkey\` primary key (\`id\`),
+  constraint \`assist_runs_action_check\` check ((\`action\` in ('alt_text', 'summarize', 'translate', 'rewrite', 'schema_draft', 'content_ops'))),
+  constraint \`assist_runs_status_check\` check ((\`status\` in ('queued', 'running', 'succeeded', 'failed')))
+)`,
+	`alter table \`outbox_events\` add constraint \`outbox_events_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete set null`,
+	`alter table \`audit_events\` add constraint \`audit_events_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete set null`,
+	`alter table \`admin_role_permissions\` add constraint \`admin_role_permissions_role_id_fkey\` foreign key (\`role_id\`) references \`admin_roles\` (\`id\`) on delete cascade`,
+	`alter table \`admin_user_roles\` add constraint \`admin_user_roles_admin_user_id_fkey\` foreign key (\`admin_user_id\`) references \`admin_users\` (\`id\`) on delete cascade`,
+	`alter table \`admin_user_roles\` add constraint \`admin_user_roles_role_id_fkey\` foreign key (\`role_id\`) references \`admin_roles\` (\`id\`) on delete restrict`,
+	`alter table \`admin_user_roles\` add constraint \`admin_user_roles_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`admin_sessions\` add constraint \`admin_sessions_admin_user_id_fkey\` foreign key (\`admin_user_id\`) references \`admin_users\` (\`id\`) on delete cascade`,
+	`alter table \`admin_invitations\` add constraint \`admin_invitations_invited_by_fkey\` foreign key (\`invited_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`password_resets\` add constraint \`password_resets_admin_user_id_fkey\` foreign key (\`admin_user_id\`) references \`admin_users\` (\`id\`) on delete cascade`,
+	`alter table \`api_tokens\` add constraint \`api_tokens_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`api_tokens\` add constraint \`api_tokens_role_id_fkey\` foreign key (\`role_id\`) references \`admin_roles\` (\`id\`) on delete restrict`,
+	`alter table \`api_tokens\` add constraint \`api_tokens_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`schema_revisions\` add constraint \`schema_revisions_model_id_fkey\` foreign key (\`model_id\`) references \`models\` (\`id\`) on delete restrict`,
+	`alter table \`schema_revisions\` add constraint \`schema_revisions_parent_revision_id_fkey\` foreign key (\`parent_revision_id\`) references \`schema_revisions\` (\`id\`)`,
+	`alter table \`model_active_versions\` add constraint \`model_active_versions_model_id_fkey\` foreign key (\`model_id\`) references \`models\` (\`id\`) on delete cascade`,
+	`alter table \`model_active_versions\` add constraint \`model_active_versions_revision_id_fkey\` foreign key (\`revision_id\`) references \`schema_revisions\` (\`id\`)`,
+	`alter table \`schema_change_jobs\` add constraint \`schema_change_jobs_change_set_id_fkey\` foreign key (\`change_set_id\`) references \`change_sets\` (\`id\`) on delete set null`,
+	`alter table \`schema_change_jobs\` add constraint \`schema_change_jobs_from_revision_id_fkey\` foreign key (\`from_revision_id\`) references \`schema_revisions\` (\`id\`)`,
+	`alter table \`schema_change_jobs\` add constraint \`schema_change_jobs_job_id_fkey\` foreign key (\`job_id\`) references \`jobs\` (\`id\`) on delete set null`,
+	`alter table \`schema_change_jobs\` add constraint \`schema_change_jobs_model_id_fkey\` foreign key (\`model_id\`) references \`models\` (\`id\`)`,
+	`alter table \`schema_change_jobs\` add constraint \`schema_change_jobs_to_revision_id_fkey\` foreign key (\`to_revision_id\`) references \`schema_revisions\` (\`id\`)`,
+	`alter table \`entries\` add constraint \`entries_created_by_admin_id_fkey\` foreign key (\`created_by_admin_id\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`entries\` add constraint \`entries_model_id_fkey\` foreign key (\`model_id\`) references \`models\` (\`id\`) on delete restrict`,
+	`alter table \`entries\` add constraint \`entries_owner_app_user_fk\` foreign key (\`owner_app_user_id\`) references \`app_users\` (\`id\`) on delete set null`,
+	`alter table \`entries\` add constraint \`entries_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`content_revisions\` add constraint \`content_revisions_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete restrict`,
+	`alter table \`content_revisions\` add constraint \`content_revisions_parent_revision_id_fkey\` foreign key (\`parent_revision_id\`) references \`content_revisions\` (\`id\`)`,
+	`alter table \`content_revisions\` add constraint \`content_revisions_schema_revision_id_fkey\` foreign key (\`schema_revision_id\`) references \`schema_revisions\` (\`id\`)`,
+	`alter table \`entry_heads\` add constraint \`entry_heads_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete cascade`,
+	`alter table \`entry_heads\` add constraint \`entry_heads_entry_site_fk\` foreign key (\`entry_id\`, \`site_id\`) references \`entries\` (\`id\`, \`site_id\`) on delete cascade`,
+	`alter table \`entry_heads\` add constraint \`entry_heads_revision_id_fkey\` foreign key (\`revision_id\`) references \`content_revisions\` (\`id\`)`,
+	`alter table \`entry_heads\` add constraint \`entry_heads_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`relation_edges\` add constraint \`relation_edges_head_fk\` foreign key (\`source_entry_id\`, \`locale\`, \`state\`) references \`entry_heads\` (\`entry_id\`, \`locale\`, \`state\`) on delete cascade`,
+	`alter table \`relation_edges\` add constraint \`relation_edges_target_entry_id_fkey\` foreign key (\`target_entry_id\`) references \`entries\` (\`id\`)`,
+	`alter table \`unique_values\` add constraint \`unique_values_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete cascade`,
+	`alter table \`unique_values\` add constraint \`unique_values_entry_site_fk\` foreign key (\`entry_id\`, \`site_id\`) references \`entries\` (\`id\`, \`site_id\`) on delete cascade`,
+	`alter table \`unique_values\` add constraint \`unique_values_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`publication_state\` add constraint \`publication_state_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`publication_log\` add constraint \`publication_log_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`)`,
+	`alter table \`publication_log\` add constraint \`publication_log_entry_site_fk\` foreign key (\`entry_id\`, \`site_id\`) references \`entries\` (\`id\`, \`site_id\`) on delete restrict`,
+	`alter table \`publication_log\` add constraint \`publication_log_revision_id_fkey\` foreign key (\`revision_id\`) references \`content_revisions\` (\`id\`)`,
+	`alter table \`publication_log\` add constraint \`publication_log_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`media_folders\` add constraint \`media_folders_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`media_folders\` add constraint \`media_folders_parent_id_fkey\` foreign key (\`parent_id\`, \`site_id\`) references \`media_folders\` (\`id\`, \`site_id\`) on delete restrict`,
+	`alter table \`media_folders\` add constraint \`media_folders_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`media_assets\` add constraint \`media_assets_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`media_assets\` add constraint \`media_assets_folder_id_fkey\` foreign key (\`folder_id\`, \`site_id\`) references \`media_folders\` (\`id\`, \`site_id\`)`,
+	`alter table \`media_assets\` add constraint \`media_assets_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`media_variants\` add constraint \`media_variants_asset_id_fkey\` foreign key (\`asset_id\`) references \`media_assets\` (\`id\`) on delete cascade`,
+	`alter table \`media_references\` add constraint \`media_references_asset_id_fkey\` foreign key (\`asset_id\`) references \`media_assets\` (\`id\`) on delete cascade`,
+	`alter table \`media_references\` add constraint \`media_references_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete cascade`,
+	`alter table \`media_upload_grants\` add constraint \`media_upload_grants_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`media_upload_grants\` add constraint \`media_upload_grants_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`scheduled_publications\` add constraint \`scheduled_publications_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`scheduled_publications\` add constraint \`scheduled_publications_created_by_token_fkey\` foreign key (\`created_by_token\`) references \`api_tokens\` (\`id\`) on delete set null`,
+	`alter table \`scheduled_publications\` add constraint \`scheduled_publications_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete cascade`,
+	`alter table \`scheduled_publications\` add constraint \`scheduled_publications_entry_site_fk\` foreign key (\`entry_id\`, \`site_id\`) references \`entries\` (\`id\`, \`site_id\`) on delete cascade`,
+	`alter table \`scheduled_publications\` add constraint \`scheduled_publications_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`webhooks\` add constraint \`webhooks_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`webhooks\` add constraint \`webhooks_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`webhook_deliveries\` add constraint \`webhook_deliveries_webhook_id_fkey\` foreign key (\`webhook_id\`) references \`webhooks\` (\`id\`) on delete cascade`,
+	`alter table \`deployment_connections\` add constraint \`deployment_connections_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`deployment_connections\` add constraint \`deployment_connections_delivery_role_id_fkey\` foreign key (\`delivery_role_id\`) references \`admin_roles\` (\`id\`) on delete set null`,
+	`alter table \`deployment_connections\` add constraint \`deployment_connections_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`deployment_runs\` add constraint \`deployment_runs_change_set_id_fkey\` foreign key (\`change_set_id\`) references \`change_sets\` (\`id\`) on delete set null`,
+	`alter table \`deployment_runs\` add constraint \`deployment_runs_connection_id_fkey\` foreign key (\`connection_id\`) references \`deployment_connections\` (\`id\`) on delete cascade`,
+	`alter table \`deployment_runs\` add constraint \`deployment_runs_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`deployment_runs\` add constraint \`deployment_runs_retry_of_fkey\` foreign key (\`retry_of\`) references \`deployment_runs\` (\`id\`) on delete set null`,
+	`alter table \`preview_tokens\` add constraint \`preview_tokens_connection_id_fkey\` foreign key (\`connection_id\`) references \`deployment_connections\` (\`id\`) on delete set null`,
+	`alter table \`preview_tokens\` add constraint \`preview_tokens_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete cascade`,
+	`alter table \`preview_tokens\` add constraint \`preview_tokens_delivery_role_id_fkey\` foreign key (\`delivery_role_id\`) references \`admin_roles\` (\`id\`) on delete set null`,
+	`alter table \`preview_tokens\` add constraint \`preview_tokens_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete cascade`,
+	`alter table \`preview_tokens\` add constraint \`preview_tokens_entry_site_fk\` foreign key (\`entry_id\`, \`site_id\`) references \`entries\` (\`id\`, \`site_id\`) on delete cascade`,
+	`alter table \`preview_tokens\` add constraint \`preview_tokens_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`app_users\` add constraint \`app_users_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`app_role_permissions\` add constraint \`app_role_permissions_role_id_fkey\` foreign key (\`role_id\`) references \`app_roles\` (\`id\`) on delete cascade`,
+	`alter table \`app_user_roles\` add constraint \`app_user_roles_app_user_id_fkey\` foreign key (\`app_user_id\`) references \`app_users\` (\`id\`) on delete cascade`,
+	`alter table \`app_user_roles\` add constraint \`app_user_roles_role_id_fkey\` foreign key (\`role_id\`) references \`app_roles\` (\`id\`) on delete restrict`,
+	`alter table \`app_user_roles\` add constraint \`app_user_roles_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`app_refresh_tokens\` add constraint \`app_refresh_tokens_app_user_id_fkey\` foreign key (\`app_user_id\`) references \`app_users\` (\`id\`) on delete cascade`,
+	`alter table \`app_oauth_accounts\` add constraint \`app_oauth_accounts_app_user_id_fkey\` foreign key (\`app_user_id\`) references \`app_users\` (\`id\`) on delete cascade`,
