emdash 0.10.0 → 0.11.1

package/dist/{runner-DMnlIkh4.mjs → runner-DIcU2UCC.mjs}

@@ -23,8 +23,8 @@ var __exportAll = (all, no_symbols) => {
 //#endregion
 //#region src/database/migrations/001_initial.ts
 var _001_initial_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$34,
-	up: () => up$34
+	down: () => down$35,
+	up: () => up$35
 });
 /**
 * Initial schema migration
@@ -33,7 +33,7 @@ var _001_initial_exports = /* @__PURE__ */ __exportAll({
 * by the SchemaRegistry when collections are added via the admin UI.
 * This migration only creates system tables.
 */
-async function up$34(db) {
+async function up$35(db) {
 	await db.schema.createTable("revisions").ifNotExists().addColumn("id", "text", (col) => col.primaryKey()).addColumn("collection", "text", (col) => col.notNull()).addColumn("entry_id", "text", (col) => col.notNull()).addColumn("data", "text", (col) => col.notNull()).addColumn("author_id", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_revisions_entry").ifNotExists().on("revisions").columns(["collection", "entry_id"]).execute();
 	await db.schema.createTable("taxonomies").ifNotExists().addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("slug", "text", (col) => col.notNull()).addColumn("label", "text", (col) => col.notNull()).addColumn("parent_id", "text").addColumn("data", "text").addUniqueConstraint("taxonomies_name_slug_unique", ["name", "slug"]).addForeignKeyConstraint("taxonomies_parent_fk", ["parent_id"], "taxonomies", ["id"], (cb) => cb.onDelete("set null")).execute();
@@ -53,7 +53,7 @@ async function up$34(db) {
 	await db.schema.createIndex("idx_audit_action").ifNotExists().on("audit_logs").column("action").execute();
 	await db.schema.createIndex("idx_audit_timestamp").ifNotExists().on("audit_logs").column("timestamp").execute();
 }
-async function down$34(db) {
+async function down$35(db) {
 	await db.schema.dropTable("audit_logs").execute();
 	await db.schema.dropTable("options").execute();
 	await db.schema.dropTable("users").execute();
@@ -66,26 +66,26 @@ async function down$34(db) {
 //#endregion
 //#region src/database/migrations/002_media_status.ts
 var _002_media_status_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$33,
-	up: () => up$33
+	down: () => down$34,
+	up: () => up$34
 });
 /**
 * Add status column to media table for tracking upload state.
 * Status values: 'pending' | 'ready' | 'failed'
 */
-async function up$33(db) {
+async function up$34(db) {
 	await db.schema.alterTable("media").addColumn("status", "text", (col) => col.notNull().defaultTo("ready")).execute();
 	await db.schema.createIndex("idx_media_status").on("media").column("status").execute();
 }
-async function down$33(db) {
+async function down$34(db) {
 	await db.schema.dropIndex("idx_media_status").execute();
 }
 
 //#endregion
 //#region src/database/migrations/003_schema_registry.ts
 var _003_schema_registry_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$32,
-	up: () => up$32
+	down: () => down$33,
+	up: () => up$33
 });
 /**
 * Migration: Schema Registry Tables
@@ -93,14 +93,14 @@ var _003_schema_registry_exports = /* @__PURE__ */ __exportAll({
 * Creates the schema registry tables that store collection and field definitions.
 * This enables dynamic schema management where D1 is the source of truth.
