@topy-ai/maggie 0.7.33 → 0.7.34

package/bundled-templates/astro-blog/starter/README.md

@@ -0,0 +1,168 @@
+# Maggie Astro Blog Starter
+
+This directory is a runnable reference scaffold for the [Astro Blog Template
+Contract](../README.md). It provides public routes, a stable SQLite schema and
+a server-only Maggie Ops API. The UI can be redesigned without changing the
+content, publishing or SEO contracts.
+
+## Run it
+
+```bash
+cp .env.example .env
+# Set PUBLIC_SITE_URL to the real absolute origin before building.
+npm install
+npm run db:seed
+npm run dev
+npm run build
+```
+
+The default example uses SQLite. The schema is created on first server request at
+`BLOG_DB_PATH`. Demo posts are development-only; production with no configured
+adapter renders an empty, non-indexable content surface rather than publishing
+fixture posts. For local-only Ops testing set `OPS_AUTH_PROVIDER=local` and a
+long random `OPS_LOCAL_TOKEN`. Production deployments must replace the local
+token with a server-side OIDC/session adapter.
+
+The blog index defaults to 9 posts per page in a 3-column (3×3) grid. Change
+`PUBLIC_POSTS_PER_PAGE` or `PUBLIC_GRID_COLUMNS` only through reviewed site
+configuration so pagination and SEO checks continue to use the same values.
+
+`PUBLIC_SITE_URL` is required and must be an absolute URL; the starter does not
+fall back to `example.com`. Provider reports use `GSC_SITE_URL` + `GSC_ACCESS_TOKEN` for visibility and
+`GA4_PROPERTY_ID` + `GA4_ACCESS_TOKEN` for analytics. Tokens are never returned
+by the settings API. Technical SEO and content-quality reports can run locally;
+provider reports persist an explicit error when credentials are unavailable.
+
+To load the deterministic example records into SQLite, run `npm run db:seed`.
+For a browser session in local mode, set the `maggie_ops_token` cookie to the
+same value as `OPS_LOCAL_TOKEN`; API clients may instead send a Bearer token.
+
+## Routes
+
+```text
+/blog
+/blog/[slug]
+/blog/page/[page]
+/about
+/topics
+/topics/[slug]
+/authors/[slug]
+/sitemap.xml
+/robots.txt
+/ops/*       authenticated Maggie Ops screens
+/api/ops/*   authenticated content, sitemap, report and settings API
+/api/approval/[token]   expiring client review link API
+```
+
+The public pages use the same publication predicate, URL helper, metadata
+builder, and JSON-LD shape that a production adapter must preserve. The
+server-only Ops API currently exposes summary, author/post CRUD, guarded
+publish, topics/FAQs/CTAs, sitemap sources/runs/matching/history, reports,
+settings, API Pull project-context/posts/updates/history/latest sync, rewrite
+queue/history/policy, content-tracking state reporting, and server-side AI
+CMO/GSC/GA4 provider seams.
+
+`/ops/wordpress` provides a capability, mapping-plan, preview/apply/resume migration flow for the
+WordPress REST resources `/wp/v2/posts`, `/pages`, `/categories`, `/tags`, and
+`/media`. Selected post types, category/topic mappings, author mappings, SEO
+normalization, source modified timestamps, and conflict policy are persisted in
+the migration options.
+It preserves WordPress source IDs, stores categories as draft topics, stores
+tags as migration terms, registers media URLs, and records redirects when a
+source URL differs from the destination slug. Configure WordPress API access
+with `WORDPRESS_API_TOKEN` or a server-only application-password pair.
