dineway 0.1.15 → 0.1.17

package/dist/{runner-DWZm2KQm.mjs → runner-lqEiJbO-.mjs}

@@ -1,12 +1,13 @@
 import { t as __exportAll } from "./chunk-ClPoSABd.mjs";
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
-import { a as isSqlite, n as currentTimestamp, r as currentTimestampValue, s as listTablesLike, t as binaryType } from "./dialect-helpers-DhTzaUxP.mjs";
+import { c as listTablesLike, i as currentTimestampValue, n as columnExists, o as isSqlite, r as currentTimestamp, t as binaryType } from "./dialect-helpers-TkdbkFad.mjs";
+import { n as getI18nConfig } from "./config-XW5tMrH8.mjs";
 import { Migrator, sql } from "kysely";
 
 //#region src/database/migrations/001_initial.ts
 var _001_initial_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$41,
-	up: () => up$41
+	down: () => down$43,
+	up: () => up$43
 });
 /**
 * Initial schema migration
@@ -15,7 +16,7 @@ var _001_initial_exports = /* @__PURE__ */ __exportAll({
 * by the SchemaRegistry when collections are added via the admin UI.
 * This migration only creates system tables.
 */
-async function up$41(db) {
+async function up$43(db) {
 	await db.schema.createTable("revisions").ifNotExists().addColumn("id", "text", (col) => col.primaryKey()).addColumn("collection", "text", (col) => col.notNull()).addColumn("entry_id", "text", (col) => col.notNull()).addColumn("data", "text", (col) => col.notNull()).addColumn("author_id", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_revisions_entry").ifNotExists().on("revisions").columns(["collection", "entry_id"]).execute();
 	await db.schema.createTable("taxonomies").ifNotExists().addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("slug", "text", (col) => col.notNull()).addColumn("label", "text", (col) => col.notNull()).addColumn("parent_id", "text").addColumn("data", "text").addUniqueConstraint("taxonomies_name_slug_unique", ["name", "slug"]).addForeignKeyConstraint("taxonomies_parent_fk", ["parent_id"], "taxonomies", ["id"], (cb) => cb.onDelete("set null")).execute();
@@ -35,7 +36,7 @@ async function up$41(db) {
 	await db.schema.createIndex("idx_audit_action").ifNotExists().on("audit_logs").column("action").execute();
 	await db.schema.createIndex("idx_audit_timestamp").ifNotExists().on("audit_logs").column("timestamp").execute();
 }
-async function down$41(db) {
+async function down$43(db) {
 	await db.schema.dropTable("audit_logs").execute();
 	await db.schema.dropTable("options").execute();
 	await db.schema.dropTable("users").execute();
@@ -48,26 +49,26 @@ async function down$41(db) {
 //#endregion
 //#region src/database/migrations/002_media_status.ts
 var _002_media_status_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$40,
-	up: () => up$40
+	down: () => down$42,
+	up: () => up$42
 });
 /**
 * Add status column to media table for tracking upload state.
 * Status values: 'pending' | 'ready' | 'failed'
 */
-async function up$40(db) {
+async function up$42(db) {
 	await db.schema.alterTable("media").addColumn("status", "text", (col) => col.notNull().defaultTo("ready")).execute();
 	await db.schema.createIndex("idx_media_status").on("media").column("status").execute();
 }
-async function down$40(db) {
+async function down$42(db) {
 	await db.schema.dropIndex("idx_media_status").execute();
 }
 
 //#endregion
 //#region src/database/migrations/003_schema_registry.ts
 var _003_schema_registry_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$39,
-	up: () => up$39
+	down: () => down$41,
+	up: () => up$41
 });
 /**
 * Migration: Schema Registry Tables
@@ -75,14 +76,14 @@ var _003_schema_registry_exports = /* @__PURE__ */ __exportAll({
 * Creates the schema registry tables that store collection and field definitions.
 * This enables dynamic schema management where the database is the source of truth.
 */
-async function up$39(db) {
+async function up$41(db) {
 	await db.schema.createTable("_dineway_collections").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("label_singular", "text").addColumn("description", "text").addColumn("icon", "text").addColumn("supports", "text").addColumn("source", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createTable("_dineway_fields").addColumn("id", "text", (col) => col.primaryKey()).addColumn("collection_id", "text", (col) => col.notNull()).addColumn("slug", "text", (col) => col.notNull()).addColumn("label", "text", (col) => col.notNull()).addColumn("type", "text", (col) => col.notNull()).addColumn("column_type", "text", (col) => col.notNull()).addColumn("required", "integer", (col) => col.defaultTo(0)).addColumn("unique", "integer", (col) => col.defaultTo(0)).addColumn("default_value", "text").addColumn("validation", "text").addColumn("widget", "text").addColumn("options", "text").addColumn("sort_order", "integer", (col) => col.defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("fields_collection_fk", ["collection_id"], "_dineway_collections", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_fields_collection_slug").on("_dineway_fields").columns(["collection_id", "slug"]).unique().execute();
 	await db.schema.createIndex("idx_fields_collection").on("_dineway_fields").column("collection_id").execute();
 	await db.schema.createIndex("idx_fields_sort").on("_dineway_fields").columns(["collection_id", "sort_order"]).execute();
 }
-async function down$39(db) {
+async function down$41(db) {
 	await db.schema.dropTable("_dineway_fields").execute();
 	await db.schema.dropTable("_dineway_collections").execute();
 }
@@ -90,8 +91,8 @@ async function down$39(db) {
 //#endregion
 //#region src/database/migrations/004_plugins.ts
 var _004_plugins_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$38,
-	up: () => up$38
+	down: () => down$40,
+	up: () => up$40
 });
 /**
 * Migration: Plugin System Tables
@@ -101,7 +102,7 @@ var _004_plugins_exports = /* @__PURE__ */ __exportAll({
 *
 * @see PLUGIN-SYSTEM.md § Plugin Storage
 */
-async function up$38(db) {
+async function up$40(db) {
 	await db.schema.createTable("_plugin_storage").addColumn("plugin_id", "text", (col) => col.notNull()).addColumn("collection", "text", (col) => col.notNull()).addColumn("id", "text", (col) => col.notNull()).addColumn("data", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addPrimaryKeyConstraint("pk_plugin_storage", [
 		"plugin_id",
 		"collection",
@@ -119,7 +120,7 @@ async function up$38(db) {
 		"index_name"
 	]).execute();
 }
-async function down$38(db) {
+async function down$40(db) {
 	await db.schema.dropTable("_plugin_indexes").execute();
 	await db.schema.dropTable("_plugin_state").execute();
 	await db.schema.dropTable("_plugin_storage").execute();
@@ -128,8 +129,8 @@ async function down$38(db) {
 //#endregion
 //#region src/database/migrations/005_menus.ts
 var _005_menus_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$37,
-	up: () => up$37
+	down: () => down$39,
+	up: () => up$39
 });
 /**
 * Navigation Menus migration
@@ -137,13 +138,13 @@ var _005_menus_exports = /* @__PURE__ */ __exportAll({
 * Creates tables for admin-editable navigation menus.
 * Menu items can reference content entries, taxonomy terms, or custom URLs.
 */
-async function up$37(db) {
+async function up$39(db) {
 	await db.schema.createTable("_dineway_menus").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createTable("_dineway_menu_items").addColumn("id", "text", (col) => col.primaryKey()).addColumn("menu_id", "text", (col) => col.notNull()).addColumn("parent_id", "text").addColumn("sort_order", "integer", (col) => col.notNull().defaultTo(0)).addColumn("type", "text", (col) => col.notNull()).addColumn("reference_collection", "text").addColumn("reference_id", "text").addColumn("custom_url", "text").addColumn("label", "text", (col) => col.notNull()).addColumn("title_attr", "text").addColumn("target", "text").addColumn("css_classes", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("menu_items_menu_fk", ["menu_id"], "_dineway_menus", ["id"], (cb) => cb.onDelete("cascade")).addForeignKeyConstraint("menu_items_parent_fk", ["parent_id"], "_dineway_menu_items", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_menu_items_menu").on("_dineway_menu_items").columns(["menu_id", "sort_order"]).execute();
 	await db.schema.createIndex("idx_menu_items_parent").on("_dineway_menu_items").column("parent_id").execute();
 }
-async function down$37(db) {
+async function down$39(db) {
 	await db.schema.dropTable("_dineway_menu_items").execute();
 	await db.schema.dropTable("_dineway_menus").execute();
 }
@@ -151,8 +152,8 @@ async function down$37(db) {
 //#endregion
 //#region src/database/migrations/006_taxonomy_defs.ts
 var _006_taxonomy_defs_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$36,
-	up: () => up$36
+	down: () => down$38,
+	up: () => up$38
 });
 /**
 * Taxonomy definitions migration
@@ -160,7 +161,7 @@ var _006_taxonomy_defs_exports = /* @__PURE__ */ __exportAll({
 * Adds _dineway_taxonomy_defs table to store taxonomy definitions (category, tag, custom)
 * and seeds default category and tag taxonomies.
 */
-async function up$36(db) {
+async function up$38(db) {
 	await db.schema.createTable("_dineway_taxonomy_defs").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("label_singular", "text").addColumn("hierarchical", "integer", (col) => col.defaultTo(0)).addColumn("collections", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.insertInto("_dineway_taxonomy_defs").values([{
 		id: "taxdef_category",
@@ -178,22 +179,22 @@ async function up$36(db) {
 		collections: JSON.stringify(["posts"])
 	}]).execute();
 }
-async function down$36(db) {
+async function down$38(db) {
 	await db.schema.dropTable("_dineway_taxonomy_defs").execute();
 }
 