 */
-async function up$32(db) {
+async function up$33(db) {
 	await db.schema.createTable("_emdash_collections").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("label_singular", "text").addColumn("description", "text").addColumn("icon", "text").addColumn("supports", "text").addColumn("source", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createTable("_emdash_fields").addColumn("id", "text", (col) => col.primaryKey()).addColumn("collection_id", "text", (col) => col.notNull()).addColumn("slug", "text", (col) => col.notNull()).addColumn("label", "text", (col) => col.notNull()).addColumn("type", "text", (col) => col.notNull()).addColumn("column_type", "text", (col) => col.notNull()).addColumn("required", "integer", (col) => col.defaultTo(0)).addColumn("unique", "integer", (col) => col.defaultTo(0)).addColumn("default_value", "text").addColumn("validation", "text").addColumn("widget", "text").addColumn("options", "text").addColumn("sort_order", "integer", (col) => col.defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("fields_collection_fk", ["collection_id"], "_emdash_collections", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_fields_collection_slug").on("_emdash_fields").columns(["collection_id", "slug"]).unique().execute();
 	await db.schema.createIndex("idx_fields_collection").on("_emdash_fields").column("collection_id").execute();
 	await db.schema.createIndex("idx_fields_sort").on("_emdash_fields").columns(["collection_id", "sort_order"]).execute();
 }
-async function down$32(db) {
+async function down$33(db) {
 	await db.schema.dropTable("_emdash_fields").execute();
 	await db.schema.dropTable("_emdash_collections").execute();
 }
@@ -108,8 +108,8 @@ async function down$32(db) {
 //#endregion
 //#region src/database/migrations/004_plugins.ts
 var _004_plugins_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$31,
-	up: () => up$31
+	down: () => down$32,
+	up: () => up$32
 });
 /**
 * Migration: Plugin System Tables
@@ -119,7 +119,7 @@ var _004_plugins_exports = /* @__PURE__ */ __exportAll({
 *
 * @see PLUGIN-SYSTEM.md § Plugin Storage
 */
-async function up$31(db) {
+async function up$32(db) {
 	await db.schema.createTable("_plugin_storage").addColumn("plugin_id", "text", (col) => col.notNull()).addColumn("collection", "text", (col) => col.notNull()).addColumn("id", "text", (col) => col.notNull()).addColumn("data", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addPrimaryKeyConstraint("pk_plugin_storage", [
 		"plugin_id",
 		"collection",
@@ -137,7 +137,7 @@ async function up$31(db) {
 		"index_name"
 	]).execute();
 }
-async function down$31(db) {
+async function down$32(db) {
 	await db.schema.dropTable("_plugin_indexes").execute();
 	await db.schema.dropTable("_plugin_state").execute();
 	await db.schema.dropTable("_plugin_storage").execute();
@@ -146,8 +146,8 @@ async function down$31(db) {
 //#endregion
 //#region src/database/migrations/005_menus.ts
 var _005_menus_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$30,
-	up: () => up$30
+	down: () => down$31,
+	up: () => up$31
 });
 /**
 * Navigation Menus migration
@@ -155,13 +155,13 @@ var _005_menus_exports = /* @__PURE__ */ __exportAll({
 * Creates tables for admin-editable navigation menus.
 * Menu items can reference content entries, taxonomy terms, or custom URLs.
 */
-async function up$30(db) {
+async function up$31(db) {
 	await db.schema.createTable("_emdash_menus").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createTable("_emdash_menu_items").addColumn("id", "text", (col) => col.primaryKey()).addColumn("menu_id", "text", (col) => col.notNull()).addColumn("parent_id", "text").addColumn("sort_order", "integer", (col) => col.notNull().defaultTo(0)).addColumn("type", "text", (col) => col.notNull()).addColumn("reference_collection", "text").addColumn("reference_id", "text").addColumn("custom_url", "text").addColumn("label", "text", (col) => col.notNull()).addColumn("title_attr", "text").addColumn("target", "text").addColumn("css_classes", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("menu_items_menu_fk", ["menu_id"], "_emdash_menus", ["id"], (cb) => cb.onDelete("cascade")).addForeignKeyConstraint("menu_items_parent_fk", ["parent_id"], "_emdash_menu_items", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_menu_items_menu").on("_emdash_menu_items").columns(["menu_id", "sort_order"]).execute();
 	await db.schema.createIndex("idx_menu_items_parent").on("_emdash_menu_items").column("parent_id").execute();
 }
-async function down$30(db) {
+async function down$31(db) {
 	await db.schema.dropTable("_emdash_menu_items").execute();
 	await db.schema.dropTable("_emdash_menus").execute();
 }
@@ -169,8 +169,8 @@ async function down$30(db) {
 //#endregion
 //#region src/database/migrations/006_taxonomy_defs.ts
 var _006_taxonomy_defs_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$29,
-	up: () => up$29
+	down: () => down$30,
+	up: () => up$30
 });
 /**
 * Taxonomy definitions migration
@@ -178,7 +178,7 @@ var _006_taxonomy_defs_exports = /* @__PURE__ */ __exportAll({
 * Adds _emdash_taxonomy_defs table to store taxonomy definitions (category, tag, custom)
 * and seeds default category and tag taxonomies.