+	`alter table \`app_oauth_accounts\` add constraint \`app_oauth_accounts_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`email_confirmations\` add constraint \`email_confirmations_app_user_id_fkey\` foreign key (\`app_user_id\`) references \`app_users\` (\`id\`) on delete cascade`,
+	`alter table \`app_password_resets\` add constraint \`app_password_resets_app_user_id_fkey\` foreign key (\`app_user_id\`) references \`app_users\` (\`id\`) on delete cascade`,
+	`alter table \`app_login_codes\` add constraint \`app_login_codes_app_user_id_fkey\` foreign key (\`app_user_id\`) references \`app_users\` (\`id\`) on delete cascade`,
+	`alter table \`field_reads\` add constraint \`field_reads_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`token_reads\` add constraint \`token_reads_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`change_sets\` add constraint \`change_sets_created_by_fkey\` foreign key (\`created_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_created_by_token_fkey\` foreign key (\`created_by_token\`) references \`api_tokens\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_deployment_connection_id_fkey\` foreign key (\`deployment_connection_id\`) references \`deployment_connections\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_deployment_run_id_fkey\` foreign key (\`deployment_run_id\`) references \`deployment_runs\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_scheduled_by_fkey\` foreign key (\`scheduled_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_scheduled_by_token_fkey\` foreign key (\`scheduled_by_token\`) references \`api_tokens\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_ship_requested_by_fkey\` foreign key (\`ship_requested_by\`) references \`admin_users\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_ship_requested_by_token_fkey\` foreign key (\`ship_requested_by_token\`) references \`api_tokens\` (\`id\`) on delete set null`,
+	`alter table \`change_sets\` add constraint \`change_sets_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`schema_drafts\` add constraint \`schema_drafts_change_set_id_fkey\` foreign key (\`change_set_id\`) references \`change_sets\` (\`id\`) on delete cascade`,
+	`alter table \`change_set_items\` add constraint \`change_set_items_change_set_id_fkey\` foreign key (\`change_set_id\`) references \`change_sets\` (\`id\`) on delete cascade`,
+	`alter table \`change_set_items\` add constraint \`change_set_items_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete cascade`,
+	`alter table \`change_set_items\` add constraint \`change_set_items_entry_site_fk\` foreign key (\`entry_id\`, \`site_id\`) references \`entries\` (\`id\`, \`site_id\`) on delete cascade`,
+	`alter table \`change_set_items\` add constraint \`change_set_items_schema_draft_id_fkey\` foreign key (\`schema_draft_id\`) references \`schema_drafts\` (\`id\`) on delete cascade`,
+	`alter table \`change_set_items\` add constraint \`change_set_items_set_site_fk\` foreign key (\`change_set_id\`, \`site_id\`) references \`change_sets\` (\`id\`, \`site_id\`) on delete cascade`,
+	`alter table \`change_set_items\` add constraint \`change_set_items_source_revision_id_fkey\` foreign key (\`source_revision_id\`) references \`content_revisions\` (\`id\`)`,
+	`alter table \`publication_snapshots\` add constraint \`publication_snapshots_change_set_id_fkey\` foreign key (\`change_set_id\`) references \`change_sets\` (\`id\`) on delete set null`,
+	`alter table \`publication_snapshots\` add constraint \`publication_snapshots_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`content_health_findings\` add constraint \`content_health_findings_entry_id_fkey\` foreign key (\`entry_id\`) references \`entries\` (\`id\`) on delete cascade`,
+	`alter table \`content_health_findings\` add constraint \`content_health_findings_entry_site_fk\` foreign key (\`entry_id\`, \`site_id\`) references \`entries\` (\`id\`, \`site_id\`) on delete cascade`,
+	`alter table \`content_health_findings\` add constraint \`content_health_findings_site_fk\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete restrict`,
+	`alter table \`site_app_roles\` add constraint \`site_app_roles_role_id_fkey\` foreign key (\`role_id\`) references \`app_roles\` (\`id\`) on delete cascade`,
+	`alter table \`site_app_roles\` add constraint \`site_app_roles_site_id_fkey\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`alter table \`assist_runs\` add constraint \`assist_runs_job_id_fkey\` foreign key (\`job_id\`) references \`jobs\` (\`id\`) on delete set null`,
+	`alter table \`assist_runs\` add constraint \`assist_runs_site_id_fkey\` foreign key (\`site_id\`) references \`sites\` (\`id\`) on delete cascade`,
+	`create index \`admin_invitations_pending_email_idx\` on \`admin_invitations\` (\`email\`)`,
+	`create index \`admin_sessions_user_idx\` on \`admin_sessions\` (\`admin_user_id\`)`,
+	`create index \`admin_user_roles_role_idx\` on \`admin_user_roles\` (\`role_id\`)`,
+	`create index \`api_tokens_role_idx\` on \`api_tokens\` (\`role_id\`)`,
+	`create index \`app_oauth_accounts_user_idx\` on \`app_oauth_accounts\` (\`app_user_id\`)`,
+	`create index \`app_password_resets_user_idx\` on \`app_password_resets\` (\`app_user_id\`)`,
+	`create index \`app_refresh_tokens_family_idx\` on \`app_refresh_tokens\` (\`family_id\`)`,
+	`create index \`app_refresh_tokens_user_idx\` on \`app_refresh_tokens\` (\`app_user_id\`)`,
+	`create index \`app_user_roles_role_idx\` on \`app_user_roles\` (\`role_id\`)`,
+	`create index \`app_users_created_idx\` on \`app_users\` (\`site_id\`, \`created_at\` desc, \`id\` desc)`,
+	`create unique index \`app_users_email_uq\` on \`app_users\` ((case when (\`deleted_at\` IS NULL) then \`site_id\` end), (case when (\`deleted_at\` IS NULL) then lower(\`email\`) end))`,
+	`create index \`assist_runs_created_idx\` on \`assist_runs\` (\`created_at\`)`,
+	`create index \`assist_runs_site_created_idx\` on \`assist_runs\` (\`site_id\`, \`created_at\`)`,
+	`create index \`audit_events_actor_idx\` on \`audit_events\` (\`actor_type\`, \`actor_id\`, \`occurred_at\` desc)`,
+	`create index \`audit_events_occurred_at_idx\` on \`audit_events\` (\`occurred_at\` desc)`,
+	`create index \`audit_events_target_idx\` on \`audit_events\` (\`target_type\`, \`target_id\`, \`occurred_at\` desc)`,
+	`create unique index \`change_set_items_draft_uq\` on \`change_set_items\` (\`schema_draft_id\`)`,
+	`create index \`change_set_items_entry_idx\` on \`change_set_items\` (\`entry_id\`)`,
+	`create unique index \`change_set_items_entry_uq\` on \`change_set_items\` ((case when (\`kind\` = 'entry') then \`change_set_id\` end), (case when (\`kind\` = 'entry') then \`entry_id\` end), (case when (\`kind\` = 'entry') then \`locale\` end))`,
+	`create index \`change_set_items_set_idx\` on \`change_set_items\` (\`change_set_id\`, \`position\`)`,
+	`create index \`change_sets_status_idx\` on \`change_sets\` (\`site_id\`, \`status\`, \`created_at\` desc)`,
+	`create index \`content_health_findings_open_idx\` on \`content_health_findings\` (\`site_id\`, \`rule\`, \`last_seen_at\` desc, \`id\`)`,
+	`create index \`content_health_findings_resolved_idx\` on \`content_health_findings\` (\`resolved_at\`)`,
+	`create index \`content_revisions_entry_idx\` on \`content_revisions\` (\`entry_id\`, \`locale\`, \`created_at\`)`,
+	`create index \`deployment_runs_connection_idx\` on \`deployment_runs\` (\`connection_id\`, \`created_at\` desc)`,
+	`create unique index \`deployment_runs_queued_uq\` on \`deployment_runs\` ((case when (\`status\` = 'queued') then \`connection_id\` end))`,
+	`create index \`editor_presence_model_idx\` on \`editor_presence\` (\`model_id\`, \`last_seen_at\`)`,
+	`create index \`editor_presence_seen_idx\` on \`editor_presence\` (\`last_seen_at\`)`,
+	`create index \`email_confirmations_user_idx\` on \`email_confirmations\` (\`app_user_id\`)`,
+	`create index \`entries_model_idx\` on \`entries\` (\`site_id\`, \`model_id\`, \`created_at\`)`,
+	`create index \`entries_owner_idx\` on \`entries\` (\`owner_app_user_id\`)`,
+	`create index \`entry_heads_change_seq_idx\` on \`entry_heads\` (\`model_id\`, \`change_seq\`)`,
+	`create index \`entry_heads_model_locale_state_idx\` on \`entry_heads\` (\`site_id\`, \`model_id\`, \`locale\`, \`state\`)`,
+	`create index \`field_reads_model_day_idx\` on \`field_reads\` (\`model_id\`, \`day\`)`,
+	`create unique index \`jobs_idempotency_key_uq\` on \`jobs\` (\`idempotency_key\`)`,
+	`create index \`jobs_pending_idx\` on \`jobs\` (\`priority\` desc, \`run_at\`)`,
+	`create index \`jobs_running_lease_idx\` on \`jobs\` (\`locked_until\`)`,
+	`create unique index \`locales_single_default_uq\` on \`locales\` ((case when \`is_default\` then \`is_default\` end))`,
+	`create index \`media_assets_created_idx\` on \`media_assets\` (\`site_id\`, \`created_at\`, \`id\`)`,
+	`create index \`media_assets_driver_idx\` on \`media_assets\` (\`storage_driver\`, \`id\`)`,
+	`create index \`media_assets_folder_idx\` on \`media_assets\` (\`folder_id\`, \`created_at\`, \`id\`)`,
+	`create unique index \`media_assets_storage_key_uq\` on \`media_assets\` (\`storage_key\`)`,
+	`create unique index \`media_folders_sibling_name_uq\` on \`media_folders\` (\`site_id\`, (COALESCE(\`parent_id\`, '00000000-0000-0000-0000-000000000000')), (lower(\`name\`)))`,
+	`create index \`media_references_entry_idx\` on \`media_references\` (\`entry_id\`, \`locale\`, \`state\`)`,
+	`create unique index \`media_variants_storage_key_uq\` on \`media_variants\` (\`storage_key\`)`,
+	`create unique index \`models_api_key_uq\` on \`models\` ((case when (\`deleted_at\` IS NULL) then lower(\`api_key\`) end))`,
+	`create index \`outbox_events_undispatched_idx\` on \`outbox_events\` (\`id\`)`,
+	`create index \`password_resets_user_idx\` on \`password_resets\` (\`admin_user_id\`)`,
+	`create index \`preview_tokens_entry_idx\` on \`preview_tokens\` (\`entry_id\`, \`created_at\` desc)`,
+	`create index \`publication_log_entry_locale_from_idx\` on \`publication_log\` (\`entry_id\`, \`locale\`, \`from_seq\`)`,
+	`create index \`publication_log_model_seq_idx\` on \`publication_log\` (\`site_id\`, \`model_id\`, \`from_seq\`)`,
+	`create unique index \`publication_log_open_uq\` on \`publication_log\` ((case when (\`to_seq\` IS NULL) then \`entry_id\` end), (case when (\`to_seq\` IS NULL) then \`locale\` end))`,
+	`create index \`publication_log_to_seq_idx\` on \`publication_log\` (\`site_id\`, \`to_seq\`)`,
+	`create index \`publication_snapshots_change_set_idx\` on \`publication_snapshots\` (\`change_set_id\`)`,
+	`create index \`relation_edges_target_idx\` on \`relation_edges\` (\`target_entry_id\`, \`state\`)`,
+	`create index \`scheduled_publications_entry_idx\` on \`scheduled_publications\` (\`entry_id\`, \`locale\`)`,
+	`create index \`scheduled_publications_site_idx\` on \`scheduled_publications\` (\`site_id\`, \`run_at\`)`,
+	`create index \`scheduled_publications_status_idx\` on \`scheduled_publications\` (\`status\`, \`run_at\`)`,
+	`create index \`schema_change_jobs_change_set_idx\` on \`schema_change_jobs\` (\`change_set_id\`)`,
+	`create unique index \`schema_change_jobs_in_flight_uq\` on \`schema_change_jobs\` ((case when (\`status\` in ('pending', 'running')) then \`target_type\` end), (case when (\`status\` in ('pending', 'running')) then \`target_id\` end))`,
+	`create index \`schema_change_jobs_model_idx\` on \`schema_change_jobs\` (\`model_id\`, \`created_at\` desc)`,
+	`create index \`schema_drafts_definition_idx\` on \`schema_drafts\` (\`definition_id\`)`,
+	`create index \`site_app_roles_role_idx\` on \`site_app_roles\` (\`role_id\`)`,
+	`create unique index \`sites_single_primary_uq\` on \`sites\` ((case when \`is_primary\` then \`is_primary\` end))`,
+	`create index \`unique_values_entry_idx\` on \`unique_values\` (\`entry_id\`)`,
+	`create unique index \`webhook_deliveries_event_uq\` on \`webhook_deliveries\` (\`webhook_id\`, \`event_id\`)`,
+	`create index \`webhook_deliveries_webhook_idx\` on \`webhook_deliveries\` (\`webhook_id\`, \`created_at\` desc)`,
+	`create table \`advisory_locks\` (
+  \`namespace\` int not null,
+  \`lock_key\` int not null,
+  constraint \`advisory_locks_pkey\` primary key (\`namespace\`, \`lock_key\`)
+)`,
+	`create table \`notifications\` (
+  \`id\` bigint not null auto_increment,
+  \`channel\` varchar(64) not null,