 //#endregion
 //#region src/database/migrations/007_widgets.ts
 var _007_widgets_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$35,
-	up: () => up$35
+	down: () => down$37,
+	up: () => up$37
 });
-async function up$35(db) {
+async function up$37(db) {
 	await db.schema.createTable("_dineway_widget_areas").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("description", "text").addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createTable("_dineway_widgets").addColumn("id", "text", (col) => col.primaryKey()).addColumn("area_id", "text", (col) => col.notNull().references("_dineway_widget_areas.id").onDelete("cascade")).addColumn("sort_order", "integer", (col) => col.notNull().defaultTo(0)).addColumn("type", "text", (col) => col.notNull()).addColumn("title", "text").addColumn("content", "text").addColumn("menu_name", "text").addColumn("component_id", "text").addColumn("component_props", "text").addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createIndex("idx_widgets_area").on("_dineway_widgets").columns(["area_id", "sort_order"]).execute();
 }
-async function down$35(db) {
+async function down$37(db) {
 	await db.schema.dropTable("_dineway_widgets").execute();
 	await db.schema.dropTable("_dineway_widget_areas").execute();
 }
@@ -201,8 +202,8 @@ async function down$35(db) {
 //#endregion
 //#region src/database/migrations/008_auth.ts
 var _008_auth_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$34,
-	up: () => up$34
+	down: () => down$36,
+	up: () => up$36
 });
 /**
 * Auth migration - passkey-first authentication
@@ -216,7 +217,7 @@ var _008_auth_exports = /* @__PURE__ */ __exportAll({
 * - Creates oauth_accounts table (external provider links)
 * - Creates allowed_domains table (self-signup)
 */
-async function up$34(db) {
+async function up$36(db) {
 	await db.schema.createTable("users_new").addColumn("id", "text", (col) => col.primaryKey()).addColumn("email", "text", (col) => col.notNull().unique()).addColumn("name", "text").addColumn("avatar_url", "text").addColumn("role", "integer", (col) => col.notNull().defaultTo(10)).addColumn("email_verified", "integer", (col) => col.notNull().defaultTo(0)).addColumn("data", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await sql`
 		INSERT INTO users_new (id, email, name, role, data, created_at, updated_at)
@@ -239,7 +240,7 @@ async function up$34(db) {
 	await db.schema.dropTable("users").execute();
 	await sql`ALTER TABLE users_new RENAME TO users`.execute(db);
 	await db.schema.createIndex("idx_users_email").on("users").column("email").execute();
-	await db.schema.createTable("credentials").addColumn("id", "text", (col) => col.primaryKey()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("public_key", binaryType(db), (col) => col.notNull()).addColumn("counter", "integer", (col) => col.notNull().defaultTo(0)).addColumn("device_type", "text", (col) => col.notNull()).addColumn("backed_up", "integer", (col) => col.notNull().defaultTo(0)).addColumn("transports", "text").addColumn("name", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("last_used_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("credentials_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
+	await db.schema.createTable("credentials").addColumn("id", "text", (col) => col.primaryKey()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("public_key", binaryType(db), (col) => col.notNull()).addColumn("algorithm", "integer", (col) => col.notNull().defaultTo(-7)).addColumn("counter", "integer", (col) => col.notNull().defaultTo(0)).addColumn("device_type", "text", (col) => col.notNull()).addColumn("backed_up", "integer", (col) => col.notNull().defaultTo(0)).addColumn("transports", "text").addColumn("name", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("last_used_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("credentials_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_credentials_user").on("credentials").column("user_id").execute();
 	await db.schema.createTable("auth_tokens").addColumn("hash", "text", (col) => col.primaryKey()).addColumn("user_id", "text").addColumn("email", "text").addColumn("type", "text", (col) => col.notNull()).addColumn("role", "integer").addColumn("invited_by", "text").addColumn("expires_at", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("auth_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).addForeignKeyConstraint("auth_tokens_invited_by_fk", ["invited_by"], "users", ["id"], (cb) => cb.onDelete("set null")).execute();
 	await db.schema.createIndex("idx_auth_tokens_email").on("auth_tokens").column("email").execute();
@@ -249,7 +250,7 @@ async function up$34(db) {
 	await db.schema.createTable("auth_challenges").addColumn("challenge", "text", (col) => col.primaryKey()).addColumn("type", "text", (col) => col.notNull()).addColumn("user_id", "text").addColumn("data", "text").addColumn("expires_at", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_auth_challenges_expires").on("auth_challenges").column("expires_at").execute();
 }
-async function down$34(db) {
+async function down$36(db) {
 	await db.schema.dropTable("auth_challenges").execute();
 	await db.schema.dropTable("allowed_domains").execute();
 	await db.schema.dropTable("oauth_accounts").execute();
@@ -282,8 +283,8 @@ async function down$34(db) {
 //#endregion
 //#region src/database/migrations/009_user_disabled.ts
 var _009_user_disabled_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$33,
-	up: () => up$33
+	down: () => down$35,
+	up: () => up$35
 });
 /**
 * User disabled column - for soft-disabling users
@@ -292,19 +293,19 @@ var _009_user_disabled_exports = /* @__PURE__ */ __exportAll({
 * - Adds disabled column to users table (INTEGER, default 0)
 * - Disabled users cannot log in
 */
-async function up$33(db) {
+async function up$35(db) {
 	await sql`ALTER TABLE users ADD COLUMN disabled INTEGER NOT NULL DEFAULT 0`.execute(db);
 	await db.schema.createIndex("idx_users_disabled").on("users").column("disabled").execute();
 }
-async function down$33(db) {
+async function down$35(db) {
 	await db.schema.dropIndex("idx_users_disabled").execute();
 }
 
 //#endregion
 //#region src/database/migrations/011_sections.ts
 var _011_sections_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$32,
-	up: () => up$32
+	down: () => down$34,
+	up: () => up$34
 });
 /**
 * Migration: Add sections tables and performance indexes
@@ -313,13 +314,13 @@ var _011_sections_exports = /* @__PURE__ */ __exportAll({
 * They provide a library of pre-built page sections (heroes, CTAs, testimonials, etc.)
 * that content authors can browse and insert with a single click.
 */
-async function up$32(db) {
+async function up$34(db) {
 	await db.schema.createTable("_dineway_section_categories").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("sort_order", "integer", (col) => col.defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createTable("_dineway_sections").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("title", "text", (col) => col.notNull()).addColumn("description", "text").addColumn("category_id", "text", (col) => col.references("_dineway_section_categories.id").onDelete("set null")).addColumn("keywords", "text").addColumn("content", "text", (col) => col.notNull()).addColumn("preview_media_id", "text").addColumn("source", "text", (col) => col.notNull().defaultTo("user")).addColumn("theme_id", "text").addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).addColumn("updated_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createIndex("idx_sections_category").on("_dineway_sections").columns(["category_id"]).execute();
 	await db.schema.createIndex("idx_sections_source").on("_dineway_sections").columns(["source"]).execute();
 }
-async function down$32(db) {
+async function down$34(db) {
 	await db.schema.dropIndex("idx_sections_source").execute();
 	await db.schema.dropIndex("idx_sections_category").execute();
 	await db.schema.dropTable("_dineway_sections").execute();
@@ -329,8 +330,8 @@ async function down$32(db) {
 //#endregion
 //#region src/database/migrations/012_search.ts
 var _012_search_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$31,
-	up: () => up$31
+	down: () => down$33,
+	up: () => up$33
 });
 /**
 * Migration: Search Support
@@ -338,11 +339,11 @@ var _012_search_exports = /* @__PURE__ */ __exportAll({
 * Adds search configuration to collections and searchable flag to fields.
 * FTS5 tables are created dynamically when search is enabled for a collection.
 */
-async function up$31(db) {
+async function up$33(db) {
 	await db.schema.alterTable("_dineway_collections").addColumn("search_config", "text").execute();
 	await db.schema.alterTable("_dineway_fields").addColumn("searchable", "integer", (col) => col.defaultTo(0)).execute();
 }
-async function down$31(db) {
+async function down$33(db) {
 	await db.schema.alterTable("_dineway_fields").dropColumn("searchable").execute();
 	await db.schema.alterTable("_dineway_collections").dropColumn("search_config").execute();
 }
@@ -350,8 +351,8 @@ async function down$31(db) {
 //#endregion
 //#region src/database/migrations/013_scheduled_publishing.ts
 var _013_scheduled_publishing_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$30,
-	up: () => up$30
+	down: () => down$32,
+	up: () => up$32
 });
 /**
 * Migration: Add scheduled publishing support
@@ -360,7 +361,7 @@ var _013_scheduled_publishing_exports = /* @__PURE__ */ __exportAll({
 * When scheduled_at is set and status is 'scheduled', the content
 * will be auto-published when the scheduled time is reached.
 */
-async function up$30(db) {
+async function up$32(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -375,7 +376,7 @@ async function up$30(db) {
 		`.execute(db);
 	}
 }
-async function down$30(db) {
+async function down$32(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -392,10 +393,10 @@ async function down$30(db) {
 //#endregion
 //#region src/database/migrations/014_draft_revisions.ts
 var _014_draft_revisions_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$29,
-	up: () => up$29
+	down: () => down$31,
+	up: () => up$31
 });
-async function up$29(db) {
+async function up$31(db) {
 	const tables = await db.selectFrom("_dineway_collections").select("slug").execute();
 	for (const row of tables) {
 		const tableName = `ec_${row.slug}`;
@@ -417,7 +418,7 @@ async function up$29(db) {
 		`.execute(db);
 	}
 }
-async function down$29(db) {
+async function down$31(db) {
 	const tables = await db.selectFrom("_dineway_collections").select("slug").execute();
 	for (const row of tables) {
 		const tableName = `ec_${row.slug}`;
@@ -441,8 +442,8 @@ async function down$29(db) {
 //#endregion
 //#region src/database/migrations/015_indexes.ts
 var _015_indexes_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$28,
-	up: () => up$28
+	down: () => down$30,
+	up: () => up$30
 });
 /**
 * Add performance indexes for common query patterns.
@@ -455,7 +456,7 @@ var _015_indexes_exports = /* @__PURE__ */ __exportAll({
 * 5. Retroactive author_id + updated_at on existing ec_* content tables
 *    (new tables get these from createContentTable() in registry.ts)
 */
-async function up$28(db) {
+async function up$30(db) {
 	await db.schema.createIndex("idx_media_mime_type").on("media").column("mime_type").execute();
 	await db.schema.createIndex("idx_media_filename").on("media").column("filename").execute();
 	await db.schema.createIndex("idx_media_created_at").on("media").column("created_at").execute();
@@ -475,7 +476,7 @@ async function up$28(db) {
 		`.execute(db);
 	}
 }
-async function down$28(db) {
+async function down$30(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -493,8 +494,8 @@ async function down$28(db) {
 //#endregion
 //#region src/database/migrations/016_api_tokens.ts
 var _016_api_tokens_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$27,
-	up: () => up$27
+	down: () => down$29,
+	up: () => up$29
 });
 /**
 * API token tables for programmatic access.
@@ -503,27 +504,31 @@ var _016_api_tokens_exports = /* @__PURE__ */ __exportAll({
 * 1. _dineway_api_tokens — Personal Access Tokens (ec_pat_...)
 * 2. _dineway_oauth_tokens — OAuth access/refresh tokens (ec_oat_/ec_ort_...)
 * 3. _dineway_device_codes — OAuth Device Flow state (RFC 8628)
+*
+* Every CREATE is guarded so this migration can recover if a previous run
+* created only part of the schema before failing and never recorded the
+* migration as applied.
 */
-async function up$27(db) {
-	await db.schema.createTable("_dineway_api_tokens").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("prefix", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("expires_at", "text").addColumn("last_used_at", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("api_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
-	await db.schema.createIndex("idx_api_tokens_token_hash").on("_dineway_api_tokens").column("token_hash").execute();
-	await db.schema.createIndex("idx_api_tokens_user_id").on("_dineway_api_tokens").column("user_id").execute();
-	await db.schema.createTable("_dineway_oauth_tokens").addColumn("token_hash", "text", (col) => col.primaryKey()).addColumn("token_type", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("client_type", "text", (col) => col.notNull().defaultTo("cli")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("refresh_token_hash", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("oauth_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
-	await db.schema.createIndex("idx_oauth_tokens_user_id").on("_dineway_oauth_tokens").column("user_id").execute();
-	await db.schema.createIndex("idx_oauth_tokens_expires").on("_dineway_oauth_tokens").column("expires_at").execute();
-	await db.schema.createTable("_dineway_device_codes").addColumn("device_code", "text", (col) => col.primaryKey()).addColumn("user_code", "text", (col) => col.notNull().unique()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("user_id", "text").addColumn("status", "text", (col) => col.notNull().defaultTo("pending")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("interval", "integer", (col) => col.notNull().defaultTo(5)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
+async function up$29(db) {
+	await db.schema.createTable("_dineway_api_tokens").ifNotExists().addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("prefix", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("expires_at", "text").addColumn("last_used_at", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("api_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
+	await db.schema.createIndex("idx_api_tokens_token_hash").ifNotExists().on("_dineway_api_tokens").column("token_hash").execute();
+	await db.schema.createIndex("idx_api_tokens_user_id").ifNotExists().on("_dineway_api_tokens").column("user_id").execute();
+	await db.schema.createTable("_dineway_oauth_tokens").ifNotExists().addColumn("token_hash", "text", (col) => col.primaryKey()).addColumn("token_type", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("client_type", "text", (col) => col.notNull().defaultTo("cli")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("refresh_token_hash", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("oauth_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
+	await db.schema.createIndex("idx_oauth_tokens_user_id").ifNotExists().on("_dineway_oauth_tokens").column("user_id").execute();
+	await db.schema.createIndex("idx_oauth_tokens_expires").ifNotExists().on("_dineway_oauth_tokens").column("expires_at").execute();
+	await db.schema.createTable("_dineway_device_codes").ifNotExists().addColumn("device_code", "text", (col) => col.primaryKey()).addColumn("user_code", "text", (col) => col.notNull().unique()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("user_id", "text").addColumn("status", "text", (col) => col.notNull().defaultTo("pending")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("interval", "integer", (col) => col.notNull().defaultTo(5)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 }
-async function down$27(db) {
-	await db.schema.dropTable("_dineway_device_codes").execute();
-	await db.schema.dropTable("_dineway_oauth_tokens").execute();
-	await db.schema.dropTable("_dineway_api_tokens").execute();
+async function down$29(db) {
+	await db.schema.dropTable("_dineway_device_codes").ifExists().execute();
+	await db.schema.dropTable("_dineway_oauth_tokens").ifExists().execute();
+	await db.schema.dropTable("_dineway_api_tokens").ifExists().execute();
 }
 
