create-prenta 1.3.0

package/assets/prisma/migrations/0002_media_usage_field_path/migration.sql

@@ -0,0 +1,11 @@
+-- Rename MediaUsage.fieldName -> fieldPath so the column matches cms-core's API
+-- layer, server actions, and `actuate doctor` schema expectations. The original
+-- 0001_init created the column as "fieldName"; this brings existing databases in
+-- line without data loss.
+ALTER TABLE "actuate_media_usages" RENAME COLUMN "fieldName" TO "fieldPath";
+
+-- Prisma derives the unique-index name from its columns, so recreate it under
+-- the fieldPath name (a bare column rename leaves the old index name in place).
+DROP INDEX "actuate_media_usages_mediaId_documentId_fieldName_key";
+
+CREATE UNIQUE INDEX "actuate_media_usages_mediaId_documentId_fieldPath_key" ON "actuate_media_usages"("mediaId", "documentId", "fieldPath");

package/assets/prisma/migrations/0003_ai_crawler_hits/migration.sql

@@ -0,0 +1,21 @@
+-- AI crawler activity panel: aggregated per-(bot, surface) hit counters for the
+-- llms.txt / llms-full.txt / per-page .md surfaces (plus an optional honeypot).
+-- Stored aggregated (one row per bot+surface, upserted on hit) so the table
+-- stays bounded and needs no periodic pruning.
+CREATE TABLE "actuate_ai_crawler_hits" (
+    "id" TEXT NOT NULL,
+    "bot" TEXT NOT NULL,
+    "surface" TEXT NOT NULL,
+    "category" TEXT NOT NULL DEFAULT 'other',
+    "hits" INTEGER NOT NULL DEFAULT 1,
+    "firstSeenAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastSeenAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "actuate_ai_crawler_hits_pkey" PRIMARY KEY ("id")
+);
+
+-- One aggregate row per bot token + surface.
+CREATE UNIQUE INDEX "actuate_ai_crawler_hits_bot_surface_key" ON "actuate_ai_crawler_hits"("bot", "surface");
+
+-- Supports "recently active" ordering in the admin panel.
+CREATE INDEX "actuate_ai_crawler_hits_lastSeenAt_idx" ON "actuate_ai_crawler_hits"("lastSeenAt");

package/assets/prisma/migrations/0004_drop_search_vector/migration.sql

@@ -0,0 +1,4 @@
+-- searchVector was never written by the application. Full-text search uses
+-- plainText + title via to_tsvector() and idx_actuate_documents_fts (see
+-- packages/cms-core/src/search/index.ts).
+ALTER TABLE "actuate_documents" DROP COLUMN IF EXISTS "searchVector";

package/assets/prisma/migrations/0005_script_tag_delivery_controls/migration.sql

@@ -0,0 +1,8 @@
+-- Design-parity delivery controls for script tags:
+--   loadAsync         — inject `async` into external <script src> tags at resolve time
+--   disableInPreview  — skip the tag when rendering inside CMS preview mode
+--   consentCategory   — cookie-consent gate (none | analytics | marketing | functional | preferences)
+ALTER TABLE "actuate_script_tags"
+  ADD COLUMN "loadAsync" BOOLEAN NOT NULL DEFAULT false,
+  ADD COLUMN "disableInPreview" BOOLEAN NOT NULL DEFAULT true,
+  ADD COLUMN "consentCategory" TEXT NOT NULL DEFAULT 'none';

package/assets/prisma/migrations/0006_totp_last_step/migration.sql

@@ -0,0 +1,4 @@
+-- Single-use TOTP: track the last consumed time-step so a still-valid code
+-- can't be replayed within its ~90s window (#565). Nullable with no default —
+-- additive and safe on existing rows (null = no TOTP step consumed yet).
+ALTER TABLE "actuate_users" ADD COLUMN "lastTotpStep" INTEGER;

package/assets/prisma/migrations/0007_workflow_fk_drop_dead_enums/migration.sql

@@ -0,0 +1,27 @@
+-- Schema hygiene.
+--
+-- #559 — WorkflowState.documentId gains a real foreign key to Document (it was
+--        @unique with no relation, so orphan rows and no cascade were possible).
+--        Purge any orphans first — the workflow feature is unbuilt, so the table
+--        is empty in practice — then add the cascade FK.
+--
+-- #558 — drop six enums that were materialized into every consumer database via
+--        CREATE TYPE but referenced by no model (pure schema/DB drift). IF EXISTS
+--        keeps re-runs safe; NO CASCADE means if a downstream consumer somehow
+--        reused one of these conveniently-named types, the DROP fails loudly
+--        rather than silently removing their dependent columns.
+
+DELETE FROM "actuate_workflow_states"
+WHERE "documentId" NOT IN (SELECT "id" FROM "actuate_documents");
+
+ALTER TABLE "actuate_workflow_states"
+  ADD CONSTRAINT "actuate_workflow_states_documentId_fkey"
+  FOREIGN KEY ("documentId") REFERENCES "actuate_documents"("id")
+  ON DELETE CASCADE ON UPDATE CASCADE;
+
+DROP TYPE IF EXISTS "AuditEvent";
+DROP TYPE IF EXISTS "NotificationType";
+DROP TYPE IF EXISTS "OrderStatus";
+DROP TYPE IF EXISTS "PaymentStatus";
+DROP TYPE IF EXISTS "DiscountType";
+DROP TYPE IF EXISTS "ProductType";