+  \`payload\` longtext not null,
+  \`created_at\` datetime(6) not null default current_timestamp(6),
+  constraint \`notifications_pkey\` primary key (\`id\`)
+)`,
+	`create index \`notifications_created_idx\` on \`notifications\` (\`created_at\`)`,
+	`create table \`sequence_entry_heads_change_seq\` (
+  \`value\` bigint not null auto_increment,
+  constraint \`sequence_entry_heads_change_seq_pkey\` primary key (\`value\`)
+)`,
+	`create trigger \`media_assets_folder_id_fkey_set_null\` before delete on \`media_folders\` for each row
+  update \`media_assets\` set \`folder_id\` = null where \`folder_id\` = old.\`id\` and \`site_id\` = old.\`site_id\``,
+	`create trigger \`schema_revisions_no_update\` before update on \`schema_revisions\` for each row
+  signal sqlstate '45000' set message_text = 'schema_revisions rows are immutable'`,
+	`create trigger \`content_revisions_no_update\` before update on \`content_revisions\` for each row
+  signal sqlstate '45000' set message_text = 'content_revisions rows are immutable'`,
+	`insert into \`system_versions\` () values ()`,
+	`insert into \`schema_settings\` () values ()`,
+	`insert into \`locales\` (\`code\`, \`label\`, \`is_default\`) values ('en', 'English', 1)`,
+	`insert into \`sites\` (\`id\`, \`key\`, \`name\`, \`is_primary\`) values ('00000000-0000-4000-b000-000000000001', 'default', 'Default site', 1)`,
+	`insert into \`publication_state\` (\`site_id\`, \`last_seq\`) values ('00000000-0000-4000-b000-000000000001', 0)`,
+	`insert into \`app_roles\` (\`id\`, \`key\`, \`name\`, \`description\`, \`is_system\`) values
+    ('00000000-0000-4000-a000-000000000001', 'public', 'Public', 'Applies to every caller without a token. Grants nothing until you add permissions.', 1),
+    ('00000000-0000-4000-a000-000000000002', 'authenticated', 'Authenticated', 'Held by every signed-in app user, in addition to their custom roles. Grants nothing until you add permissions.', 1)`,
+	`insert into \`site_app_roles\` (\`site_id\`, \`audience\`, \`role_id\`) values
+    ('00000000-0000-4000-b000-000000000001', 'public', '00000000-0000-4000-a000-000000000001'),
+    ('00000000-0000-4000-b000-000000000001', 'authenticated', '00000000-0000-4000-a000-000000000002')`
+];
+const TABLES$1 = [
+	"system_versions",
+	"jobs",
+	"outbox_events",
+	"audit_events",
+	"admin_users",
+	"admin_roles",
+	"admin_role_permissions",
+	"admin_user_roles",
+	"admin_sessions",
+	"admin_invitations",
+	"password_resets",
+	"setup_tokens",
+	"api_tokens",
+	"system_settings",
+	"models",
+	"schema_revisions",
+	"model_active_versions",
+	"schema_change_jobs",
+	"locales",
+	"schema_settings",
+	"entries",
+	"content_revisions",
+	"entry_heads",
+	"relation_edges",
+	"unique_values",
+	"publication_state",
+	"publication_log",
+	"media_folders",
+	"media_assets",
+	"media_variants",
+	"media_references",
+	"media_upload_grants",
+	"scheduled_publications",
+	"webhooks",
+	"webhook_deliveries",
+	"deployment_connections",
+	"deployment_runs",
+	"preview_tokens",
+	"app_users",
+	"app_roles",
+	"app_role_permissions",
+	"app_user_roles",
+	"app_refresh_tokens",
+	"app_oauth_accounts",
+	"email_confirmations",
+	"app_password_resets",
+	"app_login_codes",
+	"extension_hook_runs",
+	"field_reads",
+	"token_reads",
+	"change_sets",
+	"schema_drafts",
+	"change_set_items",
+	"publication_snapshots",
+	"editor_presence",
+	"content_health_findings",
+	"sites",
+	"site_app_roles",
+	"assist_runs",
+	"advisory_locks",
+	"notifications",
+	"sequence_entry_heads_change_seq"
+];
+/** Runs the statements on one connection, where `foreign_key_checks` is off (tables reference in cycles). */
+const withoutForeignKeyChecks = async (db, statements) => db.connection().execute(async (connection) => {
+	await sql`set foreign_key_checks = 0`.execute(connection);
+	try {
+		for (const statement of statements) await sql.raw(statement).execute(connection);
+	} finally {
+		await sql`set foreign_key_checks = 1`.execute(connection);
+	}
+});
+const up$9 = async (db) => withoutForeignKeyChecks(db, STATEMENTS$1);
+const down$9 = async (db) => withoutForeignKeyChecks(db, [...TABLES$1].reverse().map((table) => `drop table if exists \`${table}\``));
+//#endregion
+//#region ../../apps/api/src/db/migrations/mysql/20261003170000_audit_events_seq.ts
+var _20261003170000_audit_events_seq_exports$1 = /* @__PURE__ */ __exportAll({
+	down: () => down$8,
+	up: () => up$8
+});
+/**
+* MySQL twin of `../20261003170000_audit_events_seq.ts`: `seq` is `AUTO_INCREMENT`, which InnoDB only allows
+* on an indexed column, hence `audit_events_seq_key` (MySQL only; PostgreSQL and SQLite need no index for a
+* tiebreaker). Existing rows are numbered in primary-key order. `db/mysql/tables.ts` lists `seq` as the
+* table's identity, so an insert's emulated RETURNING finds its row by `LAST_INSERT_ID()`.
+*/
+const up$8 = async (db) => {
+	await sql`alter table \`audit_events\`
+    add column \`seq\` bigint not null auto_increment,
+    add unique key \`audit_events_seq_key\` (\`seq\`)`.execute(db);
+};
+const down$8 = async (db) => {
+	await sql`alter table \`audit_events\` drop column \`seq\``.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/mysql/20261004120000_models_site_scope.ts
+var _20261004120000_models_site_scope_exports$1 = /* @__PURE__ */ __exportAll({
+	down: () => down$7,
+	up: () => up$7
+});
+/**
+* MySQL twin of `../20261004120000_models_site_scope.ts`. The per-scope API ID key uses functional key parts,
+* like the baseline: `coalesce(site_id, '')` for the scope (MySQL has no `NULLS NOT DISTINCT`) and the
+* case-folded API ID of live rows only (a deleted row's part is NULL, and NULLs never collide).
+*/
+const up$7 = async (db) => {
+	await sql`alter table \`models\` add column \`site_id\` char(36) character set ascii collate ascii_general_ci`.execute(db);
+	await sql`create index \`models_site_idx\` on \`models\` (\`site_id\`)`.execute(db);
+	await sql`alter table \`models\` add constraint \`models_site_id_fkey\` foreign key (\`site_id\`) references \`sites\` (\`id\`)`.execute(db);
+	await sql`drop index \`models_api_key_uq\` on \`models\``.execute(db);
+	await sql`create unique index \`models_api_key_uq\` on \`models\`
+    ((coalesce(\`site_id\`, '')), (case when (\`deleted_at\` IS NULL) then lower(\`api_key\`) end))`.execute(db);
+	await sql`alter table \`schema_drafts\` add column \`shared\` tinyint(1) not null default 0`.execute(db);
+};
+const down$7 = async (db) => {
+	const { rows } = await sql`select count(*) as count from \`models\` where \`site_id\` is not null`.execute(db);
+	if (Number(rows[0]?.count ?? 0) > 0) throw new Error("Cannot roll back per-site schema while definitions belong to a site: two sites may share an API ID. Share or delete the site definitions first.");
+	await sql`alter table \`schema_drafts\` drop column \`shared\``.execute(db);
+	await sql`drop index \`models_api_key_uq\` on \`models\``.execute(db);
+	await sql`create unique index \`models_api_key_uq\` on \`models\`
+    ((case when (\`deleted_at\` IS NULL) then lower(\`api_key\`) end))`.execute(db);
+	await sql`alter table \`models\` drop foreign key \`models_site_id_fkey\``.execute(db);
+	await sql`drop index \`models_site_idx\` on \`models\``.execute(db);
+	await sql`alter table \`models\` drop column \`site_id\``.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/mysql/20261004130000_site_seo_settings.ts
+var _20261004130000_site_seo_settings_exports$1 = /* @__PURE__ */ __exportAll({
+	down: () => down$6,
+	up: () => up$6
+});
+/**
+* MySQL twin of `../20261004130000_site_seo_settings.ts`. `insert ignore` stands in for `on conflict do
+* nothing` (the grant's unique key); the permissions version moves only when a grant was added or removed.
+*/
+const bumpPermissionsVersion$1 = (db) => sql`update \`system_versions\` set \`permissions_version\` = \`permissions_version\` + 1,
+    \`updated_at\` = current_timestamp(6)`.execute(db);
+const up$6 = async (db) => {
+	await sql`alter table \`sites\` add column \`seo_defaults\` json`.execute(db);
+	const granted = await sql`
+    insert ignore into \`admin_role_permissions\` (\`id\`, \`role_id\`, \`action\`, \`model_id\`, \`condition\`, \`field_ids\`)
+    select uuid(), \`role_id\`, 'site.settings', null, null, null
+    from \`admin_role_permissions\`
+    where \`action\` = 'publishing.manage' and \`model_id\` is null
+  `.execute(db);
+	if (Number(granted.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion$1(db);
+};
+const down$6 = async (db) => {
+	const revoked = await sql`delete from \`admin_role_permissions\` where \`action\` = 'site.settings'`.execute(db);
+	if (Number(revoked.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion$1(db);
+	await sql`alter table \`sites\` drop column \`seo_defaults\``.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/mysql/20261005120000_entry_heads_entry_created_at.ts
+var _20261005120000_entry_heads_entry_created_at_exports$1 = /* @__PURE__ */ __exportAll({
+	down: () => down$5,
+	up: () => up$5
+});
+/**
+* MySQL twin of `../20261005120000_entry_heads_entry_created_at.ts`. The column is added `ALGORITHM=INSTANT`
+* and backfilled in batches; the index is built online (`ALGORITHM=INPLACE, LOCK=NONE`), so writes continue.
+* It is one more index of `entry_heads`, which is why `MYSQL_MAX_FIELD_INDEXES` (db/limits.ts) went down by one.
+*/
+const INDEX$1 = "entry_heads_entry_order_idx";
+const BATCH = 5e3;
+const up$5 = async (db) => {
+	await sql`alter table \`entry_heads\` add column \`entry_created_at\` datetime(6), algorithm=instant`.execute(db);
+	for (;;) {
+		const result = await sql`update \`entry_heads\` set \`entry_created_at\` = (
+      select e.\`created_at\` from \`entries\` e where e.\`id\` = \`entry_heads\`.\`entry_id\`
+    ) where \`entry_created_at\` is null limit ${sql.lit(BATCH)}`.execute(db);
+		if (Number(result.numAffectedRows ?? 0n) < BATCH) break;
+	}
+	await sql`create index ${sql.id(INDEX$1)} on \`entry_heads\`
+    (\`site_id\`, \`model_id\`, \`state\`, \`entry_created_at\` desc, \`entry_id\`) algorithm=inplace lock=none`.execute(db);
+};
+const down$5 = async (db) => {
+	await sql`drop index ${sql.id(INDEX$1)} on \`entry_heads\``.execute(db);
+	await sql`alter table \`entry_heads\` drop column \`entry_created_at\``.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/mysql/index.ts
+const MYSQL_MIGRATIONS = {
+	"0001_baseline": _0001_baseline_exports$1,
+	"20261003170000_audit_events_seq": _20261003170000_audit_events_seq_exports$1,
+	"20261004120000_models_site_scope": _20261004120000_models_site_scope_exports$1,
+	"20261004130000_site_seo_settings": _20261004130000_site_seo_settings_exports$1,
+	"20261005120000_entry_heads_entry_created_at": _20261005120000_entry_heads_entry_created_at_exports$1,
+	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/sqlite/0001_baseline.ts
+var _0001_baseline_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$4,
+	up: () => up$4
+});
+/**
+* SQLite baseline: Shapio's whole system schema as of PostgreSQL migration
+* `20261003160000_create_assist_runs`, in one step, with the rows those migrations seed. Later migrations
+* follow the twin rule (`./index.ts`).
+*
+* Written from the migrated PostgreSQL catalog with the type mapping in `db/sqlite/codec.ts`, then kept
+* honest by `test/sqliteBaseline.int.test.ts`, which migrates both databases and compares the logical
+* schema (tables, columns, nullability, defaults, keys, foreign keys, indexes, seed rows). Differences that
+* are deliberate:
+* - UNIQUE constraints are named unique indexes (SQLite only names those in its errors); the three
+*   `NULLS NOT DISTINCT` ones index `coalesce(column, '')` (`db/sqlite/nullsNotDistinct.ts`).
+* - `entry_heads_data_gin` (GIN, containment queries) has no SQLite equivalent and is left out.
+* - The `entry_heads_change_seq` sequence is a row in `sequences`, advanced by `shapio_nextval()`.
+* - `media_assets_folder_id_fkey` sets only `folder_id` to null on delete (PostgreSQL's column list), which
+*   SQLite expresses as a trigger.
+* - `editor_presence` is a plain table (UNLOGGED has no SQLite meaning); the immutability triggers raise.
+* - Identity keys (`outbox_events.id`, `publication_log.id`) are `integer primary key autoincrement`.
+* Defaults call functions Shapio registers on every connection (`db/sqlite/functions.ts`).