 //#endregion
 //#region src/database/migrations/017_authorization_codes.ts
 var _017_authorization_codes_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$26,
-	up: () => up$26
+	down: () => down$28,
+	up: () => up$28
 });
 /**
 * Authorization codes for OAuth 2.1 Authorization Code + PKCE flow.
@@ -533,20 +538,20 @@ var _017_authorization_codes_exports = /* @__PURE__ */ __exportAll({
 *
 * Also adds client_id tracking to oauth_tokens for per-client revocation.
 */
-async function up$26(db) {
+async function up$28(db) {
 	await db.schema.createTable("_dineway_authorization_codes").addColumn("code_hash", "text", (col) => col.primaryKey()).addColumn("client_id", "text", (col) => col.notNull()).addColumn("redirect_uri", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("code_challenge", "text", (col) => col.notNull()).addColumn("code_challenge_method", "text", (col) => col.notNull().defaultTo("S256")).addColumn("resource", "text").addColumn("expires_at", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("auth_codes_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_auth_codes_expires").on("_dineway_authorization_codes").column("expires_at").execute();
 	await sql`ALTER TABLE _dineway_oauth_tokens ADD COLUMN client_id TEXT`.execute(db);
 }
-async function down$26(db) {
+async function down$28(db) {
 	await db.schema.dropTable("_dineway_authorization_codes").execute();
 }
 
 //#endregion
 //#region src/database/migrations/018_seo.ts
 var _018_seo_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$25,
-	up: () => up$25
+	down: () => down$27,
+	up: () => up$27
 });
 /**
 * Migration: SEO support
@@ -559,7 +564,7 @@ var _018_seo_exports = /* @__PURE__ */ __exportAll({
 * need it. The `has_seo` flag controls whether the admin shows SEO fields
 * and whether the collection's content appears in sitemaps.
 */
-async function up$25(db) {
+async function up$27(db) {
 	await db.schema.createTable("_dineway_seo").addColumn("collection", "text", (col) => col.notNull()).addColumn("content_id", "text", (col) => col.notNull()).addColumn("seo_title", "text").addColumn("seo_description", "text").addColumn("seo_image", "text").addColumn("seo_canonical", "text").addColumn("seo_no_index", "integer", (col) => col.notNull().defaultTo(0)).addColumn("created_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addPrimaryKeyConstraint("_dineway_seo_pk", ["collection", "content_id"]).execute();
 	await sql`
 		CREATE INDEX idx_dineway_seo_collection
@@ -570,7 +575,7 @@ async function up$25(db) {
 		ADD COLUMN has_seo INTEGER NOT NULL DEFAULT 0
 	`.execute(db);
 }
-async function down$25(db) {
+async function down$27(db) {
 	await sql`DROP TABLE IF EXISTS _dineway_seo`.execute(db);
 	await sql`
 		ALTER TABLE _dineway_collections
@@ -581,8 +586,8 @@ async function down$25(db) {
 //#endregion
 //#region src/database/migrations/019_i18n.ts
 var _019_i18n_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$24,
-	up: () => up$24
+	down: () => down$26,
+	up: () => up$26
 });
 /**
 * Quote an identifier for use in raw SQL. Escapes embedded double-quotes
@@ -695,7 +700,7 @@ async function upPostgres(db) {
 			ADD COLUMN translatable INTEGER NOT NULL DEFAULT 1
 		`.execute(db);
 }
-async function up$24(db) {
+async function up$26(db) {
 	if (!isSqlite(db)) return upPostgres(db);
 	const orphanedTmps = await listTablesLike(db, "ec_%_i18n_tmp");
 	for (const tmpName of orphanedTmps) {
@@ -812,7 +817,7 @@ async function downPostgres(db) {
 		await sql`ALTER TABLE ${sql.ref(t)} DROP COLUMN translation_group`.execute(db);
 	}
 }
-async function down$24(db) {
+async function down$26(db) {
 	if (!isSqlite(db)) return downPostgres(db);
 	await sql`
 		ALTER TABLE _dineway_fields
@@ -919,8 +924,8 @@ async function down$24(db) {
 //#endregion
 //#region src/database/migrations/020_collection_url_pattern.ts
 var _020_collection_url_pattern_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$23,
-	up: () => up$23
+	down: () => down$25,
+	up: () => up$25
 });
 /**
 * Migration: URL pattern for collections
@@ -929,13 +934,13 @@ var _020_collection_url_pattern_exports = /* @__PURE__ */ __exportAll({
 * can declare its own URL structure (e.g. "/{slug}" for pages, "/blog/{slug}"
 * for posts). Used for menu URL resolution, sitemaps, and path-based lookups.
 */
-async function up$23(db) {
+async function up$25(db) {
 	await sql`
 		ALTER TABLE _dineway_collections
 		ADD COLUMN url_pattern TEXT
 	`.execute(db);
 }
-async function down$23(db) {
+async function down$25(db) {
 	await sql`
 		ALTER TABLE _dineway_collections
 		DROP COLUMN url_pattern
@@ -945,8 +950,8 @@ async function down$23(db) {
 //#endregion
 //#region src/database/migrations/021_remove_section_categories.ts
 var _021_remove_section_categories_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$22,
-	up: () => up$22
+	down: () => down$24,
+	up: () => up$24
 });
 /**
 * Migration: Remove section categories
@@ -955,12 +960,12 @@ var _021_remove_section_categories_exports = /* @__PURE__ */ __exportAll({
 * Rather than building the missing UI for a feature with very little need at this stage,
 * we're removing the feature entirely.
 */
-async function up$22(db) {
+async function up$24(db) {
 	await db.schema.dropIndex("idx_sections_category").ifExists().execute();
 	await db.schema.alterTable("_dineway_sections").dropColumn("category_id").execute();
 	await db.schema.dropTable("_dineway_section_categories").execute();
 }
-async function down$22(db) {
+async function down$24(db) {
 	await db.schema.createTable("_dineway_section_categories").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("sort_order", "integer", (col) => col.defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.alterTable("_dineway_sections").addColumn("category_id", "text", (col) => col.references("_dineway_section_categories.id").onDelete("set null")).execute();
 	await db.schema.createIndex("idx_sections_category").on("_dineway_sections").columns(["category_id"]).execute();
@@ -969,8 +974,8 @@ async function down$22(db) {
 //#endregion
 //#region src/database/migrations/022_marketplace_plugin_state.ts
 var _022_marketplace_plugin_state_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$21,
-	up: () => up$21
+	down: () => down$23,
+	up: () => up$23
 });
 /**
 * Migration: Add marketplace fields to _plugin_state
@@ -979,7 +984,7 @@ var _022_marketplace_plugin_state_exports = /* @__PURE__ */ __exportAll({
 * whether a plugin was installed from config or marketplace,
 * and which marketplace version is installed.
 */
-async function up$21(db) {
+async function up$23(db) {
 	await sql`
 		ALTER TABLE _plugin_state
 		ADD COLUMN source TEXT NOT NULL DEFAULT 'config'
@@ -994,7 +999,7 @@ async function up$21(db) {
 		WHERE source = 'marketplace'
 	`.execute(db);
 }
-async function down$21(db) {
+async function down$23(db) {
 	await sql`
 		DROP INDEX IF EXISTS idx_plugin_state_source
 	`.execute(db);
@@ -1011,8 +1016,8 @@ async function down$21(db) {
 //#endregion
 //#region src/database/migrations/023_plugin_metadata.ts
 var _023_plugin_metadata_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$20,
-	up: () => up$20
+	down: () => down$22,
+	up: () => up$22
 });
 /**
 * Migration: Add display metadata to _plugin_state
@@ -1021,7 +1026,7 @@ var _023_plugin_metadata_exports = /* @__PURE__ */ __exportAll({
 * so the admin UI can show meaningful info without re-fetching
 * from the marketplace on every page load.
 */
-async function up$20(db) {
+async function up$22(db) {
 	await sql`
 		ALTER TABLE _plugin_state
 		ADD COLUMN display_name TEXT
@@ -1031,7 +1036,7 @@ async function up$20(db) {
 		ADD COLUMN description TEXT
 	`.execute(db);
 }
-async function down$20(db) {
+async function down$22(db) {
 	await sql`
 		ALTER TABLE _plugin_state
 		DROP COLUMN description
@@ -1045,8 +1050,8 @@ async function down$20(db) {
 //#endregion
 //#region src/database/migrations/024_media_placeholders.ts
 var _024_media_placeholders_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$19,
-	up: () => up$19
+	down: () => down$21,
+	up: () => up$21
 });
 /**
 * Migration: Add placeholder columns to media table
@@ -1054,7 +1059,7 @@ var _024_media_placeholders_exports = /* @__PURE__ */ __exportAll({
 * Stores blurhash and dominant_color for LQIP (Low Quality Image Placeholder)
 * support. Generated at upload time from image pixel data.
 */
-async function up$19(db) {
+async function up$21(db) {
 	await sql`
 		ALTER TABLE media
 		ADD COLUMN blurhash TEXT
@@ -1064,7 +1069,7 @@ async function up$19(db) {
 		ADD COLUMN dominant_color TEXT
 	`.execute(db);
 }
-async function down$19(db) {
+async function down$21(db) {
 	await sql`
 		ALTER TABLE media
 		DROP COLUMN dominant_color
@@ -1078,8 +1083,8 @@ async function down$19(db) {
 //#endregion
 //#region src/database/migrations/025_oauth_clients.ts
 var _025_oauth_clients_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$18,
-	up: () => up$18
+	down: () => down$20,
+	up: () => up$20
 });
 /**
 * Migration: Create OAuth clients table
@@ -1090,18 +1095,18 @@ var _025_oauth_clients_exports = /* @__PURE__ */ __exportAll({
 * Each client has a set of pre-registered redirect URIs (JSON array).
 * The authorize endpoint rejects any redirect_uri not in the client's list.
 */
-async function up$18(db) {
+async function up$20(db) {
 	await db.schema.createTable("_dineway_oauth_clients").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("redirect_uris", "text", (col) => col.notNull()).addColumn("scopes", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 }
-async function down$18(db) {
+async function down$20(db) {
 	await db.schema.dropTable("_dineway_oauth_clients").execute();
 }
 