+
+## Replace points
+
+| File | Replace with |
+|---|---|
+| `src/data/demo.ts` | demo-only fallback content |
+| `src/lib/repository.ts` | canonical publication queries and adapter mapping |
+| `src/lib/seo.ts` | validated metadata/JSON-LD builder if fields expand |
+| `db/schema.sql` | selected database migration, preserving constraints |
+| `src/middleware.ts` | real session and role authorization |
+| `src/lib/db.ts` | Postgres adapter or migration runner when SQLite is not selected |
+| `src/pages/ops/*` | authenticated Maggie Ops screens calling the API |
+| `src/pages/sitemap.xml.ts` | repository-backed published URL query |
+
+The starter includes a Tailwind v4 Vite entry point for projects that choose
+Tailwind during bootstrap. It remains compatible with the existing contract
+surface and does not require replacing the host's design system.
+
+`npm run maggie:*` uses the installed `maggie` binary. It is portable after the
+starter is copied out of this monorepo; it no longer depends on repository-
+relative Python paths.
+
+Do not expose `AI_CMO_API_KEY`, GSC verification tokens, GA4 credentials, or
+database credentials to browser code. API Pull sync, sitemap matching,
+rewrite queueing and report-state remain server/CLI operations; connect them to
+the authenticated Ops actions rather than accepting secrets from the browser.
+
+## Operations contract
+
+`/api/ops/operations` exposes durable calendar, revision, bulk preview/apply,
+redirect, task, media and agency workspace operations. Approved posts can be
+published by schedule with `POST /api/ops/calendar/publish-due`. Client review
+links are created by the authenticated API and expose only a hashed token.
+
+Agency clients should use `/api/ops/agency?workspaceId=...` for scoped reads and
+`POST /api/ops/agency` for client, site, project, template, and member changes.
+Cross-workspace relations are rejected and provider credentials are accepted only
+as server-side references.
+
+For bulk changes, use `POST /api/ops/bulk`: first send `filter`, `changes`,
+and preview mode, then apply the returned `previewId`. Apply rejects stale
+previews, records a revision for every affected post, and supports taxonomy,
+metadata, publish/archive, regeneration, and rewrite-queue changes.
+
+Generic migration is available at `POST /api/ops/migrations/import` with
+`format` set to `json`, `csv`, `wxr`, `sitemap`, or `media-archive`, plus
+`mode: preview|apply`. `syncMode` supports `all`, `new`, and `modified`, while
+`detectDeleted` archives records missing from a full source snapshot. Applied
+records use source identity and SHA-256 checksums for safe reruns; conflicts
+support source-wins, target-wins, or manual review.
+
+After explicit bootstrap confirmation, the CLI writes `.maggie/project.json`,
+`decisions.json`, `schema.json`, `routes.json`, `integrations.json`, and
+`migration.json`. Use `maggie doctor --strict --require-bootstrap`,
+`maggie generate fixture`, `npm run schema:check`, and `npm run fixture:seed`
+as local or CI gates. `npm run maggie:ci` is the strict CI entry point after
+bootstrap has been completed.
+
+API Pull lifecycle routes are server-only: use `/api/ops/pull/project-context`
+for sanitized project and CTA context, `/api/ops/pull/sync` for idempotent
+local storage, `/api/ops/pull/sync-updates` for rewrite/update delivery,
+`/api/ops/sitemap/matching-history` for readback, and
+`/api/ops/content-tracking/report-state` (or its bounded batch variant) only
+after local publication state is known. API keys are never accepted in request
+bodies.
+
+Run `POST /api/ops/seo/audit` to persist findings for canonical conflicts,
+redirect chains, orphan pages, pagination requirements, duplicate titles, thin
+content, missing authors/alt text, invalid JSON-LD, image performance, hreflang,
+FAQ quality, answer-first structure, entity completeness, metadata and
+publication-date integrity. Playbooks and runs are stored in
+`playbooks` and `playbook_runs` so agencies can attach repeatable migration,
+launch, refresh and audit workflows to a site.
+Run and advance a playbook through `/api/ops/playbooks/:id/run`; steps are
+confirmation-gated and completion requires declared validation gates.