+*/
+const STATEMENTS = [
+	`create table "system_versions" (
+    "id" integer_boolean not null default 1,
+    "schema_version" integer not null default 0,
+    "permissions_version" integer not null default 0,
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "system_versions_id_check" CHECK (id),
+    constraint "system_versions_pkey" primary key (id)
+  )`,
+	`create table "jobs" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "type" text not null,
+    "payload" text_jsonb not null default ('{}'),
+    "status" text not null default ('pending'),
+    "priority" integer not null default 0,
+    "run_at" text_timestamptz not null default (shapio_now()),
+    "attempts" integer not null default 0,
+    "max_attempts" integer not null default 10,
+    "idempotency_key" text,
+    "locked_by" text,
+    "locked_until" text_timestamptz,
+    "checkpoint" text_jsonb,
+    "result" text_jsonb,
+    "last_error" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "finished_at" text_timestamptz,
+    constraint "jobs_max_attempts_check" CHECK ((max_attempts > 0)),
+    constraint "jobs_status_check" CHECK ((status IN ('pending', 'running', 'succeeded', 'dead'))),
+    constraint "jobs_pkey" primary key (id)
+  )`,
+	`create table "outbox_events" (
+    "id" integer primary key autoincrement,
+    "event_id" text_uuid not null default (gen_random_uuid()),
+    "type" text not null,
+    "aggregate_type" text not null,
+    "aggregate_id" text not null,
+    "payload" text_jsonb not null default ('{}'),
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "dispatched_at" text_timestamptz,
+    "dispatch_attempts" integer not null default 0,
+    "last_dispatch_error" text,
+    "site_id" text_uuid,
+    constraint "outbox_events_site_fk" foreign key (site_id) references sites (id) on delete set null
+  )`,
+	`create unique index "outbox_events_event_id_key" on "outbox_events" (event_id)`,
+	`create table "audit_events" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "occurred_at" text_timestamptz not null default (shapio_now()),
+    "actor_type" text not null,
+    "actor_id" text,
+    "action" text not null,
+    "target_type" text,
+    "target_id" text,
+    "outcome" text not null,
+    "request_id" text,
+    "ip" text,
+    "metadata" text_jsonb not null default ('{}'),
+    "site_id" text_uuid,
+    constraint "audit_events_actor_type_check" CHECK ((actor_type IN ('admin', 'app_user', 'token', 'anonymous', 'system'))),
+    constraint "audit_events_outcome_check" CHECK ((outcome IN ('success', 'failure'))),
+    constraint "audit_events_site_fk" foreign key (site_id) references sites (id) on delete set null,
+    constraint "audit_events_pkey" primary key (id)
+  )`,
+	`create table "admin_users" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "email" text not null,
+    "name" text not null default (''),
+    "password_hash" text not null,
+    "status" text not null default ('active'),
+    "last_login_at" text_timestamptz,
+    "password_changed_at" text_timestamptz not null default (shapio_now()),
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "admin_users_status_check" CHECK ((status IN ('active', 'disabled'))),
+    constraint "admin_users_pkey" primary key (id)
+  )`,
+	`create unique index "admin_users_email_key" on "admin_users" (email)`,
+	`create table "admin_roles" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "key" text not null,
+    "name" text not null,
+    "description" text not null default (''),
+    "kind" text not null default ('admin'),
+    "is_system" integer_boolean not null default 0,
+    "version" integer not null default 1,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "admin_roles_key_check" CHECK ((key REGEXP '^[a-z][a-z0-9-]{0,62}$')),
+    constraint "admin_roles_kind_check" CHECK ((kind IN ('admin', 'delivery'))),
+    constraint "admin_roles_pkey" primary key (id)
+  )`,
+	`create unique index "admin_roles_key_key" on "admin_roles" (key)`,
+	`create table "admin_role_permissions" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "role_id" text_uuid not null,
+    "action" text not null,
+    "model_id" text,
+    "condition" text,
+    "field_ids" text_array,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "admin_role_permissions_condition_check" CHECK ((condition = 'ownedByPrincipal')),
+    constraint "admin_role_permissions_role_id_fkey" foreign key (role_id) references admin_roles (id) on delete cascade,
+    constraint "admin_role_permissions_pkey" primary key (id)
+  )`,
+	`create unique index "admin_role_permissions_grant_uq" on "admin_role_permissions" (role_id, action, coalesce(model_id, ''))`,
+	`create table "admin_user_roles" (
+    "admin_user_id" text_uuid not null,
+    "role_id" text_uuid not null,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid,
+    "id" text_uuid not null default (gen_random_uuid()),
+    constraint "admin_user_roles_admin_user_id_fkey" foreign key (admin_user_id) references admin_users (id) on delete cascade,
+    constraint "admin_user_roles_role_id_fkey" foreign key (role_id) references admin_roles (id) on delete restrict,
+    constraint "admin_user_roles_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "admin_user_roles_pk" primary key (id)
+  )`,
+	`create unique index "admin_user_roles_assignment_uq" on "admin_user_roles" (admin_user_id, role_id, coalesce(site_id, ''))`,
+	`create table "admin_sessions" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "admin_user_id" text_uuid not null,
+    "token_hash" text not null,
+    "csrf_secret" text not null,
+    "ip" text,
+    "user_agent" text,
+    "last_seen_at" text_timestamptz not null default (shapio_now()),
+    "expires_at" text_timestamptz not null,
+    "revoked_at" text_timestamptz,
+    "rotation_required" integer_boolean not null default 0,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "admin_sessions_admin_user_id_fkey" foreign key (admin_user_id) references admin_users (id) on delete cascade,
+    constraint "admin_sessions_pkey" primary key (id)
+  )`,
+	`create unique index "admin_sessions_token_hash_key" on "admin_sessions" (token_hash)`,
+	`create table "admin_invitations" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "email" text not null,
+    "token_hash" text,
+    "invited_by" text_uuid,
+    "expires_at" text_timestamptz not null,
+    "accepted_at" text_timestamptz,
+    "revoked_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "role_assignments" text_jsonb not null default ('[]'),
+    constraint "admin_invitations_invited_by_fkey" foreign key (invited_by) references admin_users (id) on delete set null,
+    constraint "admin_invitations_pkey" primary key (id)
+  )`,
+	`create unique index "admin_invitations_token_hash_key" on "admin_invitations" (token_hash)`,
+	`create table "password_resets" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "admin_user_id" text_uuid not null,
+    "token_hash" text,
+    "expires_at" text_timestamptz not null,
+    "used_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "password_resets_admin_user_id_fkey" foreign key (admin_user_id) references admin_users (id) on delete cascade,
+    constraint "password_resets_pkey" primary key (id)
+  )`,
+	`create unique index "password_resets_token_hash_key" on "password_resets" (token_hash)`,
+	`create table "setup_tokens" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "token_hash" text not null,
+    "used_at" text_timestamptz,
+    "superseded_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "setup_tokens_pkey" primary key (id)
+  )`,
+	`create unique index "setup_tokens_token_hash_key" on "setup_tokens" (token_hash)`,
+	`create table "api_tokens" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "name" text not null,
+    "token_hash" text not null,
+    "token_prefix" text not null,
+    "role_id" text_uuid not null,
+    "created_by" text_uuid,
+    "expires_at" text_timestamptz,
+    "last_used_at" text_timestamptz,
+    "revoked_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid,
+    constraint "api_tokens_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "api_tokens_role_id_fkey" foreign key (role_id) references admin_roles (id) on delete restrict,
+    constraint "api_tokens_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "api_tokens_pkey" primary key (id)
+  )`,
+	`create unique index "api_tokens_token_hash_key" on "api_tokens" (token_hash)`,
+	`create table "system_settings" (
+    "key" text not null,
+    "value" text not null,
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "system_settings_pkey" primary key (key)
+  )`,
+	`create table "models" (
+    "id" text_uuid not null,
+    "kind" text not null,
+    "api_key" text not null,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "deleted_at" text_timestamptz,
+    constraint "models_kind_check" CHECK ((kind IN ('collection', 'singleton', 'component'))),
+    constraint "models_pkey" primary key (id)
+  )`,
+	`create table "schema_revisions" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "model_id" text_uuid not null,
+    "version" integer not null,
+    "definition" text_jsonb not null,
+    "hash" text not null,
+    "parent_revision_id" text_uuid,
+    "created_by_type" text not null,
+    "created_by_id" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    constraint "schema_revisions_version_check" CHECK ((version > 0)),
+    constraint "schema_revisions_model_id_fkey" foreign key (model_id) references models (id) on delete restrict,
+    constraint "schema_revisions_parent_revision_id_fkey" foreign key (parent_revision_id) references schema_revisions (id),
+    constraint "schema_revisions_pkey" primary key (id)
+  )`,
+	`create unique index "schema_revisions_model_version_uq" on "schema_revisions" (model_id, version)`,
+	`create table "model_active_versions" (
+    "model_id" text_uuid not null,
+    "revision_id" text_uuid not null,
+    "version" integer not null,
+    "schema_version" integer not null,
+    "activated_at" text_timestamptz not null default (shapio_now()),
+    constraint "model_active_versions_model_id_fkey" foreign key (model_id) references models (id) on delete cascade,
+    constraint "model_active_versions_revision_id_fkey" foreign key (revision_id) references schema_revisions (id),
+    constraint "model_active_versions_pkey" primary key (model_id)
+  )`,
+	`create table "schema_change_jobs" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "target_type" text not null,
+    "target_id" text not null,
+    "model_id" text_uuid,
+    "from_revision_id" text_uuid,
+    "to_revision_id" text_uuid,
+    "status" text not null default ('pending'),
+    "plan" text_jsonb not null default ('{}'),
+    "job_id" text_uuid,
+    "error" text_jsonb,
+    "requested_by_type" text not null,
+    "requested_by_id" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "finished_at" text_timestamptz,
+    "change_set_id" text_uuid,
+    constraint "schema_change_jobs_status_check" CHECK ((status IN ('pending', 'running', 'activated', 'failed', 'cancelled'))),
+    constraint "schema_change_jobs_target_type_check" CHECK ((target_type IN ('model', 'locale'))),
+    constraint "schema_change_jobs_change_set_id_fkey" foreign key (change_set_id) references change_sets (id) on delete set null,
+    constraint "schema_change_jobs_from_revision_id_fkey" foreign key (from_revision_id) references schema_revisions (id),
+    constraint "schema_change_jobs_job_id_fkey" foreign key (job_id) references jobs (id) on delete set null,
+    constraint "schema_change_jobs_model_id_fkey" foreign key (model_id) references models (id),
+    constraint "schema_change_jobs_to_revision_id_fkey" foreign key (to_revision_id) references schema_revisions (id),
+    constraint "schema_change_jobs_pkey" primary key (id)
+  )`,
+	`create table "locales" (
+    "code" text not null,
+    "label" text not null,
+    "is_default" integer_boolean not null default 0,
+    "fallbacks" text_array not null default ('[]'),
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "locales_pkey" primary key (code)
+  )`,
+	`create table "schema_settings" (
+    "id" integer_boolean not null default 1,
+    "read_only" integer_boolean not null default 0,
+    "read_only_reason" text,
+    "updated_by_type" text,
+    "updated_by_id" text,
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "schema_settings_id_check" CHECK (id),
+    constraint "schema_settings_pkey" primary key (id)
+  )`,
+	`create table "entries" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "model_id" text_uuid not null,
+    "owner_app_user_id" text_uuid,
+    "created_by_admin_id" text_uuid,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "deleted_at" text_timestamptz,
+    "site_id" text_uuid not null,
+    constraint "entries_created_by_admin_id_fkey" foreign key (created_by_admin_id) references admin_users (id) on delete set null,
+    constraint "entries_model_id_fkey" foreign key (model_id) references models (id) on delete restrict,
+    constraint "entries_owner_app_user_fk" foreign key (owner_app_user_id) references app_users (id) on delete set null,
+    constraint "entries_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "entries_pkey" primary key (id)
+  )`,
+	`create unique index "entries_id_site_uq" on "entries" (id, site_id)`,
+	`create table "content_revisions" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "entry_id" text_uuid not null,
+    "locale" text not null,
+    "schema_revision_id" text_uuid not null,
+    "data" text_jsonb not null,
+    "reason" text not null,
+    "author_type" text not null,
+    "author_id" text,
+    "parent_revision_id" text_uuid,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    constraint "content_revisions_reason_check" CHECK ((reason IN ('create', 'save', 'publish', 'restore', 'duplicate', 'localize', 'conversion'))),
+    constraint "content_revisions_entry_id_fkey" foreign key (entry_id) references entries (id) on delete restrict,
+    constraint "content_revisions_parent_revision_id_fkey" foreign key (parent_revision_id) references content_revisions (id),
+    constraint "content_revisions_schema_revision_id_fkey" foreign key (schema_revision_id) references schema_revisions (id),
+    constraint "content_revisions_pkey" primary key (id)
+  )`,
+	`create table "entry_heads" (
+    "entry_id" text_uuid not null,
+    "model_id" text_uuid not null,
+    "locale" text not null,
+    "state" text not null,
+    "revision_id" text_uuid not null,
+    "data" text_jsonb not null,
+    "autosaved_at" text_timestamptz,