 //#endregion
 //#region src/database/migrations/026_cron_tasks.ts
 var _026_cron_tasks_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$17,
-	up: () => up$17
+	down: () => down$19,
+	up: () => up$19
 });
 /**
 * Migration: Create cron tasks table for plugin scheduled tasks.
@@ -1112,7 +1117,7 @@ var _026_cron_tasks_exports = /* @__PURE__ */ __exportAll({
 * The `next_run_at` + `status` + `enabled` index drives the "find overdue
 * tasks" query used by CronExecutor.tick().
 */
-async function up$17(db) {
+async function up$19(db) {
 	await db.schema.createTable("_dineway_cron_tasks").addColumn("id", "text", (col) => col.primaryKey()).addColumn("plugin_id", "text", (col) => col.notNull()).addColumn("task_name", "text", (col) => col.notNull()).addColumn("schedule", "text", (col) => col.notNull()).addColumn("is_oneshot", "integer", (col) => col.notNull().defaultTo(0)).addColumn("data", "text").addColumn("next_run_at", "text", (col) => col.notNull()).addColumn("last_run_at", "text").addColumn("status", "text", (col) => col.notNull().defaultTo("idle")).addColumn("locked_at", "text").addColumn("enabled", "integer", (col) => col.notNull().defaultTo(1)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addUniqueConstraint("uq_cron_tasks_plugin_task", ["plugin_id", "task_name"]).execute();
 	await db.schema.createIndex("idx_cron_tasks_due").on("_dineway_cron_tasks").columns([
 		"enabled",
@@ -1121,17 +1126,17 @@ async function up$17(db) {
 	]).execute();
 	await db.schema.createIndex("idx_cron_tasks_plugin").on("_dineway_cron_tasks").column("plugin_id").execute();
 }
-async function down$17(db) {
+async function down$19(db) {
 	await db.schema.dropTable("_dineway_cron_tasks").execute();
 }
 
 //#endregion
 //#region src/database/migrations/027_comments.ts
 var _027_comments_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$16,
-	up: () => up$16
+	down: () => down$18,
+	up: () => up$18
 });
-async function up$16(db) {
+async function up$18(db) {
 	await db.schema.createTable("_dineway_comments").addColumn("id", "text", (col) => col.primaryKey()).addColumn("collection", "text", (col) => col.notNull()).addColumn("content_id", "text", (col) => col.notNull()).addColumn("parent_id", "text", (col) => col.references("_dineway_comments.id").onDelete("cascade")).addColumn("author_name", "text", (col) => col.notNull()).addColumn("author_email", "text", (col) => col.notNull()).addColumn("author_url", "text").addColumn("author_user_id", "text", (col) => col.references("users.id").onDelete("set null")).addColumn("body", "text", (col) => col.notNull()).addColumn("status", "text", (col) => col.notNull().defaultTo("pending")).addColumn("ip_hash", "text").addColumn("user_agent", "text").addColumn("moderation_metadata", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_comments_content").on("_dineway_comments").columns([
 		"collection",
@@ -1147,30 +1152,30 @@ async function up$16(db) {
 	await db.schema.alterTable("_dineway_collections").addColumn("comments_closed_after_days", "integer", (col) => col.defaultTo(90)).execute();
 	await db.schema.alterTable("_dineway_collections").addColumn("comments_auto_approve_users", "integer", (col) => col.defaultTo(1)).execute();
 }
-async function down$16(db) {
+async function down$18(db) {
 	await db.schema.dropTable("_dineway_comments").execute();
 }
 
 //#endregion
 //#region src/database/migrations/028_drop_author_url.ts
 var _028_drop_author_url_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$15,
-	up: () => up$15
+	down: () => down$17,
+	up: () => up$17
 });
-async function up$15(db) {
+async function up$17(db) {
 	await sql`ALTER TABLE _dineway_comments DROP COLUMN author_url`.execute(db);
 }
-async function down$15(db) {
+async function down$17(db) {
 	await db.schema.alterTable("_dineway_comments").addColumn("author_url", "text").execute();
 }
 