+
+`/api/ops/seo/insights` exposes internal-link suggestions, topic coverage,
+FAQ quality, answer-first checks, refresh recommendations, entity profiles,
+entity graph relations, and crawler policy.
+`/api/ops/sitemap/diff` stores URL snapshots and returns added/removed URLs;
+`/api/ops/redirects?format=csv` exports redirect mappings; POSTing either JSON
+`{"items": [...]}` or `text/csv` imports them. `/api/ops/redirects/check` checks
+known targets.
+
+Report deliveries accept `daily`, `weekly`, `monthly`, or an ISO timestamp.
+Configure a platform cron to call `POST /api/ops/reports/deliver-due`; the
+default server-only email adapter is Resend (`EMAIL_PROVIDER=resend`). A
+Webhook adapter remains available for self-hosted mail gateways, and delivery
+state is persisted regardless of provider.
+
+Media uploads use the same provider boundary. The default is Cloudinary
+(`MEDIA_STORAGE_PROVIDER=cloudinary`) with signed server-side uploads; set it
+to `local` for development. Custom adapters can be registered in
+`src/lib/providers/` against the stable provider interface. `GET /api/ops/providers`
+returns capability and configuration status without returning credentials.

package/bundled-templates/astro-blog/starter/astro.config.mjs

@@ -0,0 +1,19 @@
+import { defineConfig } from "astro/config";
+import { loadEnv } from "vite";
+import node from "@astrojs/node";
+import cloudflare from "@astrojs/cloudflare";
+import tailwindcss from "@tailwindcss/vite";
+
+const env = loadEnv(process.env.NODE_ENV || "development", process.cwd(), "");
+const site = env.PUBLIC_SITE_URL?.trim();
+if (!site) throw new Error("PUBLIC_SITE_URL is required; copy .env.example and configure the canonical public site URL");
+try { new URL(site); } catch { throw new Error("PUBLIC_SITE_URL must be an absolute URL"); }
+const deploymentProvider = env.MAGGIE_DEPLOY_PROVIDER || "node";
+
+export default defineConfig({
+  output: "server",
+  adapter: deploymentProvider === "cloudflare" ? cloudflare() : node({ mode: "standalone" }),
+  site,
+  vite: { plugins: [tailwindcss()] },
+  security: { checkOrigin: true },
+});

package/bundled-templates/astro-blog/starter/db/schema.sql

@@ -0,0 +1,508 @@
+PRAGMA foreign_keys = ON;
+
+CREATE TABLE IF NOT EXISTS authors (
+  id TEXT PRIMARY KEY,
+  slug TEXT NOT NULL UNIQUE,
+  name TEXT NOT NULL,
+  job_title TEXT,
+  organisation TEXT,
+  bio TEXT,
+  profile_url TEXT,
+  credentials_json TEXT NOT NULL DEFAULT '[]',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS posts (
+  id TEXT PRIMARY KEY,
+  source TEXT NOT NULL CHECK (source IN ('local', 'api-pull', 'cms', 'manual')),
+  source_id TEXT,
+  slug TEXT NOT NULL UNIQUE,
+  title TEXT NOT NULL,
+  excerpt TEXT NOT NULL DEFAULT '',
+  content_markdown TEXT,
+  content_html TEXT,
+  canonical_url TEXT NOT NULL UNIQUE,
+  cover_image_url TEXT,
+  cover_image_alt TEXT NOT NULL DEFAULT '',
+  author_id TEXT NOT NULL REFERENCES authors(id),
+  language TEXT NOT NULL DEFAULT 'en',
+  status TEXT NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'review', 'approved', 'scheduled', 'published', 'archived')),
+  published_at TEXT,
+  updated_at TEXT,
+  created_at TEXT NOT NULL,
+  content_hash TEXT,
+  seo_title TEXT,
+  meta_description TEXT,
+  focus_keyword TEXT,
+  canonical_override TEXT,
+  robots_index TEXT NOT NULL DEFAULT 'index',