 */
-async function up$29(db) {
+async function up$30(db) {
 	await db.schema.createTable("_emdash_taxonomy_defs").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("label_singular", "text").addColumn("hierarchical", "integer", (col) => col.defaultTo(0)).addColumn("collections", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.insertInto("_emdash_taxonomy_defs").values([{
 		id: "taxdef_category",
@@ -196,22 +196,22 @@ async function up$29(db) {
 		collections: JSON.stringify(["posts"])
 	}]).execute();
 }
-async function down$29(db) {
+async function down$30(db) {
 	await db.schema.dropTable("_emdash_taxonomy_defs").execute();
 }
 
 //#endregion
 //#region src/database/migrations/007_widgets.ts
 var _007_widgets_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$28,
-	up: () => up$28
+	down: () => down$29,
+	up: () => up$29
 });
-async function up$28(db) {
+async function up$29(db) {
 	await db.schema.createTable("_emdash_widget_areas").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("description", "text").addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createTable("_emdash_widgets").addColumn("id", "text", (col) => col.primaryKey()).addColumn("area_id", "text", (col) => col.notNull().references("_emdash_widget_areas.id").onDelete("cascade")).addColumn("sort_order", "integer", (col) => col.notNull().defaultTo(0)).addColumn("type", "text", (col) => col.notNull()).addColumn("title", "text").addColumn("content", "text").addColumn("menu_name", "text").addColumn("component_id", "text").addColumn("component_props", "text").addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createIndex("idx_widgets_area").on("_emdash_widgets").columns(["area_id", "sort_order"]).execute();
 }
-async function down$28(db) {
+async function down$29(db) {
 	await db.schema.dropTable("_emdash_widgets").execute();
 	await db.schema.dropTable("_emdash_widget_areas").execute();
 }
@@ -219,8 +219,8 @@ async function down$28(db) {
 //#endregion
 //#region src/database/migrations/008_auth.ts
 var _008_auth_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$27,
-	up: () => up$27
+	down: () => down$28,
+	up: () => up$28
 });
 /**
 * Auth migration - passkey-first authentication
@@ -234,7 +234,7 @@ var _008_auth_exports = /* @__PURE__ */ __exportAll({
 * - Creates oauth_accounts table (external provider links)
 * - Creates allowed_domains table (self-signup)
 */
-async function up$27(db) {
+async function up$28(db) {
 	await db.schema.createTable("users_new").addColumn("id", "text", (col) => col.primaryKey()).addColumn("email", "text", (col) => col.notNull().unique()).addColumn("name", "text").addColumn("avatar_url", "text").addColumn("role", "integer", (col) => col.notNull().defaultTo(10)).addColumn("email_verified", "integer", (col) => col.notNull().defaultTo(0)).addColumn("data", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await sql`
 		INSERT INTO users_new (id, email, name, role, data, created_at, updated_at)
@@ -267,7 +267,7 @@ async function up$27(db) {
 	await db.schema.createTable("auth_challenges").addColumn("challenge", "text", (col) => col.primaryKey()).addColumn("type", "text", (col) => col.notNull()).addColumn("user_id", "text").addColumn("data", "text").addColumn("expires_at", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_auth_challenges_expires").on("auth_challenges").column("expires_at").execute();
 }
-async function down$27(db) {
+async function down$28(db) {
 	await db.schema.dropTable("auth_challenges").execute();
 	await db.schema.dropTable("allowed_domains").execute();
 	await db.schema.dropTable("oauth_accounts").execute();
@@ -300,8 +300,8 @@ async function down$27(db) {
 //#endregion
 //#region src/database/migrations/009_user_disabled.ts
 var _009_user_disabled_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$26,
-	up: () => up$26
+	down: () => down$27,
+	up: () => up$27
 });
 /**
 * User disabled column - for soft-disabling users