+    "version" integer not null default 1,
+    "change_seq" bigint not null default (shapio_nextval('entry_heads_change_seq')),
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "entry_heads_state_check" CHECK ((state IN ('draft', 'published'))),
+    constraint "entry_heads_entry_id_fkey" foreign key (entry_id) references entries (id) on delete cascade,
+    constraint "entry_heads_entry_site_fk" foreign key (entry_id, site_id) references entries (id, site_id) on delete cascade,
+    constraint "entry_heads_revision_id_fkey" foreign key (revision_id) references content_revisions (id),
+    constraint "entry_heads_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "entry_heads_pkey" primary key (entry_id, locale, state)
+  )`,
+	`create table "relation_edges" (
+    "source_entry_id" text_uuid not null,
+    "locale" text not null,
+    "state" text not null,
+    "field_id" text_uuid not null,
+    "position" integer not null,
+    "target_entry_id" text_uuid not null,
+    constraint "relation_edges_head_fk" foreign key (source_entry_id, locale, state) references entry_heads (entry_id, locale, state) on delete cascade,
+    constraint "relation_edges_target_entry_id_fkey" foreign key (target_entry_id) references entries (id),
+    constraint "relation_edges_pkey" primary key (source_entry_id, locale, state, field_id, "position")
+  )`,
+	`create table "unique_values" (
+    "field_id" text_uuid not null,
+    "locale" text not null,
+    "state" text not null,
+    "value_hash" text not null,
+    "entry_id" text_uuid not null,
+    "model_id" text_uuid not null,
+    "site_id" text_uuid not null,
+    constraint "unique_values_state_check" CHECK ((state IN ('draft', 'published'))),
+    constraint "unique_values_entry_id_fkey" foreign key (entry_id) references entries (id) on delete cascade,
+    constraint "unique_values_entry_site_fk" foreign key (entry_id, site_id) references entries (id, site_id) on delete cascade,
+    constraint "unique_values_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "unique_values_pkey" primary key (site_id, field_id, locale, state, value_hash)
+  )`,
+	`create table "publication_state" (
+    "last_seq" bigint not null default 0,
+    "site_id" text_uuid not null,
+    constraint "publication_state_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "publication_state_pkey" primary key (site_id)
+  )`,
+	`create table "publication_log" (
+    "id" integer primary key autoincrement,
+    "entry_id" text_uuid not null,
+    "model_id" text_uuid not null,
+    "locale" text not null,
+    "revision_id" text_uuid not null,
+    "from_seq" bigint not null,
+    "to_seq" bigint,
+    "published_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "publication_log_entry_id_fkey" foreign key (entry_id) references entries (id),
+    constraint "publication_log_entry_site_fk" foreign key (entry_id, site_id) references entries (id, site_id) on delete restrict,
+    constraint "publication_log_revision_id_fkey" foreign key (revision_id) references content_revisions (id),
+    constraint "publication_log_site_fk" foreign key (site_id) references sites (id) on delete restrict
+  )`,
+	`create table "media_folders" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "parent_id" text_uuid,
+    "name" text not null,
+    "created_by" text_uuid,
+    "version" integer not null default 1,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "media_folders_name_check" CHECK (((length(name) >= 1) AND (length(name) <= 255))),
+    constraint "media_folders_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "media_folders_parent_id_fkey" foreign key (parent_id, site_id) references media_folders (id, site_id) on delete restrict,
+    constraint "media_folders_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "media_folders_pkey" primary key (id)
+  )`,
+	`create unique index "media_folders_id_site_uq" on "media_folders" (id, site_id)`,
+	`create table "media_assets" (
+    "id" text_uuid not null,
+    "folder_id" text_uuid,
+    "storage_driver" text not null,
+    "storage_key" text not null,
+    "original_filename" text not null,
+    "mime_type" text not null,
+    "size_bytes" bigint not null,
+    "width" integer,
+    "height" integer,
+    "checksum_sha256" text,
+    "alt" text not null default (''),
+    "caption" text not null default (''),
+    "focal_x" real,
+    "focal_y" real,
+    "visibility" text not null default ('public'),
+    "status" text not null default ('processing'),
+    "processing_error" text,
+    "created_by" text_uuid,
+    "version" integer not null default 1,
+    "deleted_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "media_assets_focal_point_ck" CHECK (((focal_x IS NULL) = (focal_y IS NULL))),
+    constraint "media_assets_focal_x_check" CHECK (((focal_x >= 0) AND (focal_x <= 1))),
+    constraint "media_assets_focal_y_check" CHECK (((focal_y >= 0) AND (focal_y <= 1))),
+    constraint "media_assets_status_check" CHECK ((status IN ('processing', 'ready', 'failed'))),
+    constraint "media_assets_storage_driver_check" CHECK ((storage_driver IN ('local', 's3'))),
+    constraint "media_assets_visibility_check" CHECK ((visibility IN ('public', 'private'))),
+    constraint "media_assets_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "media_assets_folder_id_fkey" foreign key (folder_id, site_id) references media_folders (id, site_id),
+    constraint "media_assets_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "media_assets_pkey" primary key (id)
+  )`,
+	`create table "media_variants" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "asset_id" text_uuid not null,
+    "name" text not null,
+    "width" integer,
+    "height" integer,
+    "format" text not null,
+    "mime_type" text not null,
+    "storage_key" text,
+    "size_bytes" bigint,
+    "checksum_sha256" text,
+    "status" text not null default ('pending'),
+    "error" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "media_variants_status_check" CHECK ((status IN ('pending', 'ready', 'failed'))),
+    constraint "media_variants_asset_id_fkey" foreign key (asset_id) references media_assets (id) on delete cascade,
+    constraint "media_variants_pkey" primary key (id)
+  )`,
+	`create unique index "media_variants_asset_name_uq" on "media_variants" (asset_id, name)`,
+	`create table "media_references" (
+    "asset_id" text_uuid not null,
+    "entry_id" text_uuid not null,
+    "model_id" text_uuid not null,
+    "field_id" text not null,
+    "locale" text not null,
+    "state" text not null,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    constraint "media_references_state_check" CHECK ((state IN ('draft', 'published'))),
+    constraint "media_references_asset_id_fkey" foreign key (asset_id) references media_assets (id) on delete cascade,
+    constraint "media_references_entry_id_fkey" foreign key (entry_id) references entries (id) on delete cascade,
+    constraint "media_references_pk" primary key (asset_id, entry_id, locale, state, field_id)
+  )`,
+	`create table "media_upload_grants" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "asset_id" text_uuid not null,
+    "kind" text not null,
+    "storage_driver" text not null,
+    "storage_key" text not null,
+    "original_filename" text not null,
+    "declared_mime_type" text not null,
+    "max_size_bytes" bigint not null,
+    "folder_id" text_uuid,
+    "visibility" text not null,
+    "created_by" text_uuid,
+    "created_by_principal" text not null,
+    "status" text not null default ('pending'),
+    "expires_at" text_timestamptz not null,
+    "consumed_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "media_upload_grants_kind_check" CHECK ((kind IN ('create', 'replace'))),
+    constraint "media_upload_grants_status_check" CHECK ((status IN ('pending', 'consumed', 'rejected', 'expired'))),
+    constraint "media_upload_grants_storage_driver_check" CHECK ((storage_driver IN ('local', 's3'))),
+    constraint "media_upload_grants_visibility_check" CHECK ((visibility IN ('public', 'private'))),
+    constraint "media_upload_grants_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "media_upload_grants_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "media_upload_grants_pkey" primary key (id)
+  )`,
+	`create unique index "media_upload_grants_storage_key_key" on "media_upload_grants" (storage_key)`,
+	`create table "scheduled_publications" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "entry_id" text_uuid not null,
+    "model_id" text_uuid not null,
+    "locale" text not null,
+    "action" text not null,
+    "run_at" text_timestamptz not null,
+    "status" text not null default ('scheduled'),
+    "created_by_token" text_uuid,
+    "job_id" text_uuid,
+    "snapshot_seq" bigint,
+    "error" text,
+    "executed_at" text_timestamptz,
+    "created_by" text_uuid,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "scheduled_publications_action_check" CHECK ((action IN ('publish', 'unpublish'))),
+    constraint "scheduled_publications_status_check" CHECK ((status IN ('scheduled', 'done', 'failed', 'cancelled'))),
+    constraint "scheduled_publications_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "scheduled_publications_created_by_token_fkey" foreign key (created_by_token) references api_tokens (id) on delete set null,
+    constraint "scheduled_publications_entry_id_fkey" foreign key (entry_id) references entries (id) on delete cascade,
+    constraint "scheduled_publications_entry_site_fk" foreign key (entry_id, site_id) references entries (id, site_id) on delete cascade,
+    constraint "scheduled_publications_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "scheduled_publications_pkey" primary key (id)
+  )`,
+	`create table "webhooks" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "name" text not null,
+    "url" text not null,
+    "events" text_array not null default ('[]'),
+    "enabled" integer_boolean not null default 1,
+    "secret_encrypted" text not null,
+    "allow_private_network" integer_boolean not null default 0,
+    "max_attempts" integer not null default 8,
+    "version" integer not null default 1,
+    "created_by" text_uuid,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid,
+    constraint "webhooks_max_attempts_check" CHECK (((max_attempts >= 1) AND (max_attempts <= 20))),
+    constraint "webhooks_name_check" CHECK (((length(name) >= 1) AND (length(name) <= 200))),
+    constraint "webhooks_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "webhooks_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "webhooks_pkey" primary key (id)
+  )`,
+	`create table "webhook_deliveries" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "webhook_id" text_uuid not null,
+    "event_id" text_uuid,
+    "event_type" text not null,
+    "payload" text_jsonb not null,
+    "is_test" integer_boolean not null default 0,
+    "status" text not null default ('pending'),
+    "attempts" integer not null default 0,
+    "last_response_status" integer,
+    "last_error" text,
+    "attempt_log" text_jsonb not null default ('[]'),
+    "job_id" text_uuid,
+    "delivered_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "webhook_deliveries_status_check" CHECK ((status IN ('pending', 'retrying', 'succeeded', 'dead'))),
+    constraint "webhook_deliveries_webhook_id_fkey" foreign key (webhook_id) references webhooks (id) on delete cascade,
+    constraint "webhook_deliveries_pkey" primary key (id)
+  )`,
+	`create table "deployment_connections" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "name" text not null,
+    "provider" text not null,
+    "settings" text_jsonb not null default ('{}'),
+    "secrets_encrypted" text not null,
+    "secret_env_refs" text_jsonb not null default ('{}'),
+    "delivery_role_id" text_uuid,
+    "preview_url_template" text,
+    "trigger_policy" text_array not null default ('[]'),
+    "debounce_seconds" integer not null default 10,
+    "allow_private_network" integer_boolean not null default 0,
+    "enabled" integer_boolean not null default 1,
+    "version" integer not null default 1,
+    "created_by" text_uuid,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "deployment_connections_debounce_seconds_check" CHECK (((debounce_seconds >= 0) AND (debounce_seconds <= 3600))),
+    constraint "deployment_connections_name_check" CHECK (((length(name) >= 1) AND (length(name) <= 200))),
+    constraint "deployment_connections_provider_check" CHECK ((provider IN ('generic_webhook', 'cloudflare_pages', 'vercel', 'netlify', 'github'))),
+    constraint "deployment_connections_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "deployment_connections_delivery_role_id_fkey" foreign key (delivery_role_id) references admin_roles (id) on delete set null,
+    constraint "deployment_connections_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "deployment_connections_pkey" primary key (id)
+  )`,
+	`create table "deployment_runs" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "connection_id" text_uuid not null,
+    "status" text not null default ('queued'),
+    "status_rank" integer not null default 0,
+    "trigger" text not null,
+    "snapshot_seq" bigint,
+    "schema_version" integer,
+    "retry_of" text_uuid,
+    "provider_ref" text,
+    "log_url" text,
+    "site_url" text,
+    "error" text,
+    "timeline" text_jsonb not null default ('[]'),
+    "job_id" text_uuid,
+    "triggered_at" text_timestamptz,
+    "finished_at" text_timestamptz,
+    "created_by" text_uuid,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "change_set_id" text_uuid,
+    constraint "deployment_runs_status_check" CHECK ((status IN ('queued', 'triggered', 'building', 'deployed', 'failed', 'unknown'))),
+    constraint "deployment_runs_trigger_check" CHECK ((trigger IN ('publish', 'change_set', 'schema', 'manual', 'retry'))),
+    constraint "deployment_runs_change_set_id_fkey" foreign key (change_set_id) references change_sets (id) on delete set null,
+    constraint "deployment_runs_connection_id_fkey" foreign key (connection_id) references deployment_connections (id) on delete cascade,
+    constraint "deployment_runs_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "deployment_runs_retry_of_fkey" foreign key (retry_of) references deployment_runs (id) on delete set null,
+    constraint "deployment_runs_pkey" primary key (id)
+  )`,
+	`create table "preview_tokens" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "token_hash" text not null,
+    "token_prefix" text not null,
+    "model_id" text_uuid not null,