+  robots_follow TEXT NOT NULL DEFAULT 'follow',
+  og_image_url TEXT,
+  schema_type TEXT NOT NULL DEFAULT 'Article',
+  custom_metadata_json TEXT NOT NULL DEFAULT '{}',
+  scheduled_at TEXT,
+  checksum TEXT,
+  source_modified_at TEXT,
+  CHECK (status <> 'published' OR published_at IS NOT NULL)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS posts_source_identity ON posts (source, source_id) WHERE source_id IS NOT NULL;
+CREATE INDEX IF NOT EXISTS posts_public_order ON posts (status, published_at DESC, updated_at DESC);
+
+CREATE TABLE IF NOT EXISTS topics (
+  id TEXT PRIMARY KEY,
+  slug TEXT NOT NULL UNIQUE,
+  title TEXT NOT NULL,
+  description TEXT NOT NULL,
+  seo_title TEXT,
+  seo_description TEXT,
+  status TEXT NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'published', 'archived')),
+  minimum_published_posts INTEGER NOT NULL DEFAULT 3,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS post_topics (
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  topic_id TEXT NOT NULL REFERENCES topics(id) ON DELETE CASCADE,
+  PRIMARY KEY (post_id, topic_id)
+);
+
+CREATE TABLE IF NOT EXISTS faq_items (
+  id TEXT PRIMARY KEY,
+  question TEXT NOT NULL,
+  answer_markdown TEXT NOT NULL,
+  sort_order INTEGER NOT NULL DEFAULT 0,
+  status TEXT NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'published')),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS post_faqs (
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  faq_id TEXT NOT NULL REFERENCES faq_items(id) ON DELETE CASCADE,
+  PRIMARY KEY (post_id, faq_id)
+);
+CREATE TABLE IF NOT EXISTS topic_faqs (
+  topic_id TEXT NOT NULL REFERENCES topics(id) ON DELETE CASCADE,
+  faq_id TEXT NOT NULL REFERENCES faq_items(id) ON DELETE CASCADE,
+  PRIMARY KEY (topic_id, faq_id)
+);
+
+CREATE TABLE IF NOT EXISTS ctas (
+  id TEXT PRIMARY KEY,
+  label TEXT NOT NULL,
+  url TEXT NOT NULL,
+  placement TEXT NOT NULL,
+  tracking_key TEXT,
+  status TEXT NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'active', 'archived')),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS post_ctas (
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  cta_id TEXT NOT NULL REFERENCES ctas(id) ON DELETE CASCADE,
+  PRIMARY KEY (post_id, cta_id)
+);
+CREATE TABLE IF NOT EXISTS topic_ctas (
+  topic_id TEXT NOT NULL REFERENCES topics(id) ON DELETE CASCADE,
+  cta_id TEXT NOT NULL REFERENCES ctas(id) ON DELETE CASCADE,
+  PRIMARY KEY (topic_id, cta_id)
+);
+
+CREATE TABLE IF NOT EXISTS content_sync_state (
+  source TEXT PRIMARY KEY,
+  cursor TEXT,
+  etag TEXT,
+  last_success_at TEXT,
+  last_error TEXT,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS content_delivery_state (
+  post_id TEXT PRIMARY KEY REFERENCES posts(id) ON DELETE CASCADE,
+  remote_content_id TEXT,
+  remote_version TEXT,
+  delivery_status TEXT NOT NULL DEFAULT 'not_delivered',
+  last_reported_url TEXT,
+  last_reported_hash TEXT,
+  last_error TEXT,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS sitemap_sources (
+  id TEXT PRIMARY KEY,
+  url TEXT NOT NULL UNIQUE,
+  source_type TEXT NOT NULL CHECK (source_type IN ('manual', 'auto_detected')),
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'disabled')),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS sitemap_runs (
+  id TEXT PRIMARY KEY,
+  source_id TEXT REFERENCES sitemap_sources(id),
