@shapio/local 0.5.9 → 0.5.11

package/dist/{migrator-CO5sXosL.js → migrator-BfVtncOo.js}

@@ -1,4 +1,4 @@
-import { a as mysqlDriverOf, r as sqliteDriverOf } from "./advisoryLocks-ajVNBhfa.js";
+import { a as mysqlDriverOf, r as sqliteDriverOf } from "./advisoryLocks-DGbxw3_E.js";
 import { sql } from "kysely";
 import { Migrator } from "kysely/migration";
 //#region \0rolldown/runtime.js
@@ -15,14 +15,14 @@ var __exportAll = (all, no_symbols) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001120000_create_platform_tables.ts
 var _20261001120000_create_platform_tables_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$34,
-	up: () => up$34
+	down: () => down$37,
+	up: () => up$37
 });
 /**
 * Foundation tables shared by every package: durable versions, the job queue, the transactional outbox
 * and the audit log. Statuses are text with CHECK constraints so new states need only a constraint change.
 */
-const up$34 = async (db) => {
+const up$37 = async (db) => {
 	await db.schema.createTable("system_versions").addColumn("id", "boolean", (col) => col.primaryKey().defaultTo(true).check(sql`id`)).addColumn("schema_version", "integer", (col) => col.notNull().defaultTo(0)).addColumn("permissions_version", "integer", (col) => col.notNull().defaultTo(0)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
 	await sql`insert into system_versions default values`.execute(db);
 	await db.schema.createTable("jobs").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("type", "text", (col) => col.notNull()).addColumn("payload", "jsonb", (col) => col.notNull().defaultTo(sql`'{}'::jsonb`)).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'running', 'succeeded', 'dead')`)).addColumn("priority", "integer", (col) => col.notNull().defaultTo(0)).addColumn("run_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("attempts", "integer", (col) => col.notNull().defaultTo(0)).addColumn("max_attempts", "integer", (col) => col.notNull().defaultTo(10).check(sql`max_attempts > 0`)).addColumn("idempotency_key", "text").addColumn("locked_by", "text").addColumn("locked_until", "timestamptz").addColumn("checkpoint", "jsonb").addColumn("result", "jsonb").addColumn("last_error", "text").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("finished_at", "timestamptz").execute();
@@ -44,7 +44,7 @@ const up$34 = async (db) => {
 		"occurred_at desc"
 	]).execute();
 };
-const down$34 = async (db) => {
+const down$37 = async (db) => {
 	await db.schema.dropTable("audit_events").execute();
 	await db.schema.dropTable("outbox_events").execute();
 	await db.schema.dropTable("jobs").execute();
@@ -53,8 +53,8 @@ const down$34 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001130000_create_admin_identity.ts
 var _20261001130000_create_admin_identity_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$33,
-	up: () => up$33
+	down: () => down$36,
+	up: () => up$36
 });
 /**
 * Admin identity (package B, ADR 0005): admin users, roles and their permission grants, server-side
@@ -63,7 +63,7 @@ var _20261001130000_create_admin_identity_exports = /* @__PURE__ */ __exportAll(
 */
 const withTimestamps$3 = (table) => table.addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`));
 const uuidPrimaryKey$3 = (table) => table.addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`));
-const up$33 = async (db) => {
+const up$36 = async (db) => {
 	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_users")).addColumn("email", "text", (col) => col.notNull().unique()).addColumn("name", "text", (col) => col.notNull().defaultTo("")).addColumn("password_hash", "text", (col) => col.notNull()).addColumn("status", "text", (col) => col.notNull().defaultTo("active").check(sql`status in ('active', 'disabled')`)).addColumn("last_login_at", "timestamptz").addColumn("password_changed_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))).execute();
 	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_roles")).addColumn("key", "text", (col) => col.notNull().unique().check(sql`key ~ '^[a-z][a-z0-9-]{0,62}$'`)).addColumn("name", "text", (col) => col.notNull()).addColumn("description", "text", (col) => col.notNull().defaultTo("")).addColumn("kind", "text", (col) => col.notNull().defaultTo("admin").check(sql`kind in ('admin', 'delivery')`)).addColumn("is_system", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("version", "integer", (col) => col.notNull().defaultTo(1))).execute();
 	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("admin_role_permissions")).addColumn("role_id", "uuid", (col) => col.notNull().references("admin_roles.id").onDelete("cascade")).addColumn("action", "text", (col) => col.notNull()).addColumn("model_id", "text").addColumn("condition", "text", (col) => col.check(sql`condition in ('ownedByPrincipal')`)).addColumn("field_ids", sql`text[]`).addUniqueConstraint("admin_role_permissions_grant_uq", [
@@ -83,7 +83,7 @@ const up$33 = async (db) => {
 	await withTimestamps$3(uuidPrimaryKey$3(db.schema.createTable("api_tokens")).addColumn("name", "text", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("token_prefix", "text", (col) => col.notNull()).addColumn("role_id", "uuid", (col) => col.notNull().references("admin_roles.id").onDelete("restrict")).addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("expires_at", "timestamptz").addColumn("last_used_at", "timestamptz").addColumn("revoked_at", "timestamptz")).execute();
 	await db.schema.createIndex("api_tokens_role_idx").on("api_tokens").column("role_id").execute();
 };
-const down$33 = async (db) => {
+const down$36 = async (db) => {
 	await db.schema.dropTable("api_tokens").execute();
 	await db.schema.dropTable("setup_tokens").execute();
 	await db.schema.dropTable("password_resets").execute();
@@ -97,31 +97,31 @@ const down$33 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001130500_create_system_settings.ts
 var _20261001130500_create_system_settings_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$32,
-	up: () => up$32
+	down: () => down$35,
+	up: () => up$35
 });
 /**
 * Instance-wide key/value settings that must survive restarts and be shared by every instance, e.g. the
 * generated signing secret. General purpose: later packages add keys, not tables.
 */
-const up$32 = async (db) => {
+const up$35 = async (db) => {
 	await db.schema.createTable("system_settings").addColumn("key", "text", (col) => col.primaryKey()).addColumn("value", "text", (col) => col.notNull()).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
 };
-const down$32 = async (db) => {
+const down$35 = async (db) => {
 	await db.schema.dropTable("system_settings").execute();
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001140000_create_schema_tables.ts
 var _20261001140000_create_schema_tables_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$31,
-	up: () => up$31
+	down: () => down$34,
+	up: () => up$34
 });
 /**
 * Schema registry (package D, ADR 0002): models and components (one table, `kind` discriminator), immutable
 * schema revisions, the per-model active pointer, schema change jobs, locales and schema settings.
 * Model definitions are data: creating or changing a model never runs DDL (CONTRIBUTING.md rule 1).