@@ -310,19 +310,19 @@ var _009_user_disabled_exports = /* @__PURE__ */ __exportAll({
 * - Adds disabled column to users table (INTEGER, default 0)
 * - Disabled users cannot log in
 */
-async function up$26(db) {
+async function up$27(db) {
 	await sql`ALTER TABLE users ADD COLUMN disabled INTEGER NOT NULL DEFAULT 0`.execute(db);
 	await db.schema.createIndex("idx_users_disabled").on("users").column("disabled").execute();
 }
-async function down$26(db) {
+async function down$27(db) {
 	await db.schema.dropIndex("idx_users_disabled").execute();
 }
 
 //#endregion
 //#region src/database/migrations/011_sections.ts
 var _011_sections_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$25,
-	up: () => up$25
+	down: () => down$26,
+	up: () => up$26
 });
 /**
 * Migration: Add sections tables and performance indexes
@@ -331,13 +331,13 @@ var _011_sections_exports = /* @__PURE__ */ __exportAll({
 * They provide a library of pre-built page sections (heroes, CTAs, testimonials, etc.)
 * that content authors can browse and insert with a single click.
 */
-async function up$25(db) {
+async function up$26(db) {
 	await db.schema.createTable("_emdash_section_categories").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("sort_order", "integer", (col) => col.defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createTable("_emdash_sections").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("title", "text", (col) => col.notNull()).addColumn("description", "text").addColumn("category_id", "text", (col) => col.references("_emdash_section_categories.id").onDelete("set null")).addColumn("keywords", "text").addColumn("content", "text", (col) => col.notNull()).addColumn("preview_media_id", "text").addColumn("source", "text", (col) => col.notNull().defaultTo("user")).addColumn("theme_id", "text").addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).addColumn("updated_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.createIndex("idx_sections_category").on("_emdash_sections").columns(["category_id"]).execute();
 	await db.schema.createIndex("idx_sections_source").on("_emdash_sections").columns(["source"]).execute();
 }
-async function down$25(db) {
+async function down$26(db) {
 	await db.schema.dropIndex("idx_sections_source").execute();
 	await db.schema.dropIndex("idx_sections_category").execute();
 	await db.schema.dropTable("_emdash_sections").execute();
@@ -347,8 +347,8 @@ async function down$25(db) {
 //#endregion
 //#region src/database/migrations/012_search.ts
 var _012_search_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$24,
-	up: () => up$24
+	down: () => down$25,
+	up: () => up$25
 });
 /**
 * Migration: Search Support
@@ -356,11 +356,11 @@ var _012_search_exports = /* @__PURE__ */ __exportAll({
 * Adds search configuration to collections and searchable flag to fields.
 * FTS5 tables are created dynamically when search is enabled for a collection.
 */
-async function up$24(db) {
+async function up$25(db) {
 	await db.schema.alterTable("_emdash_collections").addColumn("search_config", "text").execute();
 	await db.schema.alterTable("_emdash_fields").addColumn("searchable", "integer", (col) => col.defaultTo(0)).execute();
 }
-async function down$24(db) {
+async function down$25(db) {
 	await db.schema.alterTable("_emdash_fields").dropColumn("searchable").execute();
 	await db.schema.alterTable("_emdash_collections").dropColumn("search_config").execute();
 }
@@ -368,8 +368,8 @@ async function down$24(db) {
 //#endregion
 //#region src/database/migrations/013_scheduled_publishing.ts
 var _013_scheduled_publishing_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$23,
-	up: () => up$23
+	down: () => down$24,
+	up: () => up$24
 });
 /**
 * Migration: Add scheduled publishing support
@@ -378,7 +378,7 @@ var _013_scheduled_publishing_exports = /* @__PURE__ */ __exportAll({
 * When scheduled_at is set and status is 'scheduled', the content
 * will be auto-published when the scheduled time is reached.