+  status TEXT NOT NULL CHECK (status IN ('queued', 'running', 'completed', 'failed')),
+  total_urls INTEGER NOT NULL DEFAULT 0,
+  matched_posts INTEGER NOT NULL DEFAULT 0,
+  eligible_posts INTEGER NOT NULL DEFAULT 0,
+  unmatched_urls INTEGER NOT NULL DEFAULT 0,
+  error TEXT,
+  started_at TEXT NOT NULL,
+  completed_at TEXT
+);
+CREATE TABLE IF NOT EXISTS blog_reports (
+  id TEXT PRIMARY KEY,
+  run_type TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('queued', 'running', 'completed', 'failed')),
+  summary_json TEXT NOT NULL DEFAULT '{}',
+  findings_json TEXT NOT NULL DEFAULT '[]',
+  started_at TEXT,
+  completed_at TEXT,
+  error TEXT
+);
+CREATE TABLE IF NOT EXISTS blog_settings (
+  key TEXT PRIMARY KEY,
+  value_json TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS audit_events (
+  id TEXT PRIMARY KEY,
+  actor_id TEXT NOT NULL,
+  action TEXT NOT NULL,
+  entity_type TEXT NOT NULL,
+  entity_id TEXT NOT NULL,
+  previous_state TEXT,
+  next_state TEXT,
+  reason TEXT,
+  correlation_id TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS wp_migrations (
+  id TEXT PRIMARY KEY,
+  source_url TEXT NOT NULL,
+  mode TEXT NOT NULL CHECK (mode IN ('preview', 'apply')),
+  status TEXT NOT NULL CHECK (status IN ('queued', 'running', 'completed', 'failed', 'cancelled')),
+  options_json TEXT NOT NULL DEFAULT '{}',
+  counts_json TEXT NOT NULL DEFAULT '{}',
+  error TEXT,
+  started_at TEXT NOT NULL,
+  completed_at TEXT,
+  checkpoint_json TEXT NOT NULL DEFAULT '{}',
+  source_checksum TEXT,
+  deleted_count INTEGER NOT NULL DEFAULT 0,
+  conflict_count INTEGER NOT NULL DEFAULT 0
+);
+CREATE TABLE IF NOT EXISTS wp_import_items (
+  id TEXT PRIMARY KEY,
+  migration_id TEXT NOT NULL REFERENCES wp_migrations(id) ON DELETE CASCADE,
+  entity_type TEXT NOT NULL CHECK (entity_type IN ('post', 'category', 'tag', 'author', 'media')),
+  source_id TEXT NOT NULL,
+  target_id TEXT,
+  action TEXT NOT NULL CHECK (action IN ('created', 'updated', 'skipped', 'failed')),
+  error TEXT,
+  created_at TEXT NOT NULL,
+  UNIQUE (migration_id, entity_type, source_id)
+);
+CREATE TABLE IF NOT EXISTS wp_terms (
+  id TEXT PRIMARY KEY,
+  taxonomy TEXT NOT NULL CHECK (taxonomy IN ('category', 'tag')),
+  source_id TEXT NOT NULL,
+  name TEXT NOT NULL,
+  slug TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  topic_id TEXT REFERENCES topics(id),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (taxonomy, source_id)
+);
+CREATE TABLE IF NOT EXISTS post_wp_terms (
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  term_id TEXT NOT NULL REFERENCES wp_terms(id) ON DELETE CASCADE,
+  PRIMARY KEY (post_id, term_id)
+);
+CREATE TABLE IF NOT EXISTS media_assets (
+  id TEXT PRIMARY KEY,
+  source TEXT NOT NULL,
+  source_id TEXT NOT NULL,
+  source_url TEXT NOT NULL,
+  local_url TEXT,
+  mime_type TEXT,
+  alt_text TEXT NOT NULL DEFAULT '',
+  caption TEXT NOT NULL DEFAULT '',
+  width INTEGER,
+  height INTEGER,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  optimized_formats_json TEXT NOT NULL DEFAULT '[]',
+  optimization_status TEXT NOT NULL DEFAULT 'pending',
+  storage_provider TEXT NOT NULL DEFAULT 'local',
+  storage_key TEXT,
+  delivery_url TEXT,
+  upload_status TEXT NOT NULL DEFAULT 'pending',
+  upload_error TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (source, source_id)
+);
+CREATE TABLE IF NOT EXISTS post_media (