 */
-const up$31 = async (db) => {
+const up$34 = async (db) => {
 	await db.schema.createTable("models").addColumn("id", "uuid", (col) => col.primaryKey()).addColumn("kind", "text", (col) => col.notNull().check(sql`kind in ('collection', 'singleton', 'component')`)).addColumn("api_key", "text", (col) => col.notNull()).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("deleted_at", "timestamptz").execute();
 	await sql`create unique index models_api_key_uq on models (lower(api_key)) where deleted_at is null`.execute(db);
 	await db.schema.createTable("schema_revisions").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("model_id", "uuid", (col) => col.notNull().references("models.id").onDelete("restrict")).addColumn("version", "integer", (col) => col.notNull().check(sql`version > 0`)).addColumn("definition", "jsonb", (col) => col.notNull()).addColumn("hash", "text", (col) => col.notNull()).addColumn("parent_revision_id", "uuid", (col) => col.references("schema_revisions.id")).addColumn("created_by_type", "text", (col) => col.notNull()).addColumn("created_by_id", "text").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addUniqueConstraint("schema_revisions_model_version_uq", ["model_id", "version"]).execute();
@@ -149,7 +149,7 @@ const up$31 = async (db) => {
 	await db.schema.createTable("schema_settings").addColumn("id", "boolean", (col) => col.primaryKey().defaultTo(true).check(sql`id`)).addColumn("read_only", "boolean", (col) => col.notNull().defaultTo(false)).addColumn("read_only_reason", "text").addColumn("updated_by_type", "text").addColumn("updated_by_id", "text").addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
 	await sql`insert into schema_settings default values`.execute(db);
 };
-const down$31 = async (db) => {
+const down$34 = async (db) => {
 	await db.schema.dropTable("schema_settings").execute();
 	await db.schema.dropTable("locales").execute();
 	await db.schema.dropTable("schema_change_jobs").execute();
@@ -161,8 +161,8 @@ const down$31 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001150000_create_content_tables.ts
 var _20261001150000_create_content_tables_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$30,
-	up: () => up$30
+	down: () => down$33,
+	up: () => up$33
 });
 /**
 * Content storage (package E, ADR 0001): entries, immutable content revisions, mutable heads (one per
@@ -170,7 +170,7 @@ var _20261001150000_create_content_tables_exports = /* @__PURE__ */ __exportAll(
 * and the publication log behind `?snapshot=N`. User content models never get tables of their own
 * (CONTRIBUTING.md rule 1): their values are JSONB keyed by stable field IDs.
 */
-const up$30 = async (db) => {
+const up$33 = async (db) => {
 	await db.schema.createTable("entries").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("model_id", "uuid", (col) => col.notNull().references("models.id").onDelete("restrict")).addColumn("owner_app_user_id", "uuid").addColumn("created_by_admin_id", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("deleted_at", "timestamptz").execute();
 	await sql`create index entries_model_idx on entries (model_id, created_at) where deleted_at is null`.execute(db);
 	await sql`create index entries_owner_idx on entries (owner_app_user_id) where owner_app_user_id is not null`.execute(db);
@@ -234,7 +234,7 @@ const up$30 = async (db) => {
 	await sql`create unique index publication_log_open_uq on publication_log (entry_id, locale) where to_seq is null`.execute(db);
 	await db.schema.createIndex("publication_log_model_seq_idx").on("publication_log").columns(["model_id", "from_seq"]).execute();
 };
-const down$30 = async (db) => {
+const down$33 = async (db) => {
 	await db.schema.dropTable("publication_log").execute();
 	await db.schema.dropTable("publication_state").execute();
 	await db.schema.dropTable("unique_values").execute();
@@ -247,8 +247,8 @@ const down$30 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001160000_create_media_tables.ts
 var _20261001160000_create_media_tables_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$29,
-	up: () => up$29
+	down: () => down$32,
+	up: () => up$32
 });
 /**
 * Media library (package G): folders, assets, image variants, references from content and upload grants.
@@ -259,7 +259,7 @@ const withTimestamps$2 = (table) => table.addColumn("created_at", "timestamptz",
 const uuidPrimaryKey$2 = (table) => table.addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`));
 const STORAGE_DRIVER_CHECK = sql`storage_driver in ('local', 's3')`;
 const VISIBILITY_CHECK = sql`visibility in ('public', 'private')`;
-const up$29 = async (db) => {
+const up$32 = async (db) => {
 	await withTimestamps$2(uuidPrimaryKey$2(db.schema.createTable("media_folders")).addColumn("parent_id", "uuid", (col) => col.references("media_folders.id").onDelete("restrict")).addColumn("name", "text", (col) => col.notNull().check(sql`length(name) between 1 and 255`)).addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("version", "integer", (col) => col.notNull().defaultTo(1))).execute();
 	await sql`create unique index media_folders_sibling_name_uq on media_folders
     (coalesce(parent_id, '00000000-0000-0000-0000-000000000000'::uuid), lower(name))`.execute(db);
@@ -288,7 +288,7 @@ const up$29 = async (db) => {
 	]).execute();
 	await db.schema.createTable("media_upload_grants").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("asset_id", "uuid", (col) => col.notNull()).addColumn("kind", "text", (col) => col.notNull().check(sql`kind in ('create', 'replace')`)).addColumn("storage_driver", "text", (col) => col.notNull().check(STORAGE_DRIVER_CHECK)).addColumn("storage_key", "text", (col) => col.notNull().unique()).addColumn("original_filename", "text", (col) => col.notNull()).addColumn("declared_mime_type", "text", (col) => col.notNull()).addColumn("max_size_bytes", "bigint", (col) => col.notNull()).addColumn("folder_id", "uuid").addColumn("visibility", "text", (col) => col.notNull().check(VISIBILITY_CHECK)).addColumn("created_by", "uuid", (col) => col.references("admin_users.id").onDelete("set null")).addColumn("created_by_principal", "text", (col) => col.notNull()).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'consumed', 'rejected', 'expired')`)).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("consumed_at", "timestamptz").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
 };
-const down$29 = async (db) => {
+const down$32 = async (db) => {
 	await db.schema.dropTable("media_upload_grants").execute();
 	await db.schema.dropTable("media_references").execute();
 	await db.schema.dropTable("media_variants").execute();
@@ -298,8 +298,8 @@ const down$29 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001170000_create_publishing_tables.ts
 var _20261001170000_create_publishing_tables_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$28,
-	up: () => up$28
+	down: () => down$31,
+	up: () => up$31
 });
 /**
 * Publishing (package H): scheduled publications, releases, webhooks and their delivery log, deployment
@@ -338,13 +338,13 @@ const createPreviewTables = async (db) => {
 	await uuidPrimaryKey$1(db.schema.createTable("preview_tokens")).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("token_prefix", "text", (col) => col.notNull()).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("entry_id", "uuid", (col) => col.references("entries.id").onDelete("cascade")).addColumn("locale", "text").addColumn("connection_id", "uuid", (col) => col.references("deployment_connections.id").onDelete("set null")).addColumn("delivery_role_id", "uuid", (col) => col.references("admin_roles.id").onDelete("set null")).addColumn("created_by", "uuid", (col) => col.notNull().references("admin_users.id").onDelete("cascade")).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("revoked_at", "timestamptz").addColumn("last_used_at", "timestamptz").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
 	await db.schema.createIndex("preview_tokens_entry_idx").on("preview_tokens").columns(["entry_id", "created_at desc"]).execute();
 };
-const up$28 = async (db) => {
+const up$31 = async (db) => {
 	await createSchedulingTables(db);
 	await createWebhookTables(db);
 	await createDeploymentTables(db);
 	await createPreviewTables(db);
 };
-const down$28 = async (db) => {
+const down$31 = async (db) => {
 	await db.schema.dropTable("preview_tokens").execute();
 	await db.schema.dropTable("deployment_runs").execute();
 	await db.schema.dropTable("deployment_connections").execute();
@@ -357,8 +357,8 @@ const down$28 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261001180000_create_app_users.ts
 var _20261001180000_create_app_users_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$27,
-	up: () => up$27
+	down: () => down$30,
+	up: () => up$30
 });
 /**
 * App users (package I, ADR 0005): the end users of sites and apps built on Shapio, with their own roles
@@ -409,7 +409,7 @@ const createCredentials = async (db) => {
 	}
 	await db.schema.createTable("app_login_codes").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("app_user_id", "uuid", (col) => col.notNull().references("app_users.id").onDelete("cascade")).addColumn("code_hash", "text", (col) => col.notNull().unique()).addColumn("expires_at", "timestamptz", (col) => col.notNull()).addColumn("used_at", "timestamptz").addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).execute();
 };
-const up$27 = async (db) => {
+const up$30 = async (db) => {
 	await createUsers(db);
 	await createRoles(db);
 	await createCredentials(db);
@@ -419,7 +419,7 @@ const up$27 = async (db) => {
       foreign key (owner_app_user_id) references app_users (id) on delete set null
   `.execute(db);
 };
-const down$27 = async (db) => {
+const down$30 = async (db) => {
 	await sql`alter table entries drop constraint if exists entries_owner_app_user_fk`.execute(db);
 	await db.schema.dropTable("app_login_codes").execute();
 	await db.schema.dropTable("app_password_resets").execute();
@@ -434,8 +434,8 @@ const down$27 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261002120000_create_extension_hook_runs.ts
 var _20261002120000_create_extension_hook_runs_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$26,
-	up: () => up$26
+	down: () => down$29,
+	up: () => up$29
 });
 /**
 * Extension points (package K, ADR 0009): the ledger of post-commit lifecycle hooks (`afterCreate`,
@@ -443,17 +443,17 @@ var _20261002120000_create_extension_hook_runs_exports = /* @__PURE__ */ __expor
 * as the hook's own database work, so a hook re-run after a worker crash finds its row and is skipped:
 * exactly once for everything the hook does through its transaction.