 */
-async function up$23(db) {
+async function up$24(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -393,7 +393,7 @@ async function up$23(db) {
 		`.execute(db);
 	}
 }
-async function down$23(db) {
+async function down$24(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -410,10 +410,10 @@ async function down$23(db) {
 //#endregion
 //#region src/database/migrations/014_draft_revisions.ts
 var _014_draft_revisions_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$22,
-	up: () => up$22
+	down: () => down$23,
+	up: () => up$23
 });
-async function up$22(db) {
+async function up$23(db) {
 	const tables = await db.selectFrom("_emdash_collections").select("slug").execute();
 	for (const row of tables) {
 		const tableName = `ec_${row.slug}`;
@@ -435,7 +435,7 @@ async function up$22(db) {
 		`.execute(db);
 	}
 }
-async function down$22(db) {
+async function down$23(db) {
 	const tables = await db.selectFrom("_emdash_collections").select("slug").execute();
 	for (const row of tables) {
 		const tableName = `ec_${row.slug}`;
@@ -459,8 +459,8 @@ async function down$22(db) {
 //#endregion
 //#region src/database/migrations/015_indexes.ts
 var _015_indexes_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$21,
-	up: () => up$21
+	down: () => down$22,
+	up: () => up$22
 });
 /**
 * Add performance indexes for common query patterns.
@@ -473,7 +473,7 @@ var _015_indexes_exports = /* @__PURE__ */ __exportAll({
 * 5. Retroactive author_id + updated_at on existing ec_* content tables
 *    (new tables get these from createContentTable() in registry.ts)
 */
-async function up$21(db) {
+async function up$22(db) {
 	await db.schema.createIndex("idx_media_mime_type").on("media").column("mime_type").execute();
 	await db.schema.createIndex("idx_media_filename").on("media").column("filename").execute();
 	await db.schema.createIndex("idx_media_created_at").on("media").column("created_at").execute();
@@ -493,7 +493,7 @@ async function up$21(db) {
 		`.execute(db);
 	}
 }
-async function down$21(db) {
+async function down$22(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -511,8 +511,8 @@ async function down$21(db) {
 //#endregion
 //#region src/database/migrations/016_api_tokens.ts
 var _016_api_tokens_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$20,
-	up: () => up$20
+	down: () => down$21,
+	up: () => up$21
 });
 /**
 * API token tables for programmatic access.
@@ -521,27 +521,35 @@ var _016_api_tokens_exports = /* @__PURE__ */ __exportAll({
 * 1. _emdash_api_tokens — Personal Access Tokens (ec_pat_...)
 * 2. _emdash_oauth_tokens — OAuth access/refresh tokens (ec_oat_/ec_ort_...)
 * 3. _emdash_device_codes — OAuth Device Flow state (RFC 8628)
+*
+* Every CREATE is guarded with `.ifNotExists()` so the migration is safe to
+* re-run against a partially-applied schema. See #954 for the failure mode:
+* if `up()` crashes mid-way (D1 subrequest limit, isolate cancellation,
+* transient connection error), the migration record never gets inserted
+* into `_emdash_migrations`, and the next request retries `up()` from the
+* top. Without these guards, the retry crashed with `table ... already
+* exists` and blocked every subsequent boot of the Worker.