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  media_id TEXT NOT NULL REFERENCES media_assets(id) ON DELETE CASCADE,
+  role TEXT NOT NULL CHECK (role IN ('featured', 'inline', 'gallery')),
+  sort_order INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (post_id, media_id, role)
+);
+CREATE TABLE IF NOT EXISTS redirects (
+  id TEXT PRIMARY KEY,
+  source_path TEXT NOT NULL UNIQUE,
+  target_path TEXT NOT NULL,
+  status_code INTEGER NOT NULL DEFAULT 301 CHECK (status_code IN (301, 308)),
+  reason TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS post_revisions (
+  id TEXT PRIMARY KEY,
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  version INTEGER NOT NULL,
+  snapshot_json TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  reason TEXT,
+  created_at TEXT NOT NULL,
+  UNIQUE(post_id, version)
+);
+CREATE TABLE IF NOT EXISTS content_calendar (
+  id TEXT PRIMARY KEY,
+  post_id TEXT NOT NULL UNIQUE REFERENCES posts(id) ON DELETE CASCADE,
+  scheduled_at TEXT NOT NULL,
+  campaign TEXT,
+  notes TEXT,
+  reminder_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS bulk_operations (
+  id TEXT PRIMARY KEY,
+  operation TEXT NOT NULL,
+  filter_json TEXT NOT NULL,
+  changes_json TEXT NOT NULL,
+  preview_json TEXT NOT NULL DEFAULT '{}',
+  status TEXT NOT NULL CHECK(status IN ('preview','queued','running','completed','failed','cancelled')),
+  actor_id TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  completed_at TEXT,
+  error TEXT
+);
+CREATE TABLE IF NOT EXISTS media_folders (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL UNIQUE,
+  created_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS media_folder_items (
+  media_id TEXT NOT NULL REFERENCES media_assets(id) ON DELETE CASCADE,
+  folder_id TEXT NOT NULL REFERENCES media_folders(id) ON DELETE CASCADE,
+  PRIMARY KEY(media_id, folder_id)
+);
+CREATE TABLE IF NOT EXISTS migration_sources (
+  id TEXT PRIMARY KEY,
+  kind TEXT NOT NULL CHECK(kind IN ('wordpress-rest','wxr','csv','json','sitemap','media-archive')),
+  location TEXT NOT NULL,
+  options_json TEXT NOT NULL DEFAULT '{}',
+  checksum TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS migration_conflicts (
+  id TEXT PRIMARY KEY,
+  migration_id TEXT NOT NULL REFERENCES wp_migrations(id) ON DELETE CASCADE,
+  source_id TEXT NOT NULL,
+  target_id TEXT,
+  resolution TEXT NOT NULL DEFAULT 'manual' CHECK(resolution IN ('source-wins','target-wins','manual')),
+  details_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  resolved_at TEXT
+);
+CREATE TABLE IF NOT EXISTS workspaces (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  slug TEXT NOT NULL UNIQUE,
+  logo_url TEXT,
+  brand_colors_json TEXT NOT NULL DEFAULT '{}',
+  custom_domain TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS clients (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  name TEXT NOT NULL,
+  email TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS sites (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  client_id TEXT REFERENCES clients(id) ON DELETE SET NULL,
+  name TEXT NOT NULL,
+  domain TEXT NOT NULL,
+  settings_json TEXT NOT NULL DEFAULT '{}',
+  credentials_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE(workspace_id, domain)
+);
+CREATE TABLE IF NOT EXISTS projects (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  site_id TEXT REFERENCES sites(id) ON DELETE SET NULL,