 */
-const up$26 = async (db) => {
+const up$29 = async (db) => {
 	await db.schema.createTable("extension_hook_runs").addColumn("event_id", "uuid", (col) => col.notNull()).addColumn("hook", "text", (col) => col.notNull()).addColumn("job_id", "uuid").addColumn("completed_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addPrimaryKeyConstraint("extension_hook_runs_pkey", ["event_id", "hook"]).execute();
 };
-const down$26 = async (db) => {
+const down$29 = async (db) => {
 	await db.schema.dropTable("extension_hook_runs").execute();
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261002130000_app_auth_token_version_and_login_code_pkce.ts
 var _20261002130000_app_auth_token_version_and_login_code_pkce_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$25,
-	up: () => up$25
+	down: () => down$28,
+	up: () => up$28
 });
 /**
 * App users (ADR 0005):
@@ -464,20 +464,20 @@ var _20261002130000_app_auth_token_version_and_login_code_pkce_exports = /* @__P
 *   sign-in; the one-time login code is only exchanged with the matching verifier. Codes live a minute, so
 *   any pending ones (issued without a challenge) are dropped rather than given a placeholder.
 */
-const up$25 = async (db) => {
+const up$28 = async (db) => {
 	await db.schema.alterTable("app_users").addColumn("token_version", "integer", (col) => col.notNull().defaultTo(0)).execute();
 	await sql`delete from app_login_codes`.execute(db);
 	await db.schema.alterTable("app_login_codes").addColumn("code_challenge", "text", (col) => col.notNull()).execute();
 };
-const down$25 = async (db) => {
+const down$28 = async (db) => {
 	await db.schema.alterTable("app_login_codes").dropColumn("code_challenge").execute();
 	await db.schema.alterTable("app_users").dropColumn("token_version").execute();
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261002180000_add_publication_log_diff_indexes.ts
 var _20261002180000_add_publication_log_diff_indexes_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$24,
-	up: () => up$24
+	down: () => down$27,
+	up: () => up$27
 });
 /**
 * The snapshot diff (repositories/snapshotDiff.ts) finds the (entry, locale) pairs whose live period opened
@@ -486,7 +486,7 @@ var _20261002180000_add_publication_log_diff_indexes_exports = /* @__PURE__ */ _
 * - `(entry_id, locale, from_seq)`: "the row live at seq N" is the latest row starting at or before N.
 * Periods that opened in the range use the existing `(model_id, from_seq)` index.
 */
-const up$24 = async (db) => {
+const up$27 = async (db) => {
 	await sql`create index publication_log_to_seq_idx on publication_log (to_seq) where to_seq is not null`.execute(db);
 	await db.schema.createIndex("publication_log_entry_locale_from_idx").on("publication_log").columns([
 		"entry_id",
@@ -494,15 +494,15 @@ const up$24 = async (db) => {
 		"from_seq"
 	]).execute();
 };
-const down$24 = async (db) => {
+const down$27 = async (db) => {
 	await db.schema.dropIndex("publication_log_entry_locale_from_idx").execute();
 	await db.schema.dropIndex("publication_log_to_seq_idx").execute();
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261002180100_create_usage_tables.ts
 var _20261002180100_create_usage_tables_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$23,
-	up: () => up$23
+	down: () => down$26,
+	up: () => up$26
 });
 /**
 * Field usage from delivery traffic (plan developer-face §5): daily counters written by the in-memory
@@ -510,7 +510,7 @@ var _20261002180100_create_usage_tables_exports = /* @__PURE__ */ __exportAll({
 * payloads. `principal_key` is `token:<id>`, `app_users` or `anonymous`. Pruned by the retention job
 * after USAGE_RETENTION_DAYS.
 */
-const up$23 = async (db) => {
+const up$26 = async (db) => {
 	await db.schema.createTable("field_reads").addColumn("day", "date", (col) => col.notNull()).addColumn("model_id", "uuid", (col) => col.notNull()).addColumn("field_path", "text", (col) => col.notNull()).addColumn("principal_key", "text", (col) => col.notNull()).addColumn("selection", "text", (col) => col.notNull().check(sql`selection in ('explicit', 'implicit')`)).addColumn("reads", "bigint", (col) => col.notNull().defaultTo(0)).addColumn("last_read_at", "timestamptz", (col) => col.notNull()).addPrimaryKeyConstraint("field_reads_pkey", [
 		"day",
 		"model_id",
@@ -521,15 +521,15 @@ const up$23 = async (db) => {
 	await db.schema.createIndex("field_reads_model_day_idx").on("field_reads").columns(["model_id", "day"]).execute();
 	await db.schema.createTable("token_reads").addColumn("day", "date", (col) => col.notNull()).addColumn("principal_key", "text", (col) => col.notNull()).addColumn("requests", "bigint", (col) => col.notNull().defaultTo(0)).addColumn("last_snapshot", "bigint").addColumn("last_read_at", "timestamptz", (col) => col.notNull()).addPrimaryKeyConstraint("token_reads_pkey", ["day", "principal_key"]).execute();
 };
-const down$23 = async (db) => {
+const down$26 = async (db) => {
 	await db.schema.dropTable("token_reads").execute();
 	await db.schema.dropTable("field_reads").execute();
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261002180200_create_change_sets.ts
 var _20261002180200_create_change_sets_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$22,
-	up: () => up$22
+	down: () => down$25,
+	up: () => up$25
 });
 /**
 * Change sets (developer-face plan §5, ADR 0010): schema drafts and entry publications that ship as ONE
@@ -708,7 +708,7 @@ const migrateReleases = async (db) => {
 	await sql`drop table release_items`.execute(db);
 	await sql`drop table releases`.execute(db);
 };
-const up$22 = async (db) => {
+const up$25 = async (db) => {
 	await createTables(db);
 	await linkExecutionRecords(db);
 	await allowConversionRevisions(db);
@@ -780,7 +780,7 @@ const restoreReleases = async (db) => {
 	await sql`update webhooks set events = array_remove(array_remove(events, 'change_set.shipping'),
     'change_set.discarded')`.execute(db);
 };
-const down$22 = async (db) => {
+const down$25 = async (db) => {
 	await restoreReleases(db);
 	await sql`alter table content_revisions drop constraint content_revisions_reason_check`.execute(db);
 	await sql`alter table content_revisions add constraint content_revisions_reason_check
@@ -801,8 +801,8 @@ const down$22 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261002190000_create_editor_presence_and_content_health.ts
 var _20261002190000_create_editor_presence_and_content_health_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$21,
-	up: () => up$21
+	down: () => down$24,
+	up: () => up$24
 });
 /**
 * Editor experience (plan editor-experience §9):
@@ -813,7 +813,7 @@ var _20261002190000_create_editor_presence_and_content_health_exports = /* @__PU
 * - `content_health_findings`: open and recently resolved findings of the health rules per entry and
 *   locale (`*` for the entry as a whole). An evaluation upserts what it found and resolves the rest.