+    "entry_id" text_uuid not null,
+    "locale" text,
+    "connection_id" text_uuid,
+    "delivery_role_id" text_uuid,
+    "created_by" text_uuid not null,
+    "expires_at" text_timestamptz not null,
+    "revoked_at" text_timestamptz,
+    "last_used_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "preview_tokens_connection_id_fkey" foreign key (connection_id) references deployment_connections (id) on delete set null,
+    constraint "preview_tokens_created_by_fkey" foreign key (created_by) references admin_users (id) on delete cascade,
+    constraint "preview_tokens_delivery_role_id_fkey" foreign key (delivery_role_id) references admin_roles (id) on delete set null,
+    constraint "preview_tokens_entry_id_fkey" foreign key (entry_id) references entries (id) on delete cascade,
+    constraint "preview_tokens_entry_site_fk" foreign key (entry_id, site_id) references entries (id, site_id) on delete cascade,
+    constraint "preview_tokens_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "preview_tokens_pkey" primary key (id)
+  )`,
+	`create unique index "preview_tokens_token_hash_key" on "preview_tokens" (token_hash)`,
+	`create table "app_users" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "email" text not null,
+    "name" text not null default (''),
+    "password_hash" text,
+    "confirmed_at" text_timestamptz,
+    "blocked_at" text_timestamptz,
+    "last_login_at" text_timestamptz,
+    "password_changed_at" text_timestamptz,
+    "deleted_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "token_version" integer not null default 0,
+    "site_id" text_uuid not null,
+    constraint "app_users_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "app_users_pkey" primary key (id)
+  )`,
+	`create table "app_roles" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "key" text not null,
+    "name" text not null,
+    "description" text not null default (''),
+    "is_system" integer_boolean not null default 0,
+    "version" integer not null default 1,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "app_roles_key_check" CHECK ((key REGEXP '^[a-z][a-z0-9-]{0,62}$')),
+    constraint "app_roles_pkey" primary key (id)
+  )`,
+	`create unique index "app_roles_key_key" on "app_roles" (key)`,
+	`create table "app_role_permissions" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "role_id" text_uuid not null,
+    "action" text not null,
+    "model_id" text,
+    "condition" text,
+    "field_ids" text_array,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "app_role_permissions_action_check" CHECK ((action IN ('read', 'create', 'update', 'delete', 'publish'))),
+    constraint "app_role_permissions_condition_check" CHECK ((condition = 'ownedByPrincipal')),
+    constraint "app_role_permissions_role_id_fkey" foreign key (role_id) references app_roles (id) on delete cascade,
+    constraint "app_role_permissions_pkey" primary key (id)
+  )`,
+	`create unique index "app_role_permissions_grant_uq" on "app_role_permissions" (role_id, action, coalesce(model_id, ''))`,
+	`create table "app_user_roles" (
+    "app_user_id" text_uuid not null,
+    "role_id" text_uuid not null,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "app_user_roles_app_user_id_fkey" foreign key (app_user_id) references app_users (id) on delete cascade,
+    constraint "app_user_roles_role_id_fkey" foreign key (role_id) references app_roles (id) on delete restrict,
+    constraint "app_user_roles_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "app_user_roles_pk" primary key (app_user_id, role_id)
+  )`,
+	`create table "app_refresh_tokens" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "app_user_id" text_uuid not null,
+    "family_id" text_uuid not null,
+    "token_hash" text not null,
+    "expires_at" text_timestamptz not null,
+    "used_at" text_timestamptz,
+    "reuse_grace_used_at" text_timestamptz,
+    "revoked_at" text_timestamptz,
+    "revoked_reason" text,
+    "ip" text,
+    "user_agent" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    constraint "app_refresh_tokens_app_user_id_fkey" foreign key (app_user_id) references app_users (id) on delete cascade,
+    constraint "app_refresh_tokens_pkey" primary key (id)
+  )`,
+	`create unique index "app_refresh_tokens_token_hash_key" on "app_refresh_tokens" (token_hash)`,
+	`create table "app_oauth_accounts" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "app_user_id" text_uuid not null,
+    "provider" text not null,
+    "provider_user_id" text not null,
+    "email" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "app_oauth_accounts_provider_check" CHECK ((provider IN ('google', 'github'))),
+    constraint "app_oauth_accounts_app_user_id_fkey" foreign key (app_user_id) references app_users (id) on delete cascade,
+    constraint "app_oauth_accounts_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "app_oauth_accounts_pkey" primary key (id)
+  )`,
+	`create unique index "app_oauth_accounts_identity_uq" on "app_oauth_accounts" (site_id, provider, provider_user_id)`,
+	`create table "email_confirmations" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "app_user_id" text_uuid not null,
+    "email" text not null,
+    "token_hash" text,
+    "expires_at" text_timestamptz not null,
+    "used_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "email_confirmations_app_user_id_fkey" foreign key (app_user_id) references app_users (id) on delete cascade,
+    constraint "email_confirmations_pkey" primary key (id)
+  )`,
+	`create unique index "email_confirmations_token_hash_key" on "email_confirmations" (token_hash)`,
+	`create table "app_password_resets" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "app_user_id" text_uuid not null,
+    "email" text not null,
+    "token_hash" text,
+    "expires_at" text_timestamptz not null,
+    "used_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "app_password_resets_app_user_id_fkey" foreign key (app_user_id) references app_users (id) on delete cascade,
+    constraint "app_password_resets_pkey" primary key (id)
+  )`,
+	`create unique index "app_password_resets_token_hash_key" on "app_password_resets" (token_hash)`,
+	`create table "app_login_codes" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "app_user_id" text_uuid not null,
+    "code_hash" text not null,
+    "expires_at" text_timestamptz not null,
+    "used_at" text_timestamptz,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "code_challenge" text not null,
+    constraint "app_login_codes_app_user_id_fkey" foreign key (app_user_id) references app_users (id) on delete cascade,
+    constraint "app_login_codes_pkey" primary key (id)
+  )`,
+	`create unique index "app_login_codes_code_hash_key" on "app_login_codes" (code_hash)`,
+	`create table "extension_hook_runs" (
+    "event_id" text_uuid not null,
+    "hook" text not null,
+    "job_id" text_uuid,
+    "completed_at" text_timestamptz not null default (shapio_now()),
+    constraint "extension_hook_runs_pkey" primary key (event_id, hook)
+  )`,
+	`create table "field_reads" (
+    "day" text_date not null,
+    "model_id" text_uuid not null,
+    "field_path" text not null,
+    "principal_key" text not null,
+    "selection" text not null,
+    "reads" bigint not null default 0,
+    "last_read_at" text_timestamptz not null,
+    "site_id" text_uuid not null,
+    constraint "field_reads_selection_check" CHECK ((selection IN ('explicit', 'implicit'))),
+    constraint "field_reads_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "field_reads_pkey" primary key (day, site_id, model_id, field_path, principal_key, selection)
+  )`,
+	`create table "token_reads" (
+    "day" text_date not null,
+    "principal_key" text not null,
+    "requests" bigint not null default 0,
+    "last_snapshot" bigint,
+    "last_read_at" text_timestamptz not null,
+    "site_id" text_uuid not null,
+    constraint "token_reads_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "token_reads_pkey" primary key (day, site_id, principal_key)
+  )`,
+	`create table "change_sets" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "title" text not null,
+    "description" text not null default (''),
+    "status" text not null default ('open'),
+    "ship_phase" text,
+    "source" text not null default ('manual'),
+    "restore_of_seq" bigint,
+    "scheduled_for" text_timestamptz,
+    "schedule_job_id" text_uuid,
+    "scheduled_by" text_uuid,
+    "scheduled_by_token" text_uuid,
+    "ship_job_id" text_uuid,
+    "ship_mode" text,
+    "ship_requested_by" text_uuid,
+    "ship_requested_by_token" text_uuid,
+    "acknowledge_breaking" integer_boolean not null default 0,
+    "acknowledge_destructive" integer_boolean not null default 0,
+    "deployment_connection_id" text_uuid,
+    "deployment_run_id" text_uuid,
+    "shipped_at" text_timestamptz,
+    "shipped_seq" bigint,
+    "schema_version_after" integer,
+    "error" text_jsonb,
+    "restore_report" text_jsonb not null default ('[]'),
+    "created_by" text_uuid,
+    "created_by_token" text_uuid,
+    "version" integer not null default 1,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "change_sets_ship_mode_check" CHECK ((ship_mode IN ('interactive', 'scheduled'))),
+    constraint "change_sets_ship_phase_check" CHECK ((ship_phase IN ('preparing', 'activating'))),
+    constraint "change_sets_source_check" CHECK ((source IN ('manual', 'release', 'restore', 'builder', 'assist'))),
+    constraint "change_sets_status_check" CHECK ((status IN ('open', 'scheduled', 'shipping', 'shipped', 'failed', 'discarded'))),
+    constraint "change_sets_title_check" CHECK (((length(title) >= 1) AND (length(title) <= 200))),
+    constraint "change_sets_created_by_fkey" foreign key (created_by) references admin_users (id) on delete set null,
+    constraint "change_sets_created_by_token_fkey" foreign key (created_by_token) references api_tokens (id) on delete set null,
+    constraint "change_sets_deployment_connection_id_fkey" foreign key (deployment_connection_id) references deployment_connections (id) on delete set null,
+    constraint "change_sets_deployment_run_id_fkey" foreign key (deployment_run_id) references deployment_runs (id) on delete set null,
+    constraint "change_sets_scheduled_by_fkey" foreign key (scheduled_by) references admin_users (id) on delete set null,
+    constraint "change_sets_scheduled_by_token_fkey" foreign key (scheduled_by_token) references api_tokens (id) on delete set null,
+    constraint "change_sets_ship_requested_by_fkey" foreign key (ship_requested_by) references admin_users (id) on delete set null,
+    constraint "change_sets_ship_requested_by_token_fkey" foreign key (ship_requested_by_token) references api_tokens (id) on delete set null,
+    constraint "change_sets_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "change_sets_pkey" primary key (id)
+  )`,
+	`create unique index "change_sets_id_site_uq" on "change_sets" (id, site_id)`,
+	`create table "schema_drafts" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "change_set_id" text_uuid not null,
+    "definition_id" text_uuid not null,
+    "kind" text not null,
+    "api_key" text not null,
+    "base_version" integer,
+    "definition" text_jsonb,
+    "version" integer not null default 1,
+    "updated_by_type" text not null,
+    "updated_by_id" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "schema_drafts_kind_check" CHECK ((kind IN ('collection', 'singleton', 'component'))),
+    constraint "schema_drafts_change_set_id_fkey" foreign key (change_set_id) references change_sets (id) on delete cascade,
+    constraint "schema_drafts_pkey" primary key (id)
+  )`,
+	`create unique index "schema_drafts_set_definition_uq" on "schema_drafts" (change_set_id, definition_id)`,
+	`create table "change_set_items" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "change_set_id" text_uuid not null,
+    "kind" text not null,
+    "position" integer not null,
+    "entry_id" text_uuid,
+    "model_id" text_uuid,
+    "locale" text,
+    "action" text,
+    "source_revision_id" text_uuid,
+    "schema_draft_id" text_uuid,
+    "status" text not null default ('pending'),
+    "error" text,
+    "ship_state" text_jsonb,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "change_set_items_action_check" CHECK ((action IN ('publish', 'unpublish'))),
+    constraint "change_set_items_kind_check" CHECK ((kind IN ('entry', 'schema'))),
+    constraint "change_set_items_shape_check" CHECK ((((kind = 'entry') AND (entry_id IS NOT NULL) AND (model_id IS NOT NULL) AND (locale IS NOT NULL) AND (action IS NOT NULL) AND (schema_draft_id IS NULL)) OR ((kind = 'schema') AND (schema_draft_id IS NOT NULL) AND (entry_id IS NULL) AND (source_revision_id IS NULL)))),
+    constraint "change_set_items_status_check" CHECK ((status IN ('pending', 'done', 'failed'))),
+    constraint "change_set_items_change_set_id_fkey" foreign key (change_set_id) references change_sets (id) on delete cascade,
+    constraint "change_set_items_entry_id_fkey" foreign key (entry_id) references entries (id) on delete cascade,
+    constraint "change_set_items_entry_site_fk" foreign key (entry_id, site_id) references entries (id, site_id) on delete cascade,
+    constraint "change_set_items_schema_draft_id_fkey" foreign key (schema_draft_id) references schema_drafts (id) on delete cascade,
+    constraint "change_set_items_set_site_fk" foreign key (change_set_id, site_id) references change_sets (id, site_id) on delete cascade,
+    constraint "change_set_items_source_revision_id_fkey" foreign key (source_revision_id) references content_revisions (id),
+    constraint "change_set_items_pkey" primary key (id)
+  )`,
+	`create table "publication_snapshots" (
+    "seq" bigint not null,
+    "schema_version" integer,
+    "source" text not null,
+    "change_set_id" text_uuid,
+    "actor_type" text,
+    "actor_id" text,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "site_id" text_uuid not null,
+    constraint "publication_snapshots_change_set_id_fkey" foreign key (change_set_id) references change_sets (id) on delete set null,
+    constraint "publication_snapshots_site_fk" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "publication_snapshots_pkey" primary key (site_id, seq)
+  )`,
+	`create table "editor_presence" (
+    "entry_id" text_uuid not null,
+    "model_id" text_uuid not null,
+    "admin_user_id" text_uuid not null,
+    "tab_id" text not null,
+    "locale" text,
+    "started_at" text_timestamptz not null default (shapio_now()),