+  name TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active','paused','archived')),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS workspace_templates (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  name TEXT NOT NULL,
+  template_type TEXT NOT NULL,
+  content_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE(workspace_id,name)
+);
+CREATE TABLE IF NOT EXISTS workspace_members (
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  user_id TEXT NOT NULL,
+  role TEXT NOT NULL CHECK(role IN ('agency-owner','account-manager','seo-strategist','writer','editor','developer','client-reviewer','read-only-analyst')),
+  created_at TEXT NOT NULL,
+  PRIMARY KEY(workspace_id, user_id)
+);
+CREATE TABLE IF NOT EXISTS approval_links (
+  id TEXT PRIMARY KEY,
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL UNIQUE,
+  expires_at TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK(status IN ('pending','approved','changes_requested','expired')),
+  reviewer_name TEXT,
+  reviewer_email TEXT,
+  comment TEXT,
+  approved_at TEXT,
+  created_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS tasks (
+  id TEXT PRIMARY KEY,
+  title TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  status TEXT NOT NULL DEFAULT 'open' CHECK(status IN ('open','in_progress','blocked','done','cancelled')),
+  assignee_id TEXT,
+  due_at TEXT,
+  linked_type TEXT,
+  linked_id TEXT,
+  approval_status TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS task_comments (
+  id TEXT PRIMARY KEY,
+  task_id TEXT NOT NULL REFERENCES tasks(id) ON DELETE CASCADE,
+  author_id TEXT NOT NULL,
+  body TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS playbooks (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL UNIQUE,
+  description TEXT NOT NULL DEFAULT '',
+  steps_json TEXT NOT NULL,
+  gates_json TEXT NOT NULL DEFAULT '[]',
+  report_format TEXT NOT NULL DEFAULT 'json',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS playbook_runs (
+  id TEXT PRIMARY KEY,
+  playbook_id TEXT NOT NULL REFERENCES playbooks(id),
+  site_id TEXT REFERENCES sites(id),
+  status TEXT NOT NULL DEFAULT 'queued' CHECK(status IN ('queued','running','completed','failed')),
+  state_json TEXT NOT NULL DEFAULT '{}',
+  started_at TEXT,
+  completed_at TEXT,
+  error TEXT
+);
+CREATE TABLE IF NOT EXISTS seo_findings (
+  id TEXT PRIMARY KEY,
+  run_id TEXT NOT NULL REFERENCES blog_reports(id) ON DELETE CASCADE,
+  post_id TEXT REFERENCES posts(id) ON DELETE CASCADE,
+  category TEXT NOT NULL,
+  severity TEXT NOT NULL CHECK(severity IN ('info','warning','error')),
+  code TEXT NOT NULL,
+  message TEXT NOT NULL,
+  details_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS fact_review_reminders (
+  id TEXT PRIMARY KEY,
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  due_at TEXT NOT NULL,
+  reason TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK(status IN ('pending','completed','snoozed')),
+  completed_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE(post_id,status)
+);
+CREATE TABLE IF NOT EXISTS rewrite_queue_items (
+  id TEXT PRIMARY KEY,
+  post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
+  reason TEXT NOT NULL DEFAULT 'manual',
+  status TEXT NOT NULL DEFAULT 'queued' CHECK(status IN ('queued','processing','completed','failed','cancelled')),