 */
-const up$21 = async (db) => {
+const up$24 = async (db) => {
 	await sql`
     create unlogged table editor_presence (
       entry_id uuid not null,
@@ -850,15 +850,15 @@ const up$21 = async (db) => {
 	await sql`create index content_health_findings_resolved_idx on content_health_findings (resolved_at)
     where resolved_at is not null`.execute(db);
 };
-const down$21 = async (db) => {
+const down$24 = async (db) => {
 	await sql`drop table content_health_findings`.execute(db);
 	await sql`drop table editor_presence`.execute(db);
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261003120000_add_changes_ship_permission.ts
 var _20261003120000_add_changes_ship_permission_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$20,
-	up: () => up$20
+	down: () => down$23,
+	up: () => up$23
 });
 /**
 * `changes.ship` (agentic plan §I): shipping a change set (and scheduling a ship) becomes its own global
@@ -866,7 +866,7 @@ var _20261003120000_add_changes_ship_permission_exports = /* @__PURE__ */ __expo
 * live. Every role that holds `changes.manage` today keeps what it could do: it gets `changes.ship` too.
 * The permissions version moves only when grants changed, so running instances reload exactly then.
 */
-const up$20 = async (db) => {
+const up$23 = async (db) => {
 	await sql`
     with granted as (
       insert into admin_role_permissions (role_id, action, model_id, condition, field_ids)
@@ -880,7 +880,7 @@ const up$20 = async (db) => {
     where exists (select 1 from granted)
   `.execute(db);
 };
-const down$20 = async (db) => {
+const down$23 = async (db) => {
 	await sql`
     with revoked as (
       delete from admin_role_permissions where action = 'changes.ship' returning 1
@@ -892,8 +892,8 @@ const down$20 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261003130000_create_sites.ts
 var _20261003130000_create_sites_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$19,
-	up: () => up$19
+	down: () => down$22,
+	up: () => up$22
 });
 /**
 * Sites (plan agentic-ecosystem §H, ADR 0011): one instance hosts many sites with one schema and one login.
@@ -1081,7 +1081,7 @@ const siteRoleAssignments = async (db) => {
   `.execute(db);
 	await sql`alter table admin_invitations drop column role_ids`.execute(db);
 };
-const up$19 = async (db) => {
+const up$22 = async (db) => {
 	await createSites(db);
 	await addSiteColumns(db);
 	await tieCopiesToEntries(db);
@@ -1094,7 +1094,7 @@ const assertSingleSite = async (db) => {
 	const { rows } = await sql`select count(*)::text as count from sites`.execute(db);
 	if (Number(rows[0]?.count ?? 0) > 1) throw new Error("Cannot roll back sites while more than one site exists: merging them would merge their snapshot ledgers and uniqueness and widen role assignments. Delete the other sites first.");
 };
-const down$19 = async (db) => {
+const down$22 = async (db) => {
 	await assertSingleSite(db);
 	await sql`alter table admin_invitations add column role_ids uuid[] not null default '{}'::uuid[]`.execute(db);
 	await sql`
@@ -1165,8 +1165,8 @@ const down$19 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261003140200_enqueue_field_index_layout.ts
 var _20261003140200_enqueue_field_index_layout_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$18,
-	up: () => up$18
+	down: () => down$21,
+	up: () => up$21
 });
 /**
 * Field index layout v2 (sites plan §H): per-field expression indexes on `entry_heads` lead with `site_id`,
@@ -1178,7 +1178,7 @@ var _20261003140200_enqueue_field_index_layout_exports = /* @__PURE__ */ __expor
 */
 const JOB_TYPE$1 = "schema.fieldIndexLayout";
 const IDEMPOTENCY_KEY$1 = "schema.fieldIndexLayout:v2";
-const up$18 = async (db) => {
+const up$21 = async (db) => {
 	await sql`
     insert into jobs (type, payload, max_attempts, idempotency_key)
     select ${JOB_TYPE$1}, '{}'::jsonb, 5, ${IDEMPOTENCY_KEY$1}
@@ -1191,14 +1191,14 @@ const up$18 = async (db) => {
   `.execute(db);
 };
 /** The layout job is idempotent; rolling back only forgets it if it has not run yet. */
-const down$18 = async (db) => {
+const down$21 = async (db) => {
 	await sql`delete from jobs where idempotency_key = ${IDEMPOTENCY_KEY$1} and status = 'pending'`.execute(db);
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261003140500_change_set_items_site_and_preview_entry.ts
 var _20261003140500_change_set_items_site_and_preview_entry_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$17,
-	up: () => up$17
+	down: () => down$20,
+	up: () => up$20
 });
 /**
 * Sites, publishing (plan agentic-ecosystem §H, package G5).
@@ -1209,7 +1209,7 @@ var _20261003140500_change_set_items_site_and_preview_entry_exports = /* @__PURE
 * - `preview_tokens.entry_id` becomes required: a preview token previews one entry of one site. Model-wide
 *   tokens (short-lived by design) are deleted; whoever needs one opens the entry's preview again.
 */
-const up$17 = async (db) => {
+const up$20 = async (db) => {
 	await sql`alter table change_sets add constraint change_sets_id_site_uq unique (id, site_id)`.execute(db);
 	await sql`alter table change_set_items add column site_id uuid`.execute(db);
 	await sql`
@@ -1225,7 +1225,7 @@ const up$17 = async (db) => {
 	await sql`delete from preview_tokens where entry_id is null`.execute(db);
 	await sql`alter table preview_tokens alter column entry_id set not null`.execute(db);
 };
-const down$17 = async (db) => {
+const down$20 = async (db) => {
 	await sql`alter table preview_tokens alter column entry_id drop not null`.execute(db);
 	await sql`alter table change_set_items drop constraint change_set_items_entry_site_fk`.execute(db);
 	await sql`alter table change_set_items drop constraint change_set_items_set_site_fk`.execute(db);
@@ -1235,8 +1235,8 @@ const down$17 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261003150000_widen_deployment_providers.ts
 var _20261003150000_widen_deployment_providers_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$16,
-	up: () => up$16
+	down: () => down$19,
+	up: () => up$19
 });
 /**
 * Deploy adapters (plan agentic-ecosystem §B2): deployment connections may use the Vercel and Netlify
@@ -1251,11 +1251,11 @@ const replaceCheck = async (db, check) => {
     check (${check}) not valid`.execute(db);
 	await sql`alter table deployment_connections validate constraint deployment_connections_provider_check`.execute(db);
 };
-const up$16 = async (db) => {
+const up$19 = async (db) => {
 	await replaceCheck(db, WIDENED);
 };
 /** Refuses while Vercel or Netlify connections exist: a down migration never deletes user data. */
-const down$16 = async (db) => {
+const down$19 = async (db) => {
 	const { rows } = await sql`
     select count(*)::text as count from deployment_connections where provider in ('vercel', 'netlify')
   `.execute(db);
@@ -1266,8 +1266,8 @@ const down$16 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261003160000_create_assist_runs.ts
 var _20261003160000_create_assist_runs_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$15,
-	up: () => up$15
+	down: () => down$18,
+	up: () => up$18
 });
 /**
 * Editor assists (plan agentic-ecosystem §A0, §I): one `assist_runs` row per assist request (who, which
@@ -1283,14 +1283,14 @@ const replaceSourceCheck = async (db, check) => {
 	await sql`alter table change_sets add constraint change_sets_source_check check (${check}) not valid`.execute(db);
 	await sql`alter table change_sets validate constraint change_sets_source_check`.execute(db);
 };
-const up$15 = async (db) => {
+const up$18 = async (db) => {