package/assets/prisma/migrations/0008_form_delivery_attempts/migration.sql

@@ -0,0 +1,29 @@
+-- Per-submission form notify/webhook/email delivery attempts (#675).
+CREATE TABLE "actuate_form_delivery_attempts" (
+    "id" TEXT NOT NULL,
+    "submissionId" TEXT NOT NULL,
+    "formId" TEXT NOT NULL,
+    "channel" TEXT NOT NULL,
+    "destination" TEXT NOT NULL,
+    "webhookId" TEXT,
+    "status" TEXT NOT NULL DEFAULT 'pending',
+    "attempts" INTEGER NOT NULL DEFAULT 0,
+    "maxAttempts" INTEGER NOT NULL DEFAULT 3,
+    "lastAttemptAt" TIMESTAMP(3),
+    "nextRetryAt" TIMESTAMP(3),
+    "error" TEXT,
+    "responseStatus" INTEGER,
+    "skippedReason" TEXT,
+    "payload" JSONB,
+    "alertedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "actuate_form_delivery_attempts_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX "actuate_form_delivery_attempts_formId_status_idx" ON "actuate_form_delivery_attempts"("formId", "status");
+CREATE INDEX "actuate_form_delivery_attempts_submissionId_idx" ON "actuate_form_delivery_attempts"("submissionId");
+CREATE INDEX "actuate_form_delivery_attempts_status_nextRetryAt_idx" ON "actuate_form_delivery_attempts"("status", "nextRetryAt");
+
+ALTER TABLE "actuate_form_delivery_attempts" ADD CONSTRAINT "actuate_form_delivery_attempts_submissionId_fkey" FOREIGN KEY ("submissionId") REFERENCES "actuate_form_submissions"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/assets/prisma/migrations/0009_webhook_secret_rotation/migration.sql

@@ -0,0 +1,6 @@
+-- AlterTable: grace-window previous secrets for webhook rotation (#679)
+ALTER TABLE "actuate_form_webhooks" ADD COLUMN IF NOT EXISTS "previousSecret" TEXT;
+ALTER TABLE "actuate_form_webhooks" ADD COLUMN IF NOT EXISTS "previousSecretValidUntil" TIMESTAMP(3);
+
+ALTER TABLE "actuate_webhook_endpoints" ADD COLUMN IF NOT EXISTS "previousSecret" TEXT;
+ALTER TABLE "actuate_webhook_endpoints" ADD COLUMN IF NOT EXISTS "previousSecretValidUntil" TIMESTAMP(3);

package/assets/prisma/migrations/0010_media_is_decorative/migration.sql

@@ -0,0 +1,3 @@
+-- Persist the decorative-image verdict so empty alt is scored as intentional
+-- WCAG treatment rather than missing-alt (#714).
+ALTER TABLE "actuate_media" ADD COLUMN "isDecorative" BOOLEAN NOT NULL DEFAULT false;

package/assets/prisma/migrations/0011_media_content_hash/migration.sql

@@ -0,0 +1,4 @@
+-- SHA-256 of final stored bytes for upload dedupe (#718).
+ALTER TABLE "actuate_media" ADD COLUMN "contentHash" TEXT;
+
+CREATE INDEX "actuate_media_contentHash_idx" ON "actuate_media"("contentHash");