 */
-async function up$20(db) {
-	await db.schema.createTable("_emdash_api_tokens").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("prefix", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("expires_at", "text").addColumn("last_used_at", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("api_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
-	await db.schema.createIndex("idx_api_tokens_token_hash").on("_emdash_api_tokens").column("token_hash").execute();
-	await db.schema.createIndex("idx_api_tokens_user_id").on("_emdash_api_tokens").column("user_id").execute();
-	await db.schema.createTable("_emdash_oauth_tokens").addColumn("token_hash", "text", (col) => col.primaryKey()).addColumn("token_type", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("client_type", "text", (col) => col.notNull().defaultTo("cli")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("refresh_token_hash", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("oauth_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
-	await db.schema.createIndex("idx_oauth_tokens_user_id").on("_emdash_oauth_tokens").column("user_id").execute();
-	await db.schema.createIndex("idx_oauth_tokens_expires").on("_emdash_oauth_tokens").column("expires_at").execute();
-	await db.schema.createTable("_emdash_device_codes").addColumn("device_code", "text", (col) => col.primaryKey()).addColumn("user_code", "text", (col) => col.notNull().unique()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("user_id", "text").addColumn("status", "text", (col) => col.notNull().defaultTo("pending")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("interval", "integer", (col) => col.notNull().defaultTo(5)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
+async function up$21(db) {
+	await db.schema.createTable("_emdash_api_tokens").ifNotExists().addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("token_hash", "text", (col) => col.notNull().unique()).addColumn("prefix", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("expires_at", "text").addColumn("last_used_at", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("api_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
+	await db.schema.createIndex("idx_api_tokens_token_hash").ifNotExists().on("_emdash_api_tokens").column("token_hash").execute();
+	await db.schema.createIndex("idx_api_tokens_user_id").ifNotExists().on("_emdash_api_tokens").column("user_id").execute();
+	await db.schema.createTable("_emdash_oauth_tokens").ifNotExists().addColumn("token_hash", "text", (col) => col.primaryKey()).addColumn("token_type", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("client_type", "text", (col) => col.notNull().defaultTo("cli")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("refresh_token_hash", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("oauth_tokens_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
+	await db.schema.createIndex("idx_oauth_tokens_user_id").ifNotExists().on("_emdash_oauth_tokens").column("user_id").execute();
+	await db.schema.createIndex("idx_oauth_tokens_expires").ifNotExists().on("_emdash_oauth_tokens").column("expires_at").execute();
+	await db.schema.createTable("_emdash_device_codes").ifNotExists().addColumn("device_code", "text", (col) => col.primaryKey()).addColumn("user_code", "text", (col) => col.notNull().unique()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("user_id", "text").addColumn("status", "text", (col) => col.notNull().defaultTo("pending")).addColumn("expires_at", "text", (col) => col.notNull()).addColumn("interval", "integer", (col) => col.notNull().defaultTo(5)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 }
-async function down$20(db) {
-	await db.schema.dropTable("_emdash_device_codes").execute();
-	await db.schema.dropTable("_emdash_oauth_tokens").execute();
-	await db.schema.dropTable("_emdash_api_tokens").execute();
+async function down$21(db) {
+	await db.schema.dropTable("_emdash_device_codes").ifExists().execute();
+	await db.schema.dropTable("_emdash_oauth_tokens").ifExists().execute();
+	await db.schema.dropTable("_emdash_api_tokens").ifExists().execute();
 }
 
 //#endregion
 //#region src/database/migrations/017_authorization_codes.ts
 var _017_authorization_codes_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$19,
-	up: () => up$19
+	down: () => down$20,
+	up: () => up$20
 });
 /**
 * Authorization codes for OAuth 2.1 Authorization Code + PKCE flow.
@@ -551,20 +559,20 @@ var _017_authorization_codes_exports = /* @__PURE__ */ __exportAll({
 *
 * Also adds client_id tracking to oauth_tokens for per-client revocation.