 	await db.schema.createTable("assist_runs").addColumn("id", "uuid", (col) => col.primaryKey().defaultTo(sql`gen_random_uuid()`)).addColumn("site_id", "uuid", (col) => col.notNull().references("sites.id").onDelete("cascade")).addColumn("actor_type", "text", (col) => col.notNull()).addColumn("actor_id", "text", (col) => col.notNull()).addColumn("action", "text", (col) => col.notNull().check(ACTIONS)).addColumn("rule", "text").addColumn("provider", "text", (col) => col.notNull()).addColumn("model", "text", (col) => col.notNull()).addColumn("input_tokens", "integer", (col) => col.notNull().defaultTo(0)).addColumn("output_tokens", "integer", (col) => col.notNull().defaultTo(0)).addColumn("duration_ms", "integer", (col) => col.notNull().defaultTo(0)).addColumn("status", "text", (col) => col.notNull().check(sql`status in ('queued', 'running', 'succeeded', 'failed')`)).addColumn("error_code", "text").addColumn("job_id", "uuid", (col) => col.references("jobs.id").onDelete("set null")).addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`)).addColumn("finished_at", "timestamptz").execute();
 	await db.schema.createIndex("assist_runs_site_created_idx").on("assist_runs").columns(["site_id", "created_at"]).execute();
 	await db.schema.createIndex("assist_runs_created_idx").on("assist_runs").column("created_at").execute();
 	await replaceSourceCheck(db, SOURCES_WIDENED);
 };
 /** Refuses while change sets opened by assist exist: a down migration never deletes user data. */
-const down$15 = async (db) => {
+const down$18 = async (db) => {
 	const { rows } = await sql`
     select count(*)::text as count from change_sets where source = 'assist'
   `.execute(db);
@@ -1302,8 +1302,8 @@ const down$15 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261003170000_audit_events_seq.ts
 var _20261003170000_audit_events_seq_exports$2 = /* @__PURE__ */ __exportAll({
-	down: () => down$14,
-	up: () => up$14
+	down: () => down$17,
+	up: () => up$17
 });
 /**
 * `audit_events.seq`: a monotonic tiebreaker after `occurred_at`, so events written in the same instant (one
@@ -1312,17 +1312,17 @@ var _20261003170000_audit_events_seq_exports$2 = /* @__PURE__ */ __exportAll({
 * are numbered in the order the rewrite reads them. No index: the audit queries filter and sort by
 * `occurred_at` first, and `seq` only breaks ties.
 */
-const up$14 = async (db) => {
+const up$17 = async (db) => {
 	await db.schema.alterTable("audit_events").addColumn("seq", "bigint", (col) => col.notNull().generatedAlwaysAsIdentity()).execute();
 };
-const down$14 = async (db) => {
+const down$17 = async (db) => {
 	await db.schema.alterTable("audit_events").dropColumn("seq").execute();
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261004120000_models_site_scope.ts
 var _20261004120000_models_site_scope_exports$2 = /* @__PURE__ */ __exportAll({
-	down: () => down$13,
-	up: () => up$13
+	down: () => down$16,
+	up: () => up$16
 });
 /**
 * Per-site schema (plan site-schema): a definition belongs to one site (`models.site_id`) or is shared by every
@@ -1335,7 +1335,7 @@ var _20261004120000_models_site_scope_exports$2 = /* @__PURE__ */ __exportAll({
 * over `lower(api_key)` cannot hold. Share or delete them first; then `down` is lossless.
 */
 const NIL_UUID$1 = "00000000-0000-0000-0000-000000000000";
-const up$13 = async (db) => {
+const up$16 = async (db) => {
 	await sql`alter table models add column site_id uuid references sites (id)`.execute(db);
 	await sql`create index models_site_idx on models (site_id)`.execute(db);
 	await sql`drop index models_api_key_uq`.execute(db);
@@ -1345,7 +1345,7 @@ const up$13 = async (db) => {
   `.execute(db);
 	await sql`alter table schema_drafts add column shared boolean not null default false`.execute(db);
 };
-const down$13 = async (db) => {
+const down$16 = async (db) => {
 	const { rows } = await sql`select count(*)::text as count from models where site_id is not null`.execute(db);
 	if (Number(rows[0]?.count ?? 0) > 0) throw new Error("Cannot roll back per-site schema while definitions belong to a site: two sites may share an API ID. Share or delete the site definitions first.");
 	await sql`alter table schema_drafts drop column shared`.execute(db);
@@ -1357,8 +1357,8 @@ const down$13 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261004130000_site_seo_settings.ts
 var _20261004130000_site_seo_settings_exports$2 = /* @__PURE__ */ __exportAll({
-	down: () => down$12,
-	up: () => up$12
+	down: () => down$15,
+	up: () => up$15
 });
 /**
 * SEO defaults per site (plan seo-fields): `sites.seo_defaults` holds the site's default texts per locale, its
@@ -1369,7 +1369,7 @@ var _20261004130000_site_seo_settings_exports$2 = /* @__PURE__ */ __exportAll({
 * about what a site publishes) gets it; the built-in owner and admin roles get it from `ensureSystemRoles`.
 * The permissions version moves only when grants changed, so running instances reload exactly then.
 */
-const up$12 = async (db) => {
+const up$15 = async (db) => {
 	await sql`alter table sites add column seo_defaults jsonb`.execute(db);
 	await sql`
     with granted as (
@@ -1384,7 +1384,7 @@ const up$12 = async (db) => {
     where exists (select 1 from granted)
   `.execute(db);
 };
-const down$12 = async (db) => {
+const down$15 = async (db) => {
 	await sql`
     with revoked as (
       delete from admin_role_permissions where action = 'site.settings' returning 1
@@ -1397,8 +1397,8 @@ const down$12 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/20261005120000_entry_heads_entry_created_at.ts
 var _20261005120000_entry_heads_entry_created_at_exports$2 = /* @__PURE__ */ __exportAll({
-	down: () => down$11,
-	up: () => up$11
+	down: () => down$14,
+	up: () => up$14
 });
 /**
 * Delivery perf 2 (ADR 0001 amendment): the entry's `created_at` on each head (`entry_created_at`), so a list
@@ -1415,7 +1415,7 @@ const INDEX$2 = "entry_heads_entry_order_idx";
 const JOB_TYPE = "schema.entryOrderIndex";
 const IDEMPOTENCY_KEY = "schema.entryOrderIndex:v1";
 const BATCH$1 = 5e3;
-const up$11 = async (db) => {
+const up$14 = async (db) => {
 	await sql`alter table entry_heads add column entry_created_at timestamptz`.execute(db);
 	for (;;) {
 		const result = await sql`
@@ -1440,7 +1440,7 @@ const up$11 = async (db) => {
     create index ${sql.id(INDEX$2)} on entry_heads (site_id, model_id, state, entry_created_at desc, entry_id)
   `.execute(db);
 };
-const down$11 = async (db) => {
+const down$14 = async (db) => {
 	await sql`delete from jobs where idempotency_key = ${IDEMPOTENCY_KEY} and status = 'pending'`.execute(db);
 	await sql`drop index if exists ${sql.id(INDEX$2)}`.execute(db);
 	await sql`alter table entry_heads drop column entry_created_at`.execute(db);
@@ -1449,20 +1449,58 @@ const down$11 = async (db) => {
 //#region ../../apps/api/src/db/migrations/20261006120000_system_versions_release.ts
 var _20261006120000_system_versions_release_exports = /* @__PURE__ */ __exportAll({
 	dialectNeutral: () => true,
-	down: () => down$10,
-	up: () => up$10
+	down: () => down$13,
+	up: () => up$13
 });
-const up$10 = async (db) => {
+const up$13 = async (db) => {
 	await db.schema.alterTable("system_versions").addColumn("release", "text").execute();
 };
-const down$10 = async (db) => {
+const down$13 = async (db) => {
 	await db.schema.alterTable("system_versions").dropColumn("release").execute();
 };
 //#endregion
+//#region ../../apps/api/src/db/migrations/20261014120000_canceled_status.ts
+var _20261014120000_canceled_status_exports$2 = /* @__PURE__ */ __exportAll({
+	down: () => down$12,
+	up: () => up$12
+});
+/**
+* The `cancelled` status of schema change jobs and scheduled publications becomes `canceled`. Rows are
+* rewritten and the check constraints swapped. MySQL has its own twin; SQLite rebuilds the two tables
+* (`./sqlite/20261014120000_canceled_status.ts`).