+    "last_seen_at" text_timestamptz not null default (shapio_now()),
+    constraint "editor_presence_tab_id_check" CHECK (((length(tab_id) >= 1) AND (length(tab_id) <= 64))),
+    constraint "editor_presence_pkey" primary key (entry_id, admin_user_id, tab_id)
+  )`,
+	`create table "content_health_findings" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "entry_id" text_uuid not null,
+    "model_id" text_uuid not null,
+    "locale" text not null,
+    "rule" text not null,
+    "subject" text not null default (''),
+    "severity" text not null,
+    "path" text,
+    "details" text_jsonb not null default ('{}'),
+    "first_seen_at" text_timestamptz not null default (shapio_now()),
+    "last_seen_at" text_timestamptz not null default (shapio_now()),
+    "resolved_at" text_timestamptz,
+    "site_id" text_uuid not null,
+    constraint "content_health_findings_severity_check" CHECK ((severity IN ('error', 'warning'))),
+    constraint "content_health_findings_entry_id_fkey" foreign key (entry_id) references entries (id) on delete cascade,
+    constraint "content_health_findings_entry_site_fk" foreign key (entry_id, site_id) references entries (id, site_id) on delete cascade,
+    constraint "content_health_findings_site_fk" foreign key (site_id) references sites (id) on delete restrict,
+    constraint "content_health_findings_pkey" primary key (id)
+  )`,
+	`create unique index "content_health_findings_entry_id_locale_rule_subject_key" on "content_health_findings" (entry_id, locale, rule, subject)`,
+	`create table "sites" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "key" text not null,
+    "name" text not null,
+    "is_primary" integer_boolean not null default 0,
+    "version" integer not null default 1,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    constraint "sites_key_check" CHECK ((key REGEXP '^[a-z][a-z0-9-]{0,62}$')),
+    constraint "sites_name_check" CHECK (((length(name) >= 1) AND (length(name) <= 200))),
+    constraint "sites_pkey" primary key (id)
+  )`,
+	`create unique index "sites_key_key" on "sites" (key)`,
+	`create table "site_app_roles" (
+    "site_id" text_uuid not null,
+    "audience" text not null,
+    "role_id" text_uuid not null,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    constraint "site_app_roles_audience_check" CHECK ((audience IN ('public', 'authenticated'))),
+    constraint "site_app_roles_role_id_fkey" foreign key (role_id) references app_roles (id) on delete cascade,
+    constraint "site_app_roles_site_id_fkey" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "site_app_roles_pkey" primary key (site_id, audience, role_id)
+  )`,
+	`create table "assist_runs" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "site_id" text_uuid not null,
+    "actor_type" text not null,
+    "actor_id" text not null,
+    "action" text not null,
+    "rule" text,
+    "provider" text not null,
+    "model" text not null,
+    "input_tokens" integer not null default 0,
+    "output_tokens" integer not null default 0,
+    "duration_ms" integer not null default 0,
+    "status" text not null,
+    "error_code" text,
+    "job_id" text_uuid,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "finished_at" text_timestamptz,
+    constraint "assist_runs_action_check" CHECK ((action IN ('alt_text', 'summarize', 'translate', 'rewrite', 'schema_draft', 'content_ops'))),
+    constraint "assist_runs_status_check" CHECK ((status IN ('queued', 'running', 'succeeded', 'failed'))),
+    constraint "assist_runs_job_id_fkey" foreign key (job_id) references jobs (id) on delete set null,
+    constraint "assist_runs_site_id_fkey" foreign key (site_id) references sites (id) on delete cascade,
+    constraint "assist_runs_pkey" primary key (id)
+  )`,
+	`create index "admin_invitations_pending_email_idx" on "admin_invitations" (email) where ((accepted_at IS NULL) AND (revoked_at IS NULL))`,
+	`create index "admin_sessions_user_idx" on "admin_sessions" (admin_user_id) where (revoked_at IS NULL)`,
+	`create index "admin_user_roles_role_idx" on "admin_user_roles" (role_id)`,
+	`create index "api_tokens_role_idx" on "api_tokens" (role_id)`,
+	`create index "app_oauth_accounts_user_idx" on "app_oauth_accounts" (app_user_id)`,
+	`create index "app_password_resets_user_idx" on "app_password_resets" (app_user_id)`,
+	`create index "app_refresh_tokens_family_idx" on "app_refresh_tokens" (family_id)`,
+	`create index "app_refresh_tokens_user_idx" on "app_refresh_tokens" (app_user_id) where (revoked_at IS NULL)`,
+	`create index "app_user_roles_role_idx" on "app_user_roles" (role_id)`,
+	`create index "app_users_created_idx" on "app_users" (site_id, created_at DESC, id DESC) where (deleted_at IS NULL)`,
+	`create unique index "app_users_email_uq" on "app_users" (site_id, lower(email)) where (deleted_at IS NULL)`,
+	`create index "assist_runs_created_idx" on "assist_runs" (created_at)`,
+	`create index "assist_runs_site_created_idx" on "assist_runs" (site_id, created_at)`,
+	`create index "audit_events_actor_idx" on "audit_events" (actor_type, actor_id, occurred_at DESC)`,
+	`create index "audit_events_occurred_at_idx" on "audit_events" (occurred_at DESC)`,
+	`create index "audit_events_target_idx" on "audit_events" (target_type, target_id, occurred_at DESC)`,
+	`create unique index "change_set_items_draft_uq" on "change_set_items" (schema_draft_id)`,
+	`create index "change_set_items_entry_idx" on "change_set_items" (entry_id) where (entry_id IS NOT NULL)`,
+	`create unique index "change_set_items_entry_uq" on "change_set_items" (change_set_id, entry_id, locale) where (kind = 'entry')`,
+	`create index "change_set_items_set_idx" on "change_set_items" (change_set_id, position)`,
+	`create index "change_sets_status_idx" on "change_sets" (site_id, status, created_at DESC)`,
+	`create index "content_health_findings_open_idx" on "content_health_findings" (site_id, rule, last_seen_at DESC, id) where (resolved_at IS NULL)`,
+	`create index "content_health_findings_resolved_idx" on "content_health_findings" (resolved_at) where (resolved_at IS NOT NULL)`,
+	`create index "content_revisions_entry_idx" on "content_revisions" (entry_id, locale, created_at)`,
+	`create index "deployment_runs_connection_idx" on "deployment_runs" (connection_id, created_at DESC)`,
+	`create unique index "deployment_runs_queued_uq" on "deployment_runs" (connection_id) where (status = 'queued')`,
+	`create index "editor_presence_model_idx" on "editor_presence" (model_id, last_seen_at)`,
+	`create index "editor_presence_seen_idx" on "editor_presence" (last_seen_at)`,
+	`create index "email_confirmations_user_idx" on "email_confirmations" (app_user_id)`,
+	`create index "entries_model_idx" on "entries" (site_id, model_id, created_at) where (deleted_at IS NULL)`,
+	`create index "entries_owner_idx" on "entries" (owner_app_user_id) where (owner_app_user_id IS NOT NULL)`,
+	`create index "entry_heads_change_seq_idx" on "entry_heads" (model_id, change_seq)`,
+	`create index "entry_heads_model_locale_state_idx" on "entry_heads" (site_id, model_id, locale, state)`,
+	`create index "field_reads_model_day_idx" on "field_reads" (model_id, day)`,
+	`create unique index "jobs_idempotency_key_uq" on "jobs" (idempotency_key) where (idempotency_key IS NOT NULL)`,
+	`create index "jobs_pending_idx" on "jobs" (priority DESC, run_at) where (status = 'pending')`,
+	`create index "jobs_running_lease_idx" on "jobs" (locked_until) where (status = 'running')`,
+	`create unique index "locales_single_default_uq" on "locales" (is_default) where is_default`,
+	`create index "media_assets_created_idx" on "media_assets" (site_id, created_at, id) where (deleted_at IS NULL)`,
+	`create index "media_assets_driver_idx" on "media_assets" (storage_driver, id)`,
+	`create index "media_assets_folder_idx" on "media_assets" (folder_id, created_at, id) where (deleted_at IS NULL)`,
+	`create unique index "media_assets_storage_key_uq" on "media_assets" (storage_key)`,
+	`create unique index "media_folders_sibling_name_uq" on "media_folders" (site_id, COALESCE(parent_id, '00000000-0000-0000-0000-000000000000'), lower(name))`,
+	`create index "media_references_entry_idx" on "media_references" (entry_id, locale, state)`,
+	`create unique index "media_variants_storage_key_uq" on "media_variants" (storage_key)`,
+	`create unique index "models_api_key_uq" on "models" (lower(api_key)) where (deleted_at IS NULL)`,
+	`create index "outbox_events_undispatched_idx" on "outbox_events" (id) where (dispatched_at IS NULL)`,
+	`create index "password_resets_user_idx" on "password_resets" (admin_user_id)`,
+	`create index "preview_tokens_entry_idx" on "preview_tokens" (entry_id, created_at DESC)`,
+	`create index "publication_log_entry_locale_from_idx" on "publication_log" (entry_id, locale, from_seq)`,
+	`create index "publication_log_model_seq_idx" on "publication_log" (site_id, model_id, from_seq)`,
+	`create unique index "publication_log_open_uq" on "publication_log" (entry_id, locale) where (to_seq IS NULL)`,
+	`create index "publication_log_to_seq_idx" on "publication_log" (site_id, to_seq) where (to_seq IS NOT NULL)`,
+	`create index "publication_snapshots_change_set_idx" on "publication_snapshots" (change_set_id) where (change_set_id IS NOT NULL)`,
+	`create index "relation_edges_target_idx" on "relation_edges" (target_entry_id, state)`,
+	`create index "scheduled_publications_entry_idx" on "scheduled_publications" (entry_id, locale)`,
+	`create index "scheduled_publications_site_idx" on "scheduled_publications" (site_id, run_at)`,
+	`create index "scheduled_publications_status_idx" on "scheduled_publications" (status, run_at)`,
+	`create index "schema_change_jobs_change_set_idx" on "schema_change_jobs" (change_set_id) where (change_set_id IS NOT NULL)`,
+	`create unique index "schema_change_jobs_in_flight_uq" on "schema_change_jobs" (target_type, target_id) where (status IN ('pending', 'running'))`,
+	`create index "schema_change_jobs_model_idx" on "schema_change_jobs" (model_id, created_at DESC)`,
+	`create index "schema_drafts_definition_idx" on "schema_drafts" (definition_id)`,
+	`create index "site_app_roles_role_idx" on "site_app_roles" (role_id)`,
+	`create unique index "sites_single_primary_uq" on "sites" (is_primary) where is_primary`,
+	`create index "unique_values_entry_idx" on "unique_values" (entry_id)`,
+	`create unique index "webhook_deliveries_event_uq" on "webhook_deliveries" (webhook_id, event_id) where (event_id IS NOT NULL)`,
+	`create index "webhook_deliveries_webhook_idx" on "webhook_deliveries" (webhook_id, created_at DESC)`,
+	`create trigger "media_assets_folder_id_fkey_set_null" before delete on "media_folders" for each row begin update "media_assets" set folder_id = null where folder_id = old.id and site_id = old.site_id; end`,
+	`create table "sequences" (
+    "name" text primary key,
+    "value" integer not null default 0
+  )`,
+	`insert into "sequences" (name, value) values ('entry_heads_change_seq', 0)`,
+	`create trigger "schema_revisions_no_update" before update on "schema_revisions" for each row begin select raise(abort, 'schema_revisions rows are immutable'); end`,
+	`create trigger "content_revisions_no_update" before update on "content_revisions" for each row begin select raise(abort, 'content_revisions rows are immutable'); end`,
+	`insert into system_versions default values`,
+	`insert into schema_settings default values`,
+	`insert into locales (code, label, is_default) values ('en', 'English', 1)`,
+	`insert into sites (id, key, name, is_primary) values ('00000000-0000-4000-b000-000000000001', 'default', 'Default site', 1)`,
+	`insert into publication_state (site_id, last_seq) values ('00000000-0000-4000-b000-000000000001', 0)`,
+	`insert into app_roles (id, key, name, description, is_system) values
+    ('00000000-0000-4000-a000-000000000001', 'public', 'Public', 'Applies to every caller without a token. Grants nothing until you add permissions.', 1),
+    ('00000000-0000-4000-a000-000000000002', 'authenticated', 'Authenticated', 'Held by every signed-in app user, in addition to their custom roles. Grants nothing until you add permissions.', 1)`,
+	`insert into site_app_roles (site_id, audience, role_id) values
+    ('00000000-0000-4000-b000-000000000001', 'public', '00000000-0000-4000-a000-000000000001'),
+    ('00000000-0000-4000-b000-000000000001', 'authenticated', '00000000-0000-4000-a000-000000000002')`
+];
+const TABLES = [
+	"system_versions",
+	"jobs",
+	"outbox_events",
+	"audit_events",
+	"admin_users",
+	"admin_roles",
+	"admin_role_permissions",
+	"admin_user_roles",
+	"admin_sessions",
+	"admin_invitations",
+	"password_resets",
+	"setup_tokens",
+	"api_tokens",
+	"system_settings",
+	"models",
+	"schema_revisions",
+	"model_active_versions",
+	"schema_change_jobs",
+	"locales",
+	"schema_settings",
+	"entries",
+	"content_revisions",
+	"entry_heads",
+	"relation_edges",
+	"unique_values",
+	"publication_state",
+	"publication_log",
+	"media_folders",
+	"media_assets",
+	"media_variants",
+	"media_references",
+	"media_upload_grants",
+	"scheduled_publications",
+	"webhooks",
+	"webhook_deliveries",
+	"deployment_connections",
+	"deployment_runs",
+	"preview_tokens",
+	"app_users",
+	"app_roles",
+	"app_role_permissions",
+	"app_user_roles",
+	"app_refresh_tokens",
+	"app_oauth_accounts",
+	"email_confirmations",
+	"app_password_resets",
+	"app_login_codes",
+	"extension_hook_runs",
+	"field_reads",
+	"token_reads",
+	"change_sets",
+	"schema_drafts",
+	"change_set_items",
+	"publication_snapshots",
+	"editor_presence",
+	"content_health_findings",
+	"sites",
+	"site_app_roles",
+	"assist_runs",
+	"sequences"
+];
+const up$4 = async (db) => {
+	for (const statement of STATEMENTS) await sql.raw(statement).execute(db);
+};
+const down$4 = async (db) => {
+	await sql`pragma defer_foreign_keys = on`.execute(db);
+	for (const table of [...TABLES].reverse()) await sql.raw(`drop table if exists "${table}"`).execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/sqlite/20261003170000_audit_events_seq.ts
+var _20261003170000_audit_events_seq_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$3,
+	up: () => up$3
+});
+/**
+* SQLite twin of `../20261003170000_audit_events_seq.ts`. SQLite cannot add a column whose default calls a
+* function, so the table is rebuilt: the old one is renamed aside, the new one takes `seq` from the
+* `audit_events_seq` row in `sequences` (like `entry_heads.change_seq`), and the rows are copied in
+* `(occurred_at, id)` order so existing events are numbered oldest first. Nothing references `audit_events`.