 //#endregion
 //#region src/database/migrations/029_redirects.ts
 var _029_redirects_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$14,
-	up: () => up$14
+	down: () => down$16,
+	up: () => up$16
 });
-async function up$14(db) {
+async function up$16(db) {
 	await db.schema.createTable("_dineway_redirects").addColumn("id", "text", (col) => col.primaryKey()).addColumn("source", "text", (col) => col.notNull()).addColumn("destination", "text", (col) => col.notNull()).addColumn("type", "integer", (col) => col.notNull().defaultTo(301)).addColumn("is_pattern", "integer", (col) => col.notNull().defaultTo(0)).addColumn("enabled", "integer", (col) => col.notNull().defaultTo(1)).addColumn("hits", "integer", (col) => col.notNull().defaultTo(0)).addColumn("last_hit_at", "text").addColumn("group_name", "text").addColumn("auto", "integer", (col) => col.notNull().defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_redirects_source").on("_dineway_redirects").column("source").execute();
 	await db.schema.createIndex("idx_redirects_enabled").on("_dineway_redirects").column("enabled").execute();
@@ -1179,7 +1184,7 @@ async function up$14(db) {
 	await db.schema.createIndex("idx_404_log_path").on("_dineway_404_log").column("path").execute();
 	await db.schema.createIndex("idx_404_log_created").on("_dineway_404_log").column("created_at").execute();
 }
-async function down$14(db) {
+async function down$16(db) {
 	await db.schema.dropTable("_dineway_404_log").execute();
 	await db.schema.dropTable("_dineway_redirects").execute();
 }
@@ -1187,8 +1192,8 @@ async function down$14(db) {
 //#endregion
 //#region src/database/migrations/030_widen_scheduled_index.ts
 var _030_widen_scheduled_index_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$13,
-	up: () => up$13
+	down: () => down$15,
+	up: () => up$15
 });
 /**
 * Migration: Widen scheduled publishing index
@@ -1197,7 +1202,7 @@ var _030_widen_scheduled_index_exports = /* @__PURE__ */ __exportAll({
 * Published posts can now have scheduled draft changes, so widen the
 * index to cover all rows where scheduled_at IS NOT NULL.
 */
-async function up$13(db) {
+async function up$15(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1211,7 +1216,7 @@ async function up$13(db) {
 		`.execute(db);
 	}
 }
-async function down$13(db) {
+async function down$15(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1229,10 +1234,10 @@ async function down$13(db) {
 //#endregion
 //#region src/database/migrations/031_bylines.ts
 var _031_bylines_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$12,
-	up: () => up$12
+	down: () => down$14,
+	up: () => up$14
 });
-async function up$12(db) {
+async function up$14(db) {
 	await db.schema.createTable("_dineway_bylines").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("display_name", "text", (col) => col.notNull()).addColumn("bio", "text").addColumn("avatar_media_id", "text", (col) => col.references("media.id").onDelete("set null")).addColumn("website_url", "text").addColumn("user_id", "text", (col) => col.references("users.id").onDelete("set null")).addColumn("is_guest", "integer", (col) => col.notNull().defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await sql`
 		CREATE UNIQUE INDEX ${sql.ref("idx_bylines_user_id_unique")}
@@ -1264,7 +1269,7 @@ async function up$12(db) {
 		`.execute(db);
 	}
 }
-async function down$12(db) {
+async function down$14(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		await sql`
@@ -1282,8 +1287,8 @@ async function down$12(db) {
 //#endregion
 //#region src/database/migrations/032_rate_limits.ts
 var _032_rate_limits_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$11,
-	up: () => up$11
+	down: () => down$13,
+	up: () => up$13
 });
 /**
 * Migration: Rate limits table + device code polling tracking.
@@ -1294,12 +1299,12 @@ var _032_rate_limits_exports = /* @__PURE__ */ __exportAll({
 * 2. Add last_polled_at column to _dineway_device_codes for
 *    RFC 8628 slow_down enforcement.
 */
-async function up$11(db) {
+async function up$13(db) {
 	await db.schema.createTable("_dineway_rate_limits").addColumn("key", "text", (col) => col.notNull()).addColumn("window", "text", (col) => col.notNull()).addColumn("count", "integer", (col) => col.notNull().defaultTo(1)).addPrimaryKeyConstraint("pk_rate_limits", ["key", "window"]).execute();
 	await db.schema.createIndex("idx_rate_limits_window").on("_dineway_rate_limits").column("window").execute();
 	await db.schema.alterTable("_dineway_device_codes").addColumn("last_polled_at", "text").execute();
 }
-async function down$11(db) {
+async function down$13(db) {
 	await db.schema.dropTable("_dineway_rate_limits").execute();
 	await db.schema.alterTable("_dineway_device_codes").dropColumn("last_polled_at").execute();
 }
@@ -1307,8 +1312,8 @@ async function down$11(db) {
 //#endregion
 //#region src/database/migrations/033_optimize_content_indexes.ts
 var _033_optimize_content_indexes_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$10,
-	up: () => up$10
+	down: () => down$12,
+	up: () => up$12
 });
 /**
 * Migration: Optimize content table indexes for SQLite-compatible performance
@@ -1321,7 +1326,7 @@ var _033_optimize_content_indexes_exports = /* @__PURE__ */ __exportAll({
 *
 * Impact: Reduces row reads by 90%+ for admin panel operations on SQLite-compatible adapters.
 */
-async function up$10(db) {
+async function up$12(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1363,7 +1368,7 @@ async function up$10(db) {
 		WHERE status = 'trash'
 	`.execute(db);
 }
-async function down$10(db) {
+async function down$12(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1396,10 +1401,10 @@ async function down$10(db) {
 //#endregion
 //#region src/database/migrations/034_published_at_index.ts
 var _034_published_at_index_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$9,
-	up: () => up$9
+	down: () => down$11,
+	up: () => up$11
 });
-async function up$9(db) {
+async function up$11(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1409,7 +1414,7 @@ async function up$9(db) {
 		`.execute(db);
 	}
 }
-async function down$9(db) {
+async function down$11(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1420,15 +1425,15 @@ async function down$9(db) {
 //#endregion
 //#region src/database/migrations/035_backfill_url_patterns.ts
 var _035_backfill_url_patterns_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$8,
-	up: () => up$8
+	down: () => down$10,
+	up: () => up$10
 });
 /**
 * Backfill default URL patterns for the built-in posts and pages collections.
 *
 * Existing rows keep custom patterns; only missing defaults are filled.
 */
-async function up$8(db) {
+async function up$10(db) {
 	await sql`
 		UPDATE _dineway_collections
 		SET url_pattern = '/posts/{slug}'
@@ -1440,7 +1445,7 @@ async function up$8(db) {
 		WHERE slug = 'pages' AND url_pattern IS NULL
 	`.execute(db);
 }
-async function down$8(db) {
+async function down$10(db) {
 	await sql`
 		UPDATE _dineway_collections
 		SET url_pattern = NULL
@@ -1456,8 +1461,8 @@ async function down$8(db) {
 //#endregion
 //#region src/database/migrations/036_activity_log.ts
 var _036_activity_log_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$7,
-	up: () => up$7
+	down: () => down$9,
+	up: () => up$9
 });
 /**
 * Site Context Engine activity foundation.
@@ -1466,7 +1471,7 @@ var _036_activity_log_exports = /* @__PURE__ */ __exportAll({
 * not a request log. Actor IDs intentionally have no foreign key because the
 * actor source can be users, API tokens, or a stable system actor.
 */
-async function up$7(db) {
+async function up$9(db) {
 	await db.schema.createTable("_dineway_activity_log").addColumn("id", "text", (col) => col.primaryKey()).addColumn("actor_type", "text", (col) => col.notNull().check(sql`actor_type in ('user', 'api_token', 'system')`)).addColumn("actor_id", "text", (col) => col.notNull()).addColumn("auth_metadata", "text").addColumn("action_type", "text", (col) => col.notNull()).addColumn("subject_type", "text", (col) => col.notNull()).addColumn("subject_id", "text").addColumn("related_subject_type", "text").addColumn("related_subject_id", "text").addColumn("source_type", "text", (col) => col.check(sql`source_type is null or source_type in ('api_route', 'mcp_tool', 'system', 'plugin', 'unknown')`)).addColumn("source_name", "text").addColumn("result_status", "text", (col) => col.notNull().defaultTo("succeeded").check(sql`result_status in ('succeeded', 'pending', 'failed', 'blocked')`)).addColumn("scope", "text", (col) => col.notNull()).addColumn("summary", "text", (col) => col.notNull()).addColumn("detail", "text").addColumn("created_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_dineway_activity_actor").on("_dineway_activity_log").columns([
 		"actor_type",
@@ -1493,15 +1498,15 @@ async function up$7(db) {
 	await db.schema.createIndex("idx_dineway_activity_result_status").on("_dineway_activity_log").columns(["result_status", "created_at"]).execute();
 	await db.schema.createIndex("idx_dineway_activity_created_at").on("_dineway_activity_log").column("created_at").execute();
 }
-async function down$7(db) {
+async function down$9(db) {
 	await db.schema.dropTable("_dineway_activity_log").execute();
 }
 
 //#endregion
 //#region src/database/migrations/037_context_entries.ts
 var _037_context_entries_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$6,
-	up: () => up$6
+	down: () => down$8,
+	up: () => up$8
 });
 const CONTEXT_TYPE_SQL = [
 	"brand_voice",
@@ -1526,7 +1531,7 @@ const CONTEXT_TYPE_SQL = [
 * marking old entries non-current and linking replacements through
 * `supersedes_id`.
 */
-async function up$6(db) {
+async function up$8(db) {
 	await db.schema.createTable("_dineway_context_entries").addColumn("id", "text", (col) => col.primaryKey()).addColumn("scope", "text", (col) => col.notNull()).addColumn("context_type", "text", (col) => col.notNull().check(sql`context_type in (${sql.raw(CONTEXT_TYPE_SQL)})`)).addColumn("title", "text", (col) => col.notNull()).addColumn("body", "text", (col) => col.notNull()).addColumn("policy_key", "text").addColumn("source_activity_id", "text").addColumn("created_by_actor_type", "text", (col) => col.notNull().check(sql`created_by_actor_type in ('user', 'api_token', 'system')`)).addColumn("created_by_actor_id", "text", (col) => col.notNull()).addColumn("created_auth_metadata", "text").addColumn("supersedes_id", "text").addColumn("version", "integer", (col) => col.notNull().defaultTo(1)).addColumn("is_current", "integer", (col) => col.notNull().defaultTo(1).check(sql`is_current in (0, 1)`)).addColumn("valid_until", "text").addColumn("reviewed_at", "text").addColumn("reviewed_by_actor_type", "text", (col) => col.check(sql`reviewed_by_actor_type is null or reviewed_by_actor_type in ('user', 'api_token', 'system')`)).addColumn("reviewed_by_actor_id", "text").addColumn("review_note", "text").addColumn("created_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addForeignKeyConstraint("fk_dineway_context_source_activity", ["source_activity_id"], "_dineway_activity_log", ["id"], (cb) => cb.onDelete("set null")).addForeignKeyConstraint("fk_dineway_context_supersedes", ["supersedes_id"], "_dineway_context_entries", ["id"], (cb) => cb.onDelete("set null")).execute();
 	await db.schema.createTable("_dineway_context_tags").addColumn("context_entry_id", "text", (col) => col.notNull()).addColumn("tag", "text", (col) => col.notNull()).addPrimaryKeyConstraint("pk_dineway_context_tags", ["context_entry_id", "tag"]).addForeignKeyConstraint("fk_dineway_context_tags_entry", ["context_entry_id"], "_dineway_context_entries", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_dineway_context_scope_current").on("_dineway_context_entries").columns([
@@ -1551,7 +1556,7 @@ async function up$6(db) {
 	await db.schema.createIndex("idx_dineway_context_created_at").on("_dineway_context_entries").column("created_at").execute();
 	await db.schema.createIndex("idx_dineway_context_tags_tag").on("_dineway_context_tags").columns(["tag", "context_entry_id"]).execute();
 }
-async function down$6(db) {
+async function down$8(db) {
 	await db.schema.dropTable("_dineway_context_tags").execute();
 	await db.schema.dropTable("_dineway_context_entries").execute();
 }
@@ -1559,8 +1564,8 @@ async function down$6(db) {
 //#endregion
 //#region src/database/migrations/038_review_requests.ts
 var _038_review_requests_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$5,
-	up: () => up$5
+	down: () => down$7,
+	up: () => up$7
 });
 /**
 * Lightweight content review requests for Phase 5a.
@@ -1568,7 +1573,7 @@ var _038_review_requests_exports = /* @__PURE__ */ __exportAll({
 * Review requests bind human approval to immutable content revision/action
 * identifiers so an approval cannot be reused after the draft or action changes.
 */
-async function up$5(db) {
+async function up$7(db) {
 	await db.schema.createTable("_dineway_review_requests").addColumn("id", "text", (col) => col.primaryKey()).addColumn("status", "text", (col) => col.notNull().defaultTo("pending").check(sql`status in ('pending', 'approved', 'rejected')`)).addColumn("collection", "text", (col) => col.notNull()).addColumn("entry_id", "text", (col) => col.notNull()).addColumn("scope", "text", (col) => col.notNull()).addColumn("live_revision_id", "text").addColumn("draft_revision_id", "text").addColumn("reviewed_rev", "text", (col) => col.notNull()).addColumn("action_type", "text", (col) => col.notNull()).addColumn("action_hash", "text", (col) => col.notNull()).addColumn("risk_reason", "text").addColumn("review_payload", "text", (col) => col.notNull()).addColumn("requested_by_actor_type", "text", (col) => col.notNull().check(sql`requested_by_actor_type in ('user', 'api_token', 'system')`)).addColumn("requested_by_actor_id", "text", (col) => col.notNull()).addColumn("requested_auth_metadata", "text").addColumn("resolved_by_actor_type", "text", (col) => col.check(sql`resolved_by_actor_type is null or resolved_by_actor_type in ('user', 'api_token', 'system')`)).addColumn("resolved_by_actor_id", "text").addColumn("resolved_auth_metadata", "text").addColumn("review_note", "text").addColumn("created_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addColumn("resolved_at", "text").execute();
 	await db.schema.createIndex("idx_dineway_review_status_created").on("_dineway_review_requests").columns(["status", "created_at"]).execute();
 	await db.schema.createIndex("idx_dineway_review_target").on("_dineway_review_requests").columns([
@@ -1589,15 +1594,15 @@ async function up$5(db) {
 	]).execute();
 	await db.schema.createIndex("idx_dineway_review_resolved_at").on("_dineway_review_requests").column("resolved_at").execute();
 }
-async function down$5(db) {
+async function down$7(db) {
 	await db.schema.dropTable("_dineway_review_requests").execute();
 }
 