+*/
+const TABLES$4 = [{
+	table: "schema_change_jobs",
+	values: [
+		"pending",
+		"running",
+		"activated",
+		"failed"
+	]
+}, {
+	table: "scheduled_publications",
+	values: [
+		"scheduled",
+		"done",
+		"failed"
+	]
+}];
+const swap$1 = async (db, from, to) => {
+	for (const { table, values } of TABLES$4) {
+		const constraint = `${table}_status_check`;
+		await sql`alter table ${sql.table(table)} drop constraint ${sql.id(constraint)}`.execute(db);
+		await sql`update ${sql.table(table)} set status = ${to} where status = ${from}`.execute(db);
+		const allowed = sql.join([...values, to].map((value) => sql.lit(value)));
+		await sql`alter table ${sql.table(table)} add constraint ${sql.id(constraint)} check (status in (${allowed}))`.execute(db);
+	}
+};
+const up$12 = (db) => swap$1(db, "cancelled", "canceled");
+const down$12 = (db) => swap$1(db, "canceled", "cancelled");
+//#endregion
 //#region ../../apps/api/src/db/migrations/mysql/0001_baseline.ts
 var _0001_baseline_exports$1 = /* @__PURE__ */ __exportAll({
-	down: () => down$9,
-	up: () => up$9
+	down: () => down$11,
+	up: () => up$11
 });
 /**
 * MySQL baseline: Shapio's whole system schema as of PostgreSQL migration
@@ -2572,7 +2610,7 @@ const STATEMENTS$1 = [
     ('00000000-0000-4000-b000-000000000001', 'public', '00000000-0000-4000-a000-000000000001'),
     ('00000000-0000-4000-b000-000000000001', 'authenticated', '00000000-0000-4000-a000-000000000002')`
 ];
-const TABLES$1 = [
+const TABLES$3 = [
 	"system_versions",
 	"jobs",
 	"outbox_events",
@@ -2645,13 +2683,13 @@ const withoutForeignKeyChecks = async (db, statements) => db.connection().execut
 		await sql`set foreign_key_checks = 1`.execute(connection);
 	}
 });
-const up$9 = async (db) => withoutForeignKeyChecks(db, STATEMENTS$1);
-const down$9 = async (db) => withoutForeignKeyChecks(db, [...TABLES$1].reverse().map((table) => `drop table if exists \`${table}\``));
+const up$11 = async (db) => withoutForeignKeyChecks(db, STATEMENTS$1);
+const down$11 = async (db) => withoutForeignKeyChecks(db, [...TABLES$3].reverse().map((table) => `drop table if exists \`${table}\``));
 //#endregion
 //#region ../../apps/api/src/db/migrations/mysql/20261003170000_audit_events_seq.ts
 var _20261003170000_audit_events_seq_exports$1 = /* @__PURE__ */ __exportAll({
-	down: () => down$8,
-	up: () => up$8
+	down: () => down$10,
+	up: () => up$10
 });
 /**
 * MySQL twin of `../20261003170000_audit_events_seq.ts`: `seq` is `AUTO_INCREMENT`, which InnoDB only allows
@@ -2659,26 +2697,26 @@ var _20261003170000_audit_events_seq_exports$1 = /* @__PURE__ */ __exportAll({
 * tiebreaker). Existing rows are numbered in primary-key order. `db/mysql/tables.ts` lists `seq` as the
 * table's identity, so an insert's emulated RETURNING finds its row by `LAST_INSERT_ID()`.
 */
-const up$8 = async (db) => {
+const up$10 = async (db) => {
 	await sql`alter table \`audit_events\`
     add column \`seq\` bigint not null auto_increment,
     add unique key \`audit_events_seq_key\` (\`seq\`)`.execute(db);
 };
-const down$8 = async (db) => {
+const down$10 = async (db) => {
 	await sql`alter table \`audit_events\` drop column \`seq\``.execute(db);
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/mysql/20261004120000_models_site_scope.ts
 var _20261004120000_models_site_scope_exports$1 = /* @__PURE__ */ __exportAll({
-	down: () => down$7,
-	up: () => up$7
+	down: () => down$9,
+	up: () => up$9
 });
 /**
 * MySQL twin of `../20261004120000_models_site_scope.ts`. The per-scope API ID key uses functional key parts,
 * like the baseline: `coalesce(site_id, '')` for the scope (MySQL has no `NULLS NOT DISTINCT`) and the
 * case-folded API ID of live rows only (a deleted row's part is NULL, and NULLs never collide).
 */
-const up$7 = async (db) => {
+const up$9 = async (db) => {
 	await sql`alter table \`models\` add column \`site_id\` char(36) character set ascii collate ascii_general_ci`.execute(db);
 	await sql`create index \`models_site_idx\` on \`models\` (\`site_id\`)`.execute(db);
 	await sql`alter table \`models\` add constraint \`models_site_id_fkey\` foreign key (\`site_id\`) references \`sites\` (\`id\`)`.execute(db);
@@ -2687,7 +2725,7 @@ const up$7 = async (db) => {
     ((coalesce(\`site_id\`, '')), (case when (\`deleted_at\` IS NULL) then lower(\`api_key\`) end))`.execute(db);
 	await sql`alter table \`schema_drafts\` add column \`shared\` tinyint(1) not null default 0`.execute(db);
 };
-const down$7 = async (db) => {
+const down$9 = async (db) => {
 	const { rows } = await sql`select count(*) as count from \`models\` where \`site_id\` is not null`.execute(db);
 	if (Number(rows[0]?.count ?? 0) > 0) throw new Error("Cannot roll back per-site schema while definitions belong to a site: two sites may share an API ID. Share or delete the site definitions first.");
 	await sql`alter table \`schema_drafts\` drop column \`shared\``.execute(db);
@@ -2701,8 +2739,8 @@ const down$7 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/mysql/20261004130000_site_seo_settings.ts
 var _20261004130000_site_seo_settings_exports$1 = /* @__PURE__ */ __exportAll({
-	down: () => down$6,
-	up: () => up$6
+	down: () => down$8,
+	up: () => up$8
 });
 /**
 * MySQL twin of `../20261004130000_site_seo_settings.ts`. `insert ignore` stands in for `on conflict do
@@ -2710,7 +2748,7 @@ var _20261004130000_site_seo_settings_exports$1 = /* @__PURE__ */ __exportAll({
 */
 const bumpPermissionsVersion$1 = (db) => sql`update \`system_versions\` set \`permissions_version\` = \`permissions_version\` + 1,
     \`updated_at\` = current_timestamp(6)`.execute(db);
-const up$6 = async (db) => {
+const up$8 = async (db) => {
 	await sql`alter table \`sites\` add column \`seo_defaults\` json`.execute(db);
 	const granted = await sql`
     insert ignore into \`admin_role_permissions\` (\`id\`, \`role_id\`, \`action\`, \`model_id\`, \`condition\`, \`field_ids\`)
@@ -2720,7 +2758,7 @@ const up$6 = async (db) => {
   `.execute(db);
 	if (Number(granted.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion$1(db);
 };
-const down$6 = async (db) => {
+const down$8 = async (db) => {
 	const revoked = await sql`delete from \`admin_role_permissions\` where \`action\` = 'site.settings'`.execute(db);
 	if (Number(revoked.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion$1(db);
 	await sql`alter table \`sites\` drop column \`seo_defaults\``.execute(db);
@@ -2728,8 +2766,8 @@ const down$6 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/mysql/20261005120000_entry_heads_entry_created_at.ts
 var _20261005120000_entry_heads_entry_created_at_exports$1 = /* @__PURE__ */ __exportAll({
-	down: () => down$5,
-	up: () => up$5
+	down: () => down$7,
+	up: () => up$7
 });
 /**
 * MySQL twin of `../20261005120000_entry_heads_entry_created_at.ts`. The column is added `ALGORITHM=INSTANT`
@@ -2738,7 +2776,7 @@ var _20261005120000_entry_heads_entry_created_at_exports$1 = /* @__PURE__ */ __e
 */
 const INDEX$1 = "entry_heads_entry_order_idx";
 const BATCH = 5e3;
-const up$5 = async (db) => {
+const up$7 = async (db) => {
 	await sql`alter table \`entry_heads\` add column \`entry_created_at\` datetime(6), algorithm=instant`.execute(db);
 	for (;;) {
 		const result = await sql`update \`entry_heads\` set \`entry_created_at\` = (
@@ -2749,11 +2787,48 @@ const up$5 = async (db) => {
 	await sql`create index ${sql.id(INDEX$1)} on \`entry_heads\`
     (\`site_id\`, \`model_id\`, \`state\`, \`entry_created_at\` desc, \`entry_id\`) algorithm=inplace lock=none`.execute(db);
 };
-const down$5 = async (db) => {
+const down$7 = async (db) => {
 	await sql`drop index ${sql.id(INDEX$1)} on \`entry_heads\``.execute(db);
 	await sql`alter table \`entry_heads\` drop column \`entry_created_at\``.execute(db);
 };
 //#endregion
+//#region ../../apps/api/src/db/migrations/mysql/20261014120000_canceled_status.ts
+var _20261014120000_canceled_status_exports$1 = /* @__PURE__ */ __exportAll({
+	down: () => down$6,
+	up: () => up$6
+});
+/**
+* MySQL twin of `../20261014120000_canceled_status.ts`: MySQL 8.4 drops a check constraint with
+* `drop check`, not `drop constraint`.