+  priority INTEGER NOT NULL DEFAULT 0,
+  requested_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE(post_id, status)
+);
+CREATE TABLE IF NOT EXISTS not_found_logs (
+  path TEXT PRIMARY KEY,
+  hits INTEGER NOT NULL DEFAULT 1,
+  referrer TEXT,
+  first_seen_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS notifications (
+  id TEXT PRIMARY KEY,
+  user_id TEXT,
+  type TEXT NOT NULL,
+  entity_type TEXT,
+  entity_id TEXT,
+  message TEXT NOT NULL,
+  read_at TEXT,
+  created_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS approval_comments (
+  id TEXT PRIMARY KEY,
+  approval_link_id TEXT NOT NULL REFERENCES approval_links(id) ON DELETE CASCADE,
+  paragraph_key TEXT,
+  body TEXT NOT NULL,
+  author_name TEXT,
+  created_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS report_deliveries (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT REFERENCES workspaces(id) ON DELETE CASCADE,
+  report_type TEXT NOT NULL,
+  recipient TEXT NOT NULL,
+  format TEXT NOT NULL CHECK(format IN ('json','csv','html','pdf')),
+  schedule TEXT,
+  status TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active','paused','failed')),
+  last_sent_at TEXT,
+  last_error TEXT,
+  created_at TEXT NOT NULL
+);
+CREATE TABLE IF NOT EXISTS content_citations (id TEXT PRIMARY KEY, post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE, source_url TEXT NOT NULL, source_title TEXT, verified_at TEXT, created_at TEXT NOT NULL);
+CREATE TABLE IF NOT EXISTS query_page_map (id TEXT PRIMARY KEY, query TEXT NOT NULL, post_id TEXT REFERENCES posts(id) ON DELETE CASCADE, intent TEXT, priority INTEGER NOT NULL DEFAULT 0, created_at TEXT NOT NULL, UNIQUE(query, post_id));
+CREATE TABLE IF NOT EXISTS brand_mentions (id TEXT PRIMARY KEY, query TEXT NOT NULL, source_url TEXT NOT NULL, source_name TEXT, mentioned INTEGER NOT NULL DEFAULT 0, checked_at TEXT NOT NULL);
+CREATE TABLE IF NOT EXISTS entity_profiles (id TEXT PRIMARY KEY, entity_type TEXT NOT NULL, entity_key TEXT NOT NULL UNIQUE, name TEXT NOT NULL, same_as_json TEXT NOT NULL DEFAULT '[]', schema_json TEXT NOT NULL DEFAULT '{}', updated_at TEXT NOT NULL);
+CREATE TABLE IF NOT EXISTS entity_relations (subject_key TEXT NOT NULL REFERENCES entity_profiles(entity_key) ON DELETE CASCADE, predicate TEXT NOT NULL, object_key TEXT NOT NULL REFERENCES entity_profiles(entity_key) ON DELETE CASCADE, created_at TEXT NOT NULL, PRIMARY KEY(subject_key,predicate,object_key));
+CREATE TABLE IF NOT EXISTS indexability_checks (id TEXT PRIMARY KEY, url TEXT NOT NULL, status TEXT NOT NULL, robots TEXT, canonical TEXT, checked_at TEXT NOT NULL, details_json TEXT NOT NULL DEFAULT '{}');
+CREATE TABLE IF NOT EXISTS sitemap_snapshots (id TEXT PRIMARY KEY, source_url TEXT NOT NULL, urls_json TEXT NOT NULL, checksum TEXT NOT NULL, created_at TEXT NOT NULL);
+CREATE TABLE IF NOT EXISTS hreflang_links (post_id TEXT NOT NULL REFERENCES posts(id) ON DELETE CASCADE, language TEXT NOT NULL, url TEXT NOT NULL, PRIMARY KEY(post_id, language));
+CREATE TABLE IF NOT EXISTS core_web_vitals (id TEXT PRIMARY KEY, url TEXT NOT NULL, period_start TEXT NOT NULL, lcp REAL, inp REAL, cls REAL, source TEXT NOT NULL, created_at TEXT NOT NULL);
+CREATE INDEX IF NOT EXISTS tasks_due_idx ON tasks(status, due_at);
+CREATE INDEX IF NOT EXISTS post_revisions_idx ON post_revisions(post_id, version DESC);