 //#endregion
 //#region src/database/migrations/039_entity_aliases.ts
 var _039_entity_aliases_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$4,
-	up: () => up$4
+	down: () => down$6,
+	up: () => up$6
 });
 const ENTITY_ALIAS_TYPES = [
 	"content",
@@ -1612,7 +1617,7 @@ const ENTITY_ALIAS_TYPES = [
 * This replaces CRMy's PostgreSQL-specific alias arrays with a normalized
 * mapping table that works across SQLite/libSQL and PostgreSQL.
 */
-async function up$4(db) {
+async function up$6(db) {
 	const entityTypesSql = sql.join(ENTITY_ALIAS_TYPES.map((value) => sql.lit(value)), sql`, `);
 	await db.schema.createTable("_dineway_entity_aliases").addColumn("id", "text", (col) => col.primaryKey()).addColumn("entity_type", "text", (col) => col.notNull().check(sql`entity_type in (${entityTypesSql})`)).addColumn("collection_slug", "text").addColumn("entity_id", "text", (col) => col.notNull()).addColumn("alias", "text", (col) => col.notNull()).addColumn("normalized_alias", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_dineway_entity_alias_lookup").on("_dineway_entity_aliases").columns(["entity_type", "normalized_alias"]).execute();
@@ -1629,15 +1634,15 @@ async function up$4(db) {
 		"normalized_alias"
 	]).unique().execute();
 }
-async function down$4(db) {
+async function down$6(db) {
 	await db.schema.dropTable("_dineway_entity_aliases").execute();
 }
 
 //#endregion
 //#region src/database/migrations/040_handoff_snapshots.ts
 var _040_handoff_snapshots_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$3,
-	up: () => up$3
+	down: () => down$5,
+	up: () => up$5
 });
 const ACTOR_TYPES$2 = [
 	"user",
@@ -1650,7 +1655,7 @@ const HANDOFF_KINDS = [
 	"assignment"
 ];
 const REFERENCE_TYPES = ["review_request", "assignment"];
-async function up$3(db) {
+async function up$5(db) {
 	const actorTypesSql = sql.join(ACTOR_TYPES$2.map((value) => sql.lit(value)), sql`, `);
 	const handoffKindsSql = sql.join(HANDOFF_KINDS.map((value) => sql.lit(value)), sql`, `);
 	const referenceTypesSql = sql.join(REFERENCE_TYPES.map((value) => sql.lit(value)), sql`, `);
@@ -1664,15 +1669,15 @@ async function up$3(db) {
 	await db.schema.createIndex("idx_dineway_handoff_kind_created").on("_dineway_handoff_snapshots").columns(["handoff_kind", "created_at"]).execute();
 	await db.schema.createIndex("idx_dineway_handoff_reference").on("_dineway_handoff_snapshots").columns(["reference_type", "reference_id"]).execute();
 }
-async function down$3(db) {
+async function down$5(db) {
 	await db.schema.dropTable("_dineway_handoff_snapshots").execute();
 }
 
 //#endregion
 //#region src/database/migrations/041_assignments.ts
 var _041_assignments_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$2,
-	up: () => up$2
+	down: () => down$4,
+	up: () => up$4
 });
 const ACTOR_TYPES$1 = [
 	"user",
@@ -1694,7 +1699,7 @@ const ASSIGNMENT_PRIORITIES = [
 	"high",
 	"urgent"
 ];
-async function up$2(db) {
+async function up$4(db) {
 	const actorTypesSql = sql.join(ACTOR_TYPES$1.map((value) => sql.lit(value)), sql`, `);
 	const statusesSql = sql.join(ASSIGNMENT_STATUSES.map((value) => sql.lit(value)), sql`, `);
 	const prioritiesSql = sql.join(ASSIGNMENT_PRIORITIES.map((value) => sql.lit(value)), sql`, `);
@@ -1726,15 +1731,15 @@ async function up$2(db) {
 	await db.schema.createIndex("idx_dineway_assignment_due_at").on("_dineway_assignments").column("due_at").execute();
 	await db.schema.createIndex("idx_dineway_assignment_handoff").on("_dineway_assignments").column("related_handoff_snapshot_id").execute();
 }
-async function down$2(db) {
+async function down$4(db) {
 	await db.schema.dropTable("_dineway_assignments").execute();
 }
 
 //#endregion
 //#region src/database/migrations/042_hitl_requests.ts
 var _042_hitl_requests_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$1,
-	up: () => up$1
+	down: () => down$3,
+	up: () => up$3
 });
 const ACTOR_TYPES = [
 	"user",
@@ -1752,7 +1757,7 @@ const HITL_PRIORITIES = [
 	"high",
 	"urgent"
 ];
-async function up$1(db) {
+async function up$3(db) {
 	const actorTypesSql = sql.join(ACTOR_TYPES.map((value) => sql.lit(value)), sql`, `);
 	const statusesSql = sql.join(HITL_STATUSES.map((value) => sql.lit(value)), sql`, `);
 	const prioritiesSql = sql.join(HITL_PRIORITIES.map((value) => sql.lit(value)), sql`, `);
@@ -1787,7 +1792,7 @@ async function up$1(db) {
 	await db.schema.createIndex("idx_dineway_hitl_sla_due_at").on("_dineway_hitl_requests").column("sla_due_at").execute();
 	await db.schema.createIndex("idx_dineway_assignment_hitl").on("_dineway_assignments").column("related_hitl_request_id").execute();
 }
-async function down$1(db) {
+async function down$3(db) {
 	await db.schema.dropIndex("idx_dineway_assignment_hitl").execute();
 	await db.schema.alterTable("_dineway_assignments").dropColumn("related_hitl_request_id").execute();
 	await db.schema.dropTable("_dineway_hitl_requests").execute();
@@ -1796,8 +1801,8 @@ async function down$1(db) {
 //#endregion
 //#region src/database/migrations/043_bounded_404_log.ts
 var _043_bounded_404_log_exports = /* @__PURE__ */ __exportAll({
-	down: () => down,
-	up: () => up
+	down: () => down$2,
+	up: () => up$2
 });
 /**
 * Migration: Bounded 404 logging
@@ -1806,7 +1811,7 @@ var _043_bounded_404_log_exports = /* @__PURE__ */ __exportAll({
 * Previously every 404 inserted a new row, so a requester could grow the
 * table without bound by hitting unique URLs.
 */
-async function up(db) {
+async function up$2(db) {
 	await db.schema.alterTable("_dineway_404_log").addColumn("hits", "integer", (col) => col.notNull().defaultTo(1)).execute();
 	await db.schema.alterTable("_dineway_404_log").addColumn("last_seen_at", "text").execute();
 	await sql`
@@ -1852,7 +1857,7 @@ async function up(db) {
 	await db.schema.dropIndex("idx_404_log_path").execute();
 	await db.schema.createIndex("idx_404_log_last_seen").on("_dineway_404_log").column("last_seen_at").execute();
 }
-async function down(db) {
+async function down$2(db) {
 	await db.schema.dropIndex("idx_404_log_last_seen").execute();
 	await db.schema.dropIndex("idx_404_log_path_unique").execute();
 	await db.schema.createIndex("idx_404_log_path").on("_dineway_404_log").column("path").execute();
@@ -1860,6 +1865,314 @@ async function down(db) {
 	await db.schema.alterTable("_dineway_404_log").dropColumn("hits").execute();
 }
 