+*/
+const TABLES$2 = [{
+	table: "schema_change_jobs",
+	values: [
+		"pending",
+		"running",
+		"activated",
+		"failed"
+	]
+}, {
+	table: "scheduled_publications",
+	values: [
+		"scheduled",
+		"done",
+		"failed"
+	]
+}];
+const swap = async (db, from, to) => {
+	for (const { table, values } of TABLES$2) {
+		const constraint = `${table}_status_check`;
+		await sql`alter table ${sql.table(table)} drop check ${sql.id(constraint)}`.execute(db);
+		await sql`update ${sql.table(table)} set status = ${to} where status = ${from}`.execute(db);
+		const allowed = sql.join([...values, to].map((value) => sql.lit(value)));
+		await sql`alter table ${sql.table(table)} add constraint ${sql.id(constraint)} check (status in (${allowed}))`.execute(db);
+	}
+};
+const up$6 = (db) => swap(db, "cancelled", "canceled");
+const down$6 = (db) => swap(db, "canceled", "cancelled");
+//#endregion
 //#region ../../apps/api/src/db/migrations/mysql/index.ts
 const MYSQL_MIGRATIONS = {
 	"0001_baseline": _0001_baseline_exports$1,
@@ -2761,13 +2836,14 @@ const MYSQL_MIGRATIONS = {
 	"20261004120000_models_site_scope": _20261004120000_models_site_scope_exports$1,
 	"20261004130000_site_seo_settings": _20261004130000_site_seo_settings_exports$1,
 	"20261005120000_entry_heads_entry_created_at": _20261005120000_entry_heads_entry_created_at_exports$1,
-	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports
+	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports,
+	"20261014120000_canceled_status": _20261014120000_canceled_status_exports$1
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/sqlite/0001_baseline.ts
 var _0001_baseline_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$4,
-	up: () => up$4
+	down: () => down$5,
+	up: () => up$5
 });
 /**
 * SQLite baseline: Shapio's whole system schema as of PostgreSQL migration
@@ -3850,7 +3926,7 @@ const STATEMENTS = [
     ('00000000-0000-4000-b000-000000000001', 'public', '00000000-0000-4000-a000-000000000001'),
     ('00000000-0000-4000-b000-000000000001', 'authenticated', '00000000-0000-4000-a000-000000000002')`
 ];
-const TABLES = [
+const TABLES$1 = [
 	"system_versions",
 	"jobs",
 	"outbox_events",
@@ -3912,18 +3988,18 @@ const TABLES = [
 	"assist_runs",
 	"sequences"
 ];
-const up$4 = async (db) => {
+const up$5 = async (db) => {
 	for (const statement of STATEMENTS) await sql.raw(statement).execute(db);
 };
-const down$4 = async (db) => {
+const down$5 = async (db) => {
 	await sql`pragma defer_foreign_keys = on`.execute(db);
-	for (const table of [...TABLES].reverse()) await sql.raw(`drop table if exists "${table}"`).execute(db);
+	for (const table of [...TABLES$1].reverse()) await sql.raw(`drop table if exists "${table}"`).execute(db);
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/sqlite/20261003170000_audit_events_seq.ts
 var _20261003170000_audit_events_seq_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$3,
-	up: () => up$3
+	down: () => down$4,
+	up: () => up$4
 });
 /**
 * SQLite twin of `../20261003170000_audit_events_seq.ts`. SQLite cannot add a column whose default calls a
@@ -3950,7 +4026,7 @@ const INDEXES = [
 	`create index "audit_events_occurred_at_idx" on "audit_events" (occurred_at DESC)`,
 	`create index "audit_events_target_idx" on "audit_events" (target_type, target_id, occurred_at DESC)`
 ];
-const up$3 = async (db) => {
+const up$4 = async (db) => {
 	await sql`insert into "sequences" (name, value) values ('audit_events_seq', 0)`.execute(db);
 	await sql`alter table "audit_events" rename to "audit_events_before_seq"`.execute(db);
 	await sql`create table "audit_events" (
@@ -3978,15 +4054,15 @@ const up$3 = async (db) => {
 	await sql`drop table "audit_events_before_seq"`.execute(db);
 	for (const statement of INDEXES) await sql.raw(statement).execute(db);
 };
-const down$3 = async (db) => {
+const down$4 = async (db) => {
 	await sql`alter table "audit_events" drop column "seq"`.execute(db);
 	await sql`delete from "sequences" where name = 'audit_events_seq'`.execute(db);
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/sqlite/20261004120000_models_site_scope.ts
 var _20261004120000_models_site_scope_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$2,
-	up: () => up$2
+	down: () => down$3,
+	up: () => up$3
 });
 /**
 * SQLite twin of `../20261004120000_models_site_scope.ts`. `down` rebuilds `models` without `site_id`
@@ -3996,7 +4072,7 @@ var _20261004120000_models_site_scope_exports = /* @__PURE__ */ __exportAll({
 * deletes nothing they reference.