+*/
+const COLUMNS = [
+	"id",
+	"occurred_at",
+	"actor_type",
+	"actor_id",
+	"action",
+	"target_type",
+	"target_id",
+	"outcome",
+	"request_id",
+	"ip",
+	"metadata",
+	"site_id"
+];
+const INDEXES = [
+	`create index "audit_events_actor_idx" on "audit_events" (actor_type, actor_id, occurred_at DESC)`,
+	`create index "audit_events_occurred_at_idx" on "audit_events" (occurred_at DESC)`,
+	`create index "audit_events_target_idx" on "audit_events" (target_type, target_id, occurred_at DESC)`
+];
+const up$3 = async (db) => {
+	await sql`insert into "sequences" (name, value) values ('audit_events_seq', 0)`.execute(db);
+	await sql`alter table "audit_events" rename to "audit_events_before_seq"`.execute(db);
+	await sql`create table "audit_events" (
+    "id" text_uuid not null default (gen_random_uuid()),
+    "occurred_at" text_timestamptz not null default (shapio_now()),
+    "actor_type" text not null,
+    "actor_id" text,
+    "action" text not null,
+    "target_type" text,
+    "target_id" text,
+    "outcome" text not null,
+    "request_id" text,
+    "ip" text,
+    "metadata" text_jsonb not null default ('{}'),
+    "site_id" text_uuid,
+    "seq" bigint not null default (shapio_nextval('audit_events_seq')),
+    constraint "audit_events_actor_type_check" CHECK ((actor_type IN ('admin', 'app_user', 'token', 'anonymous', 'system'))),
+    constraint "audit_events_outcome_check" CHECK ((outcome IN ('success', 'failure'))),
+    constraint "audit_events_site_fk" foreign key (site_id) references sites (id) on delete set null,
+    constraint "audit_events_pkey" primary key (id)
+  )`.execute(db);
+	const columns = sql.join(COLUMNS.map((column) => sql.ref(column)));
+	await sql`insert into "audit_events" (${columns})
+    select ${columns} from "audit_events_before_seq" order by occurred_at, id`.execute(db);
+	await sql`drop table "audit_events_before_seq"`.execute(db);
+	for (const statement of INDEXES) await sql.raw(statement).execute(db);
+};
+const down$3 = async (db) => {
+	await sql`alter table "audit_events" drop column "seq"`.execute(db);
+	await sql`delete from "sequences" where name = 'audit_events_seq'`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/sqlite/20261004120000_models_site_scope.ts
+var _20261004120000_models_site_scope_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$2,
+	up: () => up$2
+});
+/**
+* SQLite twin of `../20261004120000_models_site_scope.ts`. `down` rebuilds `models` without `site_id`
+* (SQLite cannot drop a column that carries a foreign key). With `legacy_alter_table` on, renaming the old
+* table aside leaves the references of `schema_revisions`, `model_active_versions`, `schema_change_jobs` and
+* `entries` pointing at the name `models`, which the rebuilt table then takes; dropping the renamed table
+* deletes nothing they reference.
+*/
+const NIL_UUID = "00000000-0000-0000-0000-000000000000";
+const up$2 = async (db) => {
+	await sql`alter table "models" add column "site_id" text_uuid references sites (id)`.execute(db);
+	await sql`create index "models_site_idx" on "models" (site_id)`.execute(db);
+	await sql`drop index "models_api_key_uq"`.execute(db);
+	await sql`
+    create unique index "models_api_key_uq" on "models" (coalesce(site_id, ${sql.lit(NIL_UUID)}), lower(api_key))
+    where (deleted_at IS NULL)
+  `.execute(db);
+	await sql`alter table "schema_drafts" add column "shared" integer_boolean not null default 0`.execute(db);
+};
+const down$2 = async (db) => {
+	const { rows } = await sql`select count(*) as count from "models" where site_id is not null`.execute(db);
+	if (Number(rows[0]?.count ?? 0) > 0) throw new Error("Cannot roll back per-site schema while definitions belong to a site: two sites may share an API ID. Share or delete the site definitions first.");
+	await sql`alter table "schema_drafts" drop column "shared"`.execute(db);
+	await sql`pragma legacy_alter_table = on`.execute(db);
+	await sql`alter table "models" rename to "models_before_site_scope"`.execute(db);
+	await sql`create table "models" (
+    "id" text_uuid not null,
+    "kind" text not null,
+    "api_key" text not null,
+    "created_at" text_timestamptz not null default (shapio_now()),
+    "updated_at" text_timestamptz not null default (shapio_now()),
+    "deleted_at" text_timestamptz,
+    constraint "models_kind_check" CHECK ((kind IN ('collection', 'singleton', 'component'))),
+    constraint "models_pkey" primary key (id)
+  )`.execute(db);
+	await sql`insert into "models" (id, kind, api_key, created_at, updated_at, deleted_at)
+    select id, kind, api_key, created_at, updated_at, deleted_at from "models_before_site_scope"`.execute(db);
+	await sql`drop table "models_before_site_scope"`.execute(db);
+	await sql`pragma legacy_alter_table = off`.execute(db);
+	await sql`create unique index "models_api_key_uq" on "models" (lower(api_key)) where (deleted_at IS NULL)`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/sqlite/20261004130000_site_seo_settings.ts
+var _20261004130000_site_seo_settings_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$1,
+	up: () => up$1
+});
+/**
+* SQLite twin of `../20261004130000_site_seo_settings.ts`. `insert or ignore` stands in for `on conflict do
+* nothing` (the grant's unique index); the permissions version moves only when a grant was added or removed.
+*/
+const bumpPermissionsVersion = (db) => sql`update "system_versions" set permissions_version = permissions_version + 1, updated_at = shapio_now()`.execute(db);
+const up$1 = async (db) => {
+	await sql`alter table "sites" add column "seo_defaults" text_jsonb`.execute(db);
+	const granted = await sql`
+    insert or ignore into "admin_role_permissions" (role_id, action, model_id, condition, field_ids)
+    select role_id, 'site.settings', null, null, null
+    from "admin_role_permissions"
+    where action = 'publishing.manage' and model_id is null
+  `.execute(db);
+	if (Number(granted.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion(db);
+};
+const down$1 = async (db) => {
+	const revoked = await sql`delete from "admin_role_permissions" where action = 'site.settings'`.execute(db);
+	if (Number(revoked.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion(db);
+	await sql`alter table "sites" drop column "seo_defaults"`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/sqlite/20261005120000_entry_heads_entry_created_at.ts
+var _20261005120000_entry_heads_entry_created_at_exports = /* @__PURE__ */ __exportAll({
+	down: () => down,
+	up: () => up
+});
+/**
+* SQLite twin of `../20261005120000_entry_heads_entry_created_at.ts`. One process holds the write lock, so
+* the backfill is one statement and the index is built here (a plain `CREATE INDEX`; writers wait for it, the
+* documented single-process limitation of ADR 0001, "D2: as built").
+*/
+const INDEX = "entry_heads_entry_order_idx";
+const up = async (db) => {
+	await sql`alter table "entry_heads" add column "entry_created_at" text_timestamptz`.execute(db);
+	await sql`update "entry_heads" set entry_created_at = (
+    select e.created_at from "entries" e where e.id = "entry_heads".entry_id
+  ) where entry_created_at is null`.execute(db);
+	await sql`create index ${sql.id(INDEX)} on "entry_heads" (site_id, model_id, state, entry_created_at desc, entry_id)`.execute(db);
+};
+const down = async (db) => {
+	await sql`drop index if exists ${sql.id(INDEX)}`.execute(db);
+	await sql`alter table "entry_heads" drop column "entry_created_at"`.execute(db);
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/sqlite/index.ts
+const SQLITE_MIGRATIONS = {
+	"0001_baseline": _0001_baseline_exports,
+	"20261003170000_audit_events_seq": _20261003170000_audit_events_seq_exports,
+	"20261004120000_models_site_scope": _20261004120000_models_site_scope_exports,
+	"20261004130000_site_seo_settings": _20261004130000_site_seo_settings_exports,
+	"20261005120000_entry_heads_entry_created_at": _20261005120000_entry_heads_entry_created_at_exports,
+	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports
+};
+//#endregion
+//#region ../../apps/api/src/db/migrations/index.ts
+/**
+* Every migration, listed explicitly. A static list works when the server is bundled for npm, where
+* directory scanning would not. Names must keep the `YYYYMMDDHHMMSS_description` order; the migrator
+* rejects out-of-order additions. Timestamps are assigned when a migration merges.
+*/
+const MIGRATIONS = {
+	"20261001120000_create_platform_tables": _20261001120000_create_platform_tables_exports,
+	"20261001130000_create_admin_identity": _20261001130000_create_admin_identity_exports,
+	"20261001130500_create_system_settings": _20261001130500_create_system_settings_exports,
+	"20261001140000_create_schema_tables": _20261001140000_create_schema_tables_exports,
+	"20261001150000_create_content_tables": _20261001150000_create_content_tables_exports,
+	"20261001160000_create_media_tables": _20261001160000_create_media_tables_exports,
+	"20261001170000_create_publishing_tables": _20261001170000_create_publishing_tables_exports,
+	"20261001180000_create_app_users": _20261001180000_create_app_users_exports,
+	"20261002120000_create_extension_hook_runs": _20261002120000_create_extension_hook_runs_exports,
+	"20261002130000_app_auth_token_version_and_login_code_pkce": _20261002130000_app_auth_token_version_and_login_code_pkce_exports,
+	"20261002180000_add_publication_log_diff_indexes": _20261002180000_add_publication_log_diff_indexes_exports,
+	"20261002180100_create_usage_tables": _20261002180100_create_usage_tables_exports,
+	"20261002180200_create_change_sets": _20261002180200_create_change_sets_exports,
+	"20261002190000_create_editor_presence_and_content_health": _20261002190000_create_editor_presence_and_content_health_exports,
+	"20261003120000_add_changes_ship_permission": _20261003120000_add_changes_ship_permission_exports,
+	"20261003130000_create_sites": _20261003130000_create_sites_exports,
+	"20261003140200_enqueue_field_index_layout": _20261003140200_enqueue_field_index_layout_exports,
+	"20261003140500_change_set_items_site_and_preview_entry": _20261003140500_change_set_items_site_and_preview_entry_exports,
+	"20261003150000_widen_deployment_providers": _20261003150000_widen_deployment_providers_exports,
+	"20261003160000_create_assist_runs": _20261003160000_create_assist_runs_exports,
+	"20261003170000_audit_events_seq": _20261003170000_audit_events_seq_exports$2,
+	"20261004120000_models_site_scope": _20261004120000_models_site_scope_exports$2,
+	"20261004130000_site_seo_settings": _20261004130000_site_seo_settings_exports$2,
+	"20261005120000_entry_heads_entry_created_at": _20261005120000_entry_heads_entry_created_at_exports$2,
+	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports
+};
+const PROVIDERS = {
+	postgres: { getMigrations: () => Promise.resolve({ ...MIGRATIONS }) },
+	sqlite: { getMigrations: () => Promise.resolve({ ...SQLITE_MIGRATIONS }) },
+	mysql: { getMigrations: () => Promise.resolve({ ...MYSQL_MIGRATIONS }) }
+};
+const migrationProviderFor = (dialect) => PROVIDERS[dialect];
+//#endregion
+//#region ../../apps/api/src/db/migrator.ts
+const dialectOfHandle = (db) => {
+	if (sqliteDriverOf(db)) return "sqlite";
+	return mysqlDriverOf(db) ? "mysql" : "postgres";
+};
+/**
+* Migrations must stay in order; out-of-order additions are rejected (see build plan §2). The list depends
+* on the handle's dialect (SQLite and MySQL start from a baseline).
+*/
+const createMigrator = (db) => new Migrator({
+	db,
+	provider: migrationProviderFor(dialectOfHandle(db)),
+	allowUnorderedMigrations: false
+});
+/** Names of migrations known to this build that have not run against the database. */
+const getPendingMigrations = async (db) => {
+	return (await createMigrator(db).getMigrations()).filter((migration) => migration.executedAt === void 0).map((m) => m.name);
+};
+//#endregion
+export { getPendingMigrations };
+
+//# sourceMappingURL=migrator-CIKnDfZy.js.map