+//#endregion
+//#region src/database/migrations/044_credential_algorithm.ts
+var _044_credential_algorithm_exports = /* @__PURE__ */ __exportAll({
+	down: () => down$1,
+	up: () => up$1
+});
+async function up$1(db) {
+	if (!await columnExists(db, "credentials", "algorithm")) await db.schema.alterTable("credentials").addColumn("algorithm", "integer", (col) => col.notNull().defaultTo(-7)).execute();
+}
+async function down$1(db) {
+	if (await columnExists(db, "credentials", "algorithm")) await db.schema.alterTable("credentials").dropColumn("algorithm").execute();
+}
+
+//#endregion
+//#region src/database/migrations/045_i18n_menus_and_taxonomies.ts
+var _045_i18n_menus_and_taxonomies_exports = /* @__PURE__ */ __exportAll({
+	down: () => down,
+	up: () => up
+});
+/**
+* i18n for menus + taxonomies. Adds `locale` + `translation_group` to system
+* tables and stores translation_groups (not row ids) in
+* `_dineway_menu_items.reference_id` and `content_taxonomies.taxonomy_id`.
+* Backfill locale and column DEFAULTs use the site's configured defaultLocale.
+*/
+function getDefaultLocale() {
+	return getI18nConfig()?.defaultLocale ?? "en";
+}
+async function up(db) {
+	const defaultLocale = getDefaultLocale();
+	if (isSqlite(db)) {
+		await sql.raw(`PRAGMA foreign_keys = OFF`).execute(db);
+		try {
+			await rebuildMenus(db, defaultLocale);
+			await addItemColumns(db, defaultLocale);
+			await rebuildTaxonomies(db, defaultLocale);
+			await rebuildTaxonomyDefs(db, defaultLocale);
+			await rebuildContentTaxonomies(db);
+			await remapMenuItemRefs(db);
+		} finally {
+			await sql.raw(`PRAGMA foreign_keys = ON`).execute(db);
+		}
+		return;
+	}
+	await pgWiden(db, "_dineway_menus", ["name"], ["name", "locale"], defaultLocale);
+	await pgWiden(db, "_dineway_menu_items", null, null, defaultLocale);
+	await pgWiden(db, "taxonomies", ["name", "slug"], [
+		"name",
+		"slug",
+		"locale"
+	], defaultLocale);
+	await pgWiden(db, "_dineway_taxonomy_defs", ["name"], ["name", "locale"], defaultLocale);
+	await pgRemapContentTaxonomies(db);
+	await remapMenuItemRefs(db);
+}
+async function rebuildMenus(db, defaultLocale) {
+	if (await hasColumn(db, "_dineway_menus", "locale")) return;
+	await sql.raw(`DROP TABLE IF EXISTS "_dineway_menus_new"`).execute(db);
+	await db.schema.createTable("_dineway_menus_new").addColumn("id", "text", (c) => c.primaryKey()).addColumn("name", "text", (c) => c.notNull()).addColumn("label", "text", (c) => c.notNull()).addColumn("created_at", "text", (c) => c.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (c) => c.defaultTo(currentTimestamp(db))).addColumn("locale", "text", (c) => c.notNull().defaultTo(defaultLocale)).addColumn("translation_group", "text").addUniqueConstraint("_dineway_menus_name_locale_unique", ["name", "locale"]).execute();
+	await sql`
+		INSERT INTO _dineway_menus_new (id, name, label, created_at, updated_at, locale, translation_group)
+		SELECT id, name, label, created_at, updated_at, ${defaultLocale}, id FROM _dineway_menus
+	`.execute(db);
+	await db.schema.dropTable("_dineway_menus").execute();
+	await sql`ALTER TABLE _dineway_menus_new RENAME TO _dineway_menus`.execute(db);
+	await db.schema.createIndex("idx__dineway_menus_locale").on("_dineway_menus").column("locale").execute();
+	await db.schema.createIndex("idx__dineway_menus_translation_group").on("_dineway_menus").column("translation_group").execute();
+}
+async function addItemColumns(db, defaultLocale) {
+	if (await hasColumn(db, "_dineway_menu_items", "locale")) return;
+	await db.schema.alterTable("_dineway_menu_items").addColumn("locale", "text", (c) => c.notNull().defaultTo(defaultLocale)).execute();
+	await db.schema.alterTable("_dineway_menu_items").addColumn("translation_group", "text").execute();
+	await sql`UPDATE _dineway_menu_items SET translation_group = id`.execute(db);
+	await db.schema.createIndex("idx__dineway_menu_items_locale").on("_dineway_menu_items").column("locale").execute();
+	await db.schema.createIndex("idx__dineway_menu_items_translation_group").on("_dineway_menu_items").column("translation_group").execute();
+}
+async function rebuildTaxonomies(db, defaultLocale) {
+	if (await hasColumn(db, "taxonomies", "locale")) return;
+	await sql.raw(`DROP TABLE IF EXISTS "taxonomies_new"`).execute(db);
+	await sql`DROP INDEX IF EXISTS idx_taxonomies_name`.execute(db);
+	await db.schema.createTable("taxonomies_new").addColumn("id", "text", (c) => c.primaryKey()).addColumn("name", "text", (c) => c.notNull()).addColumn("slug", "text", (c) => c.notNull()).addColumn("label", "text", (c) => c.notNull()).addColumn("parent_id", "text").addColumn("data", "text").addColumn("locale", "text", (c) => c.notNull().defaultTo(defaultLocale)).addColumn("translation_group", "text").addUniqueConstraint("taxonomies_name_slug_locale_unique", [
+		"name",
+		"slug",
+		"locale"
+	]).addForeignKeyConstraint("taxonomies_parent_fk", ["parent_id"], "taxonomies", ["id"], (cb) => cb.onDelete("set null")).execute();
+	await sql`
+		INSERT INTO taxonomies_new (id, name, slug, label, parent_id, data, locale, translation_group)
+		SELECT id, name, slug, label, parent_id, data, ${defaultLocale}, id FROM taxonomies
+	`.execute(db);
+	await db.schema.dropTable("taxonomies").execute();
+	await sql`ALTER TABLE taxonomies_new RENAME TO taxonomies`.execute(db);
+	await db.schema.createIndex("idx_taxonomies_name").on("taxonomies").column("name").execute();
+	await db.schema.createIndex("idx_taxonomies_locale").on("taxonomies").column("locale").execute();
+	await db.schema.createIndex("idx_taxonomies_translation_group").on("taxonomies").column("translation_group").execute();
+}
+async function rebuildTaxonomyDefs(db, defaultLocale) {
+	if (await hasColumn(db, "_dineway_taxonomy_defs", "locale")) return;
+	await sql.raw(`DROP TABLE IF EXISTS "_dineway_taxonomy_defs_new"`).execute(db);
+	await db.schema.createTable("_dineway_taxonomy_defs_new").addColumn("id", "text", (c) => c.primaryKey()).addColumn("name", "text", (c) => c.notNull()).addColumn("label", "text", (c) => c.notNull()).addColumn("label_singular", "text").addColumn("hierarchical", "integer", (c) => c.defaultTo(0)).addColumn("collections", "text").addColumn("created_at", "text", (c) => c.defaultTo(currentTimestamp(db))).addColumn("locale", "text", (c) => c.notNull().defaultTo(defaultLocale)).addColumn("translation_group", "text").addUniqueConstraint("_dineway_taxonomy_defs_name_locale_unique", ["name", "locale"]).execute();
+	await sql`
+		INSERT INTO _dineway_taxonomy_defs_new
+			(id, name, label, label_singular, hierarchical, collections, created_at, locale, translation_group)
+		SELECT id, name, label, label_singular, hierarchical, collections, created_at, ${defaultLocale}, id
+		FROM _dineway_taxonomy_defs
+	`.execute(db);
+	await db.schema.dropTable("_dineway_taxonomy_defs").execute();
+	await sql`ALTER TABLE _dineway_taxonomy_defs_new RENAME TO _dineway_taxonomy_defs`.execute(db);
+	await db.schema.createIndex("idx__dineway_taxonomy_defs_locale").on("_dineway_taxonomy_defs").column("locale").execute();
+	await db.schema.createIndex("idx__dineway_taxonomy_defs_translation_group").on("_dineway_taxonomy_defs").column("translation_group").execute();
+}
+async function rebuildContentTaxonomies(db) {
+	if ((await sql`PRAGMA foreign_key_list(content_taxonomies)`.execute(db)).rows.length === 0) return;
+	await sql.raw(`DROP TABLE IF EXISTS "content_taxonomies_new"`).execute(db);
+	await db.schema.createTable("content_taxonomies_new").addColumn("collection", "text", (c) => c.notNull()).addColumn("entry_id", "text", (c) => c.notNull()).addColumn("taxonomy_id", "text", (c) => c.notNull()).addPrimaryKeyConstraint("content_taxonomies_pk", [
+		"collection",
+		"entry_id",
+		"taxonomy_id"
+	]).execute();
+	await sql`
+		INSERT OR IGNORE INTO content_taxonomies_new (collection, entry_id, taxonomy_id)
+		SELECT ct.collection, ct.entry_id, COALESCE(
+			(SELECT t.translation_group FROM taxonomies t WHERE t.id = ct.taxonomy_id),
+			ct.taxonomy_id
+		)
+		FROM content_taxonomies ct
+	`.execute(db);
+	await db.schema.dropTable("content_taxonomies").execute();
+	await sql`ALTER TABLE content_taxonomies_new RENAME TO content_taxonomies`.execute(db);
+	await db.schema.createIndex("idx_content_taxonomies_term").on("content_taxonomies").column("taxonomy_id").execute();
+}
+async function remapMenuItemRefs(db) {
+	const collections = await sql`SELECT slug FROM _dineway_collections`.execute(db);
+	for (const { slug } of collections.rows) {
+		validateIdentifier(slug, "collection slug");
+		const ec = sql.ref(`ec_${slug}`);
+		await sql`
+			UPDATE _dineway_menu_items SET reference_id = (
+				SELECT translation_group FROM ${ec} WHERE ${ec}.id = _dineway_menu_items.reference_id
+			)
+			WHERE reference_collection = ${slug} AND reference_id IS NOT NULL
+				AND EXISTS (SELECT 1 FROM ${ec} WHERE ${ec}.id = _dineway_menu_items.reference_id)
+		`.execute(db);
+	}
+	await sql`
+		UPDATE _dineway_menu_items SET reference_id = (
+			SELECT translation_group FROM taxonomies WHERE taxonomies.id = _dineway_menu_items.reference_id
+		)
+		WHERE type = 'taxonomy' AND reference_id IS NOT NULL
+			AND EXISTS (SELECT 1 FROM taxonomies WHERE taxonomies.id = _dineway_menu_items.reference_id)
+	`.execute(db);
+}
+async function pgWiden(db, table, oldCols, newCols, defaultLocale) {