package/assets/prisma/migrations/0012_rename_to_prenta/migration.sql

@@ -0,0 +1,89 @@
+-- Product rename: ActuateCMS -> Prenta.
+-- Renames every actuate_* table to prenta_*, then renames all actuate-prefixed
+-- constraints, indexes, and sequences so physical names keep matching what
+-- Prisma derives from the new @@map names (drift checks compare index names).
+-- Fresh installs run 0001-0011 (which create actuate_* tables) and then this
+-- rename; existing databases rename in place with no data movement.
+
+ALTER TABLE "actuate_users" RENAME TO "prenta_users";
+ALTER TABLE "actuate_oauth_accounts" RENAME TO "prenta_oauth_accounts";
+ALTER TABLE "actuate_sessions" RENAME TO "prenta_sessions";
+ALTER TABLE "actuate_api_keys" RENAME TO "prenta_api_keys";
+ALTER TABLE "actuate_audit_logs" RENAME TO "prenta_audit_logs";
+ALTER TABLE "actuate_folders" RENAME TO "prenta_folders";
+ALTER TABLE "actuate_documents" RENAME TO "prenta_documents";
+ALTER TABLE "actuate_versions" RENAME TO "prenta_versions";
+ALTER TABLE "actuate_media" RENAME TO "prenta_media";
+ALTER TABLE "actuate_media_usages" RENAME TO "prenta_media_usages";
+ALTER TABLE "actuate_content_locks" RENAME TO "prenta_content_locks";
+ALTER TABLE "actuate_notifications" RENAME TO "prenta_notifications";
+ALTER TABLE "actuate_content_templates" RENAME TO "prenta_content_templates";
+ALTER TABLE "actuate_sites" RENAME TO "prenta_sites";
+ALTER TABLE "actuate_workflow_states" RENAME TO "prenta_workflow_states";
+ALTER TABLE "actuate_redirects" RENAME TO "prenta_redirects";
+ALTER TABLE "actuate_seo_audit_runs" RENAME TO "prenta_seo_audit_runs";
+ALTER TABLE "actuate_seo_issues" RENAME TO "prenta_seo_issues";
+ALTER TABLE "actuate_redirect_404_hits" RENAME TO "prenta_redirect_404_hits";
+ALTER TABLE "actuate_ai_crawler_hits" RENAME TO "prenta_ai_crawler_hits";
+ALTER TABLE "actuate_redirect_suggestions" RENAME TO "prenta_redirect_suggestions";
+ALTER TABLE "actuate_form_schema_versions" RENAME TO "prenta_form_schema_versions";
+ALTER TABLE "actuate_form_submissions" RENAME TO "prenta_form_submissions";
+ALTER TABLE "actuate_form_submission_files" RENAME TO "prenta_form_submission_files";
+ALTER TABLE "actuate_form_webhooks" RENAME TO "prenta_form_webhooks";
+ALTER TABLE "actuate_form_delivery_attempts" RENAME TO "prenta_form_delivery_attempts";
+ALTER TABLE "actuate_backup_records" RENAME TO "prenta_backup_records";
+ALTER TABLE "actuate_webhook_endpoints" RENAME TO "prenta_webhook_endpoints";
+ALTER TABLE "actuate_webhook_deliveries" RENAME TO "prenta_webhook_deliveries";
+ALTER TABLE "actuate_password_reset_tokens" RENAME TO "prenta_password_reset_tokens";
+ALTER TABLE "actuate_invites" RENAME TO "prenta_invites";
+ALTER TABLE "actuate_script_tags" RENAME TO "prenta_script_tags";
+ALTER TABLE "actuate_page_templates" RENAME TO "prenta_page_templates";
+ALTER TABLE "actuate_saved_sections" RENAME TO "prenta_saved_sections";
+ALTER TABLE "actuate_api_request_metrics" RENAME TO "prenta_api_request_metrics";
+ALTER TABLE "actuate_content_issues" RENAME TO "prenta_content_issues";
+
+-- Table renames keep the old constraint/index/sequence names. Prisma compares
+-- physical names when diffing, so rename everything that carries the prefix.
+DO $$
+DECLARE r RECORD;
+BEGIN
+  -- Constraints first: renaming a constraint also renames its backing index
+  -- (primary keys, unique constraints, foreign keys).
+  FOR r IN
+    SELECT con.conname, con.conrelid::regclass AS tbl
+    FROM pg_constraint con
+    JOIN pg_class c ON c.oid = con.conrelid
+    JOIN pg_namespace n ON n.oid = c.relnamespace
+    WHERE n.nspname = 'public' AND con.conname LIKE '%actuate\_%'
+  LOOP
+    EXECUTE format(
+      'ALTER TABLE %s RENAME CONSTRAINT %I TO %I',
+      r.tbl, r.conname, replace(r.conname, 'actuate_', 'prenta_')
+    );
+  END LOOP;
+
+  -- Remaining indexes: plain @@index indexes and the raw-SQL FTS index
+  -- (idx_actuate_documents_fts -> idx_prenta_documents_fts).
+  FOR r IN
+    SELECT indexname FROM pg_indexes
+    WHERE schemaname = 'public' AND indexname LIKE '%actuate\_%'
+  LOOP
+    EXECUTE format(
+      'ALTER INDEX %I RENAME TO %I',
+      r.indexname, replace(r.indexname, 'actuate_', 'prenta_')
+    );
+  END LOOP;
+
+  -- Sequences behind autoincrement columns.
+  FOR r IN
+    SELECT c.relname
+    FROM pg_class c
+    JOIN pg_namespace n ON n.oid = c.relnamespace
+    WHERE n.nspname = 'public' AND c.relkind = 'S' AND c.relname LIKE '%actuate\_%'
+  LOOP
+    EXECUTE format(
+      'ALTER SEQUENCE %I RENAME TO %I',
+      r.relname, replace(r.relname, 'actuate_', 'prenta_')
+    );
+  END LOOP;
+END $$;

package/assets/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"