 */
 const NIL_UUID = "00000000-0000-0000-0000-000000000000";
-const up$2 = async (db) => {
+const up$3 = async (db) => {
 	await sql`alter table "models" add column "site_id" text_uuid references sites (id)`.execute(db);
 	await sql`create index "models_site_idx" on "models" (site_id)`.execute(db);
 	await sql`drop index "models_api_key_uq"`.execute(db);
@@ -4006,7 +4082,7 @@ const up$2 = async (db) => {
   `.execute(db);
 	await sql`alter table "schema_drafts" add column "shared" integer_boolean not null default 0`.execute(db);
 };
-const down$2 = async (db) => {
+const down$3 = async (db) => {
 	const { rows } = await sql`select count(*) as count from "models" where site_id is not null`.execute(db);
 	if (Number(rows[0]?.count ?? 0) > 0) throw new Error("Cannot roll back per-site schema while definitions belong to a site: two sites may share an API ID. Share or delete the site definitions first.");
 	await sql`alter table "schema_drafts" drop column "shared"`.execute(db);
@@ -4031,15 +4107,15 @@ const down$2 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/sqlite/20261004130000_site_seo_settings.ts
 var _20261004130000_site_seo_settings_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$1,
-	up: () => up$1
+	down: () => down$2,
+	up: () => up$2
 });
 /**
 * SQLite twin of `../20261004130000_site_seo_settings.ts`. `insert or ignore` stands in for `on conflict do
 * nothing` (the grant's unique index); the permissions version moves only when a grant was added or removed.
 */
 const bumpPermissionsVersion = (db) => sql`update "system_versions" set permissions_version = permissions_version + 1, updated_at = shapio_now()`.execute(db);
-const up$1 = async (db) => {
+const up$2 = async (db) => {
 	await sql`alter table "sites" add column "seo_defaults" text_jsonb`.execute(db);
 	const granted = await sql`
     insert or ignore into "admin_role_permissions" (role_id, action, model_id, condition, field_ids)
@@ -4049,7 +4125,7 @@ const up$1 = async (db) => {
   `.execute(db);
 	if (Number(granted.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion(db);
 };
-const down$1 = async (db) => {
+const down$2 = async (db) => {
 	const revoked = await sql`delete from "admin_role_permissions" where action = 'site.settings'`.execute(db);
 	if (Number(revoked.numAffectedRows ?? 0) > 0) await bumpPermissionsVersion(db);
 	await sql`alter table "sites" drop column "seo_defaults"`.execute(db);
@@ -4057,8 +4133,8 @@ const down$1 = async (db) => {
 //#endregion
 //#region ../../apps/api/src/db/migrations/sqlite/20261005120000_entry_heads_entry_created_at.ts
 var _20261005120000_entry_heads_entry_created_at_exports = /* @__PURE__ */ __exportAll({
-	down: () => down,
-	up: () => up
+	down: () => down$1,
+	up: () => up$1
 });
 /**
 * SQLite twin of `../20261005120000_entry_heads_entry_created_at.ts`. One process holds the write lock, so
@@ -4066,18 +4142,61 @@ var _20261005120000_entry_heads_entry_created_at_exports = /* @__PURE__ */ __exp
 * documented single-process limitation of ADR 0001, "D2: as built").
 */
 const INDEX = "entry_heads_entry_order_idx";
-const up = async (db) => {
+const up$1 = async (db) => {
 	await sql`alter table "entry_heads" add column "entry_created_at" text_timestamptz`.execute(db);
 	await sql`update "entry_heads" set entry_created_at = (
     select e.created_at from "entries" e where e.id = "entry_heads".entry_id
   ) where entry_created_at is null`.execute(db);
 	await sql`create index ${sql.id(INDEX)} on "entry_heads" (site_id, model_id, state, entry_created_at desc, entry_id)`.execute(db);
 };
-const down = async (db) => {
+const down$1 = async (db) => {
 	await sql`drop index if exists ${sql.id(INDEX)}`.execute(db);
 	await sql`alter table "entry_heads" drop column "entry_created_at"`.execute(db);
 };
 //#endregion
+//#region ../../apps/api/src/db/migrations/sqlite/20261014120000_canceled_status.ts
+var _20261014120000_canceled_status_exports = /* @__PURE__ */ __exportAll({
+	down: () => down,
+	up: () => up
+});
+/**
+* SQLite twin of `../20261014120000_canceled_status.ts`. SQLite cannot change a check constraint, so each
+* table is rebuilt from its own stored `create table` statement with the one value swapped: renamed aside
+* (with `legacy_alter_table` on, so references to the name keep pointing at it), recreated, refilled with the
+* status rewritten, and its indexes recreated from `sqlite_master`. Nothing references either table.
+*/
+const TABLES = ["schema_change_jobs", "scheduled_publications"];
+const rebuild = async (db, table, from, to) => {
+	const { rows: created } = await sql`
+    select sql from sqlite_master where type = 'table' and name = ${table}
+  `.execute(db);
+	const { rows: indexes } = await sql`
+    select sql from sqlite_master where type = 'index' and tbl_name = ${table} and sql is not null
+  `.execute(db);
+	const definition = created[0]?.sql;
+	if (!definition || !definition.includes(`'${from}'`)) throw new Error(`${table}: expected a status check allowing '${from}'`);
+	const repaired = definition.replace(/references\s+("?)(\w+?)_before_\w+\1/gi, (_, quote, base) => `references ${quote}${base}${quote}`);
+	const aside = `${table}_before_${to}`;
+	await sql`pragma legacy_alter_table = on`.execute(db);
+	await sql`alter table ${sql.table(table)} rename to ${sql.table(aside)}`.execute(db);
+	await sql.raw(repaired.replace(`'${from}'`, `'${to}'`)).execute(db);
+	const { rows: columns } = await sql`
+    select name from pragma_table_info(${aside}) order by cid
+  `.execute(db);
+	const names = columns.map(({ name }) => sql.id(name));
+	const values = columns.map(({ name }) => name === "status" ? sql`case when status = ${from} then ${to} else status end` : sql.id(name));
+	await sql`insert into ${sql.table(table)} (${sql.join(names)}) select ${sql.join(values)} from ${sql.table(aside)}`.execute(db);
+	await sql`drop table ${sql.table(aside)}`.execute(db);
+	await sql`pragma legacy_alter_table = off`.execute(db);
+	for (const { sql: index } of indexes) await sql.raw(index).execute(db);
+};
+const up = async (db) => {
+	for (const table of TABLES) await rebuild(db, table, "cancelled", "canceled");
+};
+const down = async (db) => {
+	for (const table of TABLES) await rebuild(db, table, "canceled", "cancelled");
+};
+//#endregion
 //#region ../../apps/api/src/db/migrations/sqlite/index.ts
 const SQLITE_MIGRATIONS = {
 	"0001_baseline": _0001_baseline_exports,
@@ -4085,7 +4204,8 @@ const SQLITE_MIGRATIONS = {
 	"20261004120000_models_site_scope": _20261004120000_models_site_scope_exports,
 	"20261004130000_site_seo_settings": _20261004130000_site_seo_settings_exports,
 	"20261005120000_entry_heads_entry_created_at": _20261005120000_entry_heads_entry_created_at_exports,
-	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports
+	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports,
+	"20261014120000_canceled_status": _20261014120000_canceled_status_exports
 };
 //#endregion
 //#region ../../apps/api/src/db/migrations/index.ts
@@ -4119,7 +4239,8 @@ const MIGRATIONS = {
 	"20261004120000_models_site_scope": _20261004120000_models_site_scope_exports$2,
 	"20261004130000_site_seo_settings": _20261004130000_site_seo_settings_exports$2,
 	"20261005120000_entry_heads_entry_created_at": _20261005120000_entry_heads_entry_created_at_exports$2,
-	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports
+	"20261006120000_system_versions_release": _20261006120000_system_versions_release_exports,
+	"20261014120000_canceled_status": _20261014120000_canceled_status_exports$2
 };
 const PROVIDERS = {
 	postgres: { getMigrations: () => Promise.resolve({ ...MIGRATIONS }) },
@@ -4149,4 +4270,4 @@ const getPendingMigrations = async (db) => {
 //#endregion
 export { getPendingMigrations };
 
-//# sourceMappingURL=migrator-CO5sXosL.js.map
+//# sourceMappingURL=migrator-BfVtncOo.js.map