+	validateSystemIdent(table);
+	const ref = sql.ref(table);
+	await sql`ALTER TABLE ${ref} ADD COLUMN IF NOT EXISTS locale TEXT NOT NULL DEFAULT ${sql.lit(defaultLocale)}`.execute(db);
+	await sql`ALTER TABLE ${ref} ADD COLUMN IF NOT EXISTS translation_group TEXT`.execute(db);
+	await sql`UPDATE ${ref} SET translation_group = id WHERE translation_group IS NULL`.execute(db);
+	await sql`CREATE INDEX IF NOT EXISTS ${sql.ref(`idx_${table}_locale`)} ON ${ref} (locale)`.execute(db);
+	await sql`
+		CREATE INDEX IF NOT EXISTS ${sql.ref(`idx_${table}_translation_group`)} ON ${ref} (translation_group)
+	`.execute(db);
+	if (!oldCols || !newCols) return;
+	for (const c of [...oldCols, ...newCols]) validateSystemIdent(c);
+	const cons = await sql`
+		SELECT conname FROM pg_constraint c
+		WHERE c.conrelid = ${table}::regclass AND c.contype = 'u'
+			AND array_length(c.conkey, 1) = ${oldCols.length}
+			AND (
+				SELECT array_agg(a.attname ORDER BY pos.ord)
+				FROM unnest(c.conkey) WITH ORDINALITY AS pos(attnum, ord)
+				JOIN pg_attribute a ON a.attrelid = c.conrelid AND a.attnum = pos.attnum
+			)::text[] = ${oldCols}::text[]
+	`.execute(db);
+	for (const c of cons.rows) await sql`ALTER TABLE ${ref} DROP CONSTRAINT ${sql.ref(c.conname)}`.execute(db);
+	const cols = sql.join(newCols.map((c) => sql.ref(c)), sql`, `);
+	await sql`
+		ALTER TABLE ${ref}
+		ADD CONSTRAINT ${sql.ref(`${table}_${newCols.join("_")}_unique`)} UNIQUE (${cols})
+	`.execute(db);
+}
+async function pgRemapContentTaxonomies(db) {
+	const fks = await sql`
+		SELECT conname FROM pg_constraint
+		WHERE conrelid = 'content_taxonomies'::regclass AND contype = 'f'
+	`.execute(db);
+	for (const c of fks.rows) await sql`ALTER TABLE content_taxonomies DROP CONSTRAINT ${sql.ref(c.conname)}`.execute(db);
+	await sql`
+		UPDATE content_taxonomies SET taxonomy_id = t.translation_group
+		FROM taxonomies t WHERE t.id = content_taxonomies.taxonomy_id
+	`.execute(db);
+}
+async function hasColumn(db, table, column) {
+	return (await sql`PRAGMA table_info(${sql.ref(table)})`.execute(db)).rows.some((r) => r.name === column);
+}
+const SYSTEM_IDENT = /^[_a-z][a-z0-9_]*$/;
+function validateSystemIdent(name) {
+	if (!SYSTEM_IDENT.test(name)) throw new Error(`Invalid identifier: "${name}"`);
+}
+/**
+* down() is destructive on multi-locale installs (dropping `locale` collapses
+* translated rows onto an ambiguous unique key). Refuse to run when any row
+* sits at a locale other than the configured defaultLocale.
+*/
+async function assertSingleLocale(db, defaultLocale) {
+	for (const table of [
+		"_dineway_menus",
+		"_dineway_menu_items",
+		"taxonomies",
+		"_dineway_taxonomy_defs"
+	]) {
+		validateSystemIdent(table);
+		const result = await sql`
+			SELECT COUNT(*) AS count FROM ${sql.ref(table)} WHERE locale != ${defaultLocale}
+		`.execute(db);
+		const count = Number(result.rows[0]?.count ?? 0);
+		if (count > 0) throw new Error(`Cannot revert migration 045_i18n_menus_and_taxonomies: ${count} row(s) in "${table}" use a non-default locale (defaultLocale="${defaultLocale}"). Reverting would drop them silently. Export translations first (or delete them) and re-run the rollback. See packages/core/src/database/migrations/045_i18n_menus_and_taxonomies.ts.`);
+	}
+}
+async function down(db) {
+	const defaultLocale = getDefaultLocale();
+	await assertSingleLocale(db, defaultLocale);
+	const widenedTables = [
+		"_dineway_menus",
+		"_dineway_menu_items",
+		"taxonomies",
+		"_dineway_taxonomy_defs"
+	];
+	if (isSqlite(db)) {
+		await sql.raw(`PRAGMA foreign_keys = OFF`).execute(db);
+		try {
+			for (const t of widenedTables) {
+				await sql.raw(`DROP INDEX IF EXISTS idx_${t}_locale`).execute(db);
+				await sql.raw(`DROP INDEX IF EXISTS idx_${t}_translation_group`).execute(db);
+			}
+			await rebuildContentTaxonomiesDown(db, defaultLocale);
+			await rebuildMenusDown(db);
+			await rebuildMenuItemsDown(db);
+			await rebuildTaxonomiesDown(db);
+			await rebuildTaxonomyDefsDown(db);
+		} finally {
+			await sql.raw(`PRAGMA foreign_keys = ON`).execute(db);
+		}
+		return;
+	}
+	for (const t of widenedTables) {
+		await sql.raw(`DROP INDEX IF EXISTS idx_${t}_locale`).execute(db);
+		await sql.raw(`DROP INDEX IF EXISTS idx_${t}_translation_group`).execute(db);
+		await sql.raw(`ALTER TABLE "${t}" DROP COLUMN IF EXISTS locale`).execute(db);
+		await sql.raw(`ALTER TABLE "${t}" DROP COLUMN IF EXISTS translation_group`).execute(db);
+	}
+}
+async function rebuildContentTaxonomiesDown(db, defaultLocale) {
+	await sql.raw(`DROP TABLE IF EXISTS "content_taxonomies_new"`).execute(db);
+	await db.schema.createTable("content_taxonomies_new").addColumn("collection", "text", (c) => c.notNull()).addColumn("entry_id", "text", (c) => c.notNull()).addColumn("taxonomy_id", "text", (c) => c.notNull()).addPrimaryKeyConstraint("content_taxonomies_pk", [
+		"collection",
+		"entry_id",
+		"taxonomy_id"
+	]).addForeignKeyConstraint("content_taxonomies_taxonomy_fk", ["taxonomy_id"], "taxonomies", ["id"], (cb) => cb.onDelete("cascade")).execute();
+	await sql`
+		INSERT OR IGNORE INTO content_taxonomies_new (collection, entry_id, taxonomy_id)
+		SELECT ct.collection, ct.entry_id, COALESCE(
+			(SELECT t.id FROM taxonomies t WHERE t.translation_group = ct.taxonomy_id AND t.locale = ${defaultLocale}),
+			ct.taxonomy_id
+		)
+		FROM content_taxonomies ct
+	`.execute(db);
+	await db.schema.dropTable("content_taxonomies").execute();
+	await sql`ALTER TABLE content_taxonomies_new RENAME TO content_taxonomies`.execute(db);
+	await db.schema.createIndex("idx_content_taxonomies_term").on("content_taxonomies").column("taxonomy_id").execute();
+}
+async function rebuildMenusDown(db) {
+	await sql.raw(`DROP TABLE IF EXISTS "_dineway_menus_old"`).execute(db);
+	await db.schema.createTable("_dineway_menus_old").addColumn("id", "text", (c) => c.primaryKey()).addColumn("name", "text", (c) => c.notNull().unique()).addColumn("label", "text", (c) => c.notNull()).addColumn("created_at", "text", (c) => c.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (c) => c.defaultTo(currentTimestamp(db))).execute();
+	await sql`
+		INSERT INTO _dineway_menus_old (id, name, label, created_at, updated_at)
+		SELECT id, name, label, created_at, updated_at FROM _dineway_menus
+	`.execute(db);
+	await db.schema.dropTable("_dineway_menus").execute();
+	await sql`ALTER TABLE _dineway_menus_old RENAME TO _dineway_menus`.execute(db);
+}
+async function rebuildMenuItemsDown(db) {
+	await sql.raw(`ALTER TABLE _dineway_menu_items DROP COLUMN locale`).execute(db);
+	await sql.raw(`ALTER TABLE _dineway_menu_items DROP COLUMN translation_group`).execute(db);
+}
+async function rebuildTaxonomiesDown(db) {
+	await sql.raw(`DROP TABLE IF EXISTS "taxonomies_old"`).execute(db);
+	await db.schema.createTable("taxonomies_old").addColumn("id", "text", (c) => c.primaryKey()).addColumn("name", "text", (c) => c.notNull()).addColumn("slug", "text", (c) => c.notNull()).addColumn("label", "text", (c) => c.notNull()).addColumn("parent_id", "text").addColumn("data", "text").addUniqueConstraint("taxonomies_name_slug_unique", ["name", "slug"]).addForeignKeyConstraint("taxonomies_parent_fk", ["parent_id"], "taxonomies_old", ["id"], (cb) => cb.onDelete("set null")).execute();
+	await sql`
+		INSERT INTO taxonomies_old (id, name, slug, label, parent_id, data)
+		SELECT id, name, slug, label, parent_id, data FROM taxonomies
+	`.execute(db);
+	await db.schema.dropTable("taxonomies").execute();
+	await sql`ALTER TABLE taxonomies_old RENAME TO taxonomies`.execute(db);
+	await db.schema.createIndex("idx_taxonomies_name").on("taxonomies").column("name").execute();
+}
+async function rebuildTaxonomyDefsDown(db) {
+	await sql.raw(`DROP TABLE IF EXISTS "_dineway_taxonomy_defs_old"`).execute(db);
+	await db.schema.createTable("_dineway_taxonomy_defs_old").addColumn("id", "text", (c) => c.primaryKey()).addColumn("name", "text", (c) => c.notNull().unique()).addColumn("label", "text", (c) => c.notNull()).addColumn("label_singular", "text").addColumn("hierarchical", "integer", (c) => c.defaultTo(0)).addColumn("collections", "text").addColumn("created_at", "text", (c) => c.defaultTo(currentTimestamp(db))).execute();
+	await sql`
+		INSERT INTO _dineway_taxonomy_defs_old
+			(id, name, label, label_singular, hierarchical, collections, created_at)
+		SELECT id, name, label, label_singular, hierarchical, collections, created_at
+		FROM _dineway_taxonomy_defs
+	`.execute(db);
+	await db.schema.dropTable("_dineway_taxonomy_defs").execute();
+	await sql`ALTER TABLE _dineway_taxonomy_defs_old RENAME TO _dineway_taxonomy_defs`.execute(db);
+}
+
 //#endregion
 //#region src/database/migrations/runner.ts
 const MIGRATIONS = Object.freeze({
@@ -1904,7 +2217,9 @@ const MIGRATIONS = Object.freeze({
 	"040_handoff_snapshots": _040_handoff_snapshots_exports,
 	"041_assignments": _041_assignments_exports,
 	"042_hitl_requests": _042_hitl_requests_exports,
-	"043_bounded_404_log": _043_bounded_404_log_exports
+	"043_bounded_404_log": _043_bounded_404_log_exports,
+	"044_credential_algorithm": _044_credential_algorithm_exports,
+	"045_i18n_menus_and_taxonomies": _045_i18n_menus_and_taxonomies_exports
 });
 /** Total number of registered migrations. Exported for use in tests. */
 const MIGRATION_COUNT = Object.keys(MIGRATIONS).length;