 */
-async function up$19(db) {
+async function up$20(db) {
 	await db.schema.createTable("_emdash_authorization_codes").addColumn("code_hash", "text", (col) => col.primaryKey()).addColumn("client_id", "text", (col) => col.notNull()).addColumn("redirect_uri", "text", (col) => col.notNull()).addColumn("user_id", "text", (col) => col.notNull()).addColumn("scopes", "text", (col) => col.notNull()).addColumn("code_challenge", "text", (col) => col.notNull()).addColumn("code_challenge_method", "text", (col) => col.notNull().defaultTo("S256")).addColumn("resource", "text").addColumn("expires_at", "text", (col) => col.notNull()).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addForeignKeyConstraint("auth_codes_user_fk", ["user_id"], "users", ["id"], (cb) => cb.onDelete("cascade")).execute();
 	await db.schema.createIndex("idx_auth_codes_expires").on("_emdash_authorization_codes").column("expires_at").execute();
 	await sql`ALTER TABLE _emdash_oauth_tokens ADD COLUMN client_id TEXT`.execute(db);
 }
-async function down$19(db) {
+async function down$20(db) {
 	await db.schema.dropTable("_emdash_authorization_codes").execute();
 }
 
 //#endregion
 //#region src/database/migrations/018_seo.ts
 var _018_seo_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$18,
-	up: () => up$18
+	down: () => down$19,
+	up: () => up$19
 });
 /**
 * Migration: SEO support
@@ -577,7 +585,7 @@ var _018_seo_exports = /* @__PURE__ */ __exportAll({
 * need it. The `has_seo` flag controls whether the admin shows SEO fields
 * and whether the collection's content appears in sitemaps.
 */
-async function up$18(db) {
+async function up$19(db) {
 	await db.schema.createTable("_emdash_seo").addColumn("collection", "text", (col) => col.notNull()).addColumn("content_id", "text", (col) => col.notNull()).addColumn("seo_title", "text").addColumn("seo_description", "text").addColumn("seo_image", "text").addColumn("seo_canonical", "text").addColumn("seo_no_index", "integer", (col) => col.notNull().defaultTo(0)).addColumn("created_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.notNull().defaultTo(currentTimestamp(db))).addPrimaryKeyConstraint("_emdash_seo_pk", ["collection", "content_id"]).execute();
 	await sql`
 		CREATE INDEX idx_emdash_seo_collection
@@ -588,7 +596,7 @@ async function up$18(db) {
 		ADD COLUMN has_seo INTEGER NOT NULL DEFAULT 0
 	`.execute(db);
 }
-async function down$18(db) {
+async function down$19(db) {
 	await sql`DROP TABLE IF EXISTS _emdash_seo`.execute(db);
 	await sql`
 		ALTER TABLE _emdash_collections
@@ -599,8 +607,8 @@ async function down$18(db) {
 //#endregion
 //#region src/database/migrations/019_i18n.ts
 var _019_i18n_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$17,
-	up: () => up$17
+	down: () => down$18,
+	up: () => up$18
 });
 /**
 * Quote an identifier for use in raw SQL. Escapes embedded double-quotes
@@ -713,7 +721,7 @@ async function upPostgres(db) {
 			ADD COLUMN translatable INTEGER NOT NULL DEFAULT 1
 		`.execute(db);
 }
-async function up$17(db) {
+async function up$18(db) {
 	if (!isSqlite(db)) return upPostgres(db);
 	const orphanedTmps = await listTablesLike(db, "ec_%_i18n_tmp");
 	for (const tmpName of orphanedTmps) {
@@ -830,7 +838,7 @@ async function downPostgres(db) {
 		await sql`ALTER TABLE ${sql.ref(t)} DROP COLUMN translation_group`.execute(db);
 	}
 }
-async function down$17(db) {
+async function down$18(db) {
 	if (!isSqlite(db)) return downPostgres(db);
 	await sql`
 		ALTER TABLE _emdash_fields
@@ -937,8 +945,8 @@ async function down$17(db) {
 //#endregion
 //#region src/database/migrations/020_collection_url_pattern.ts
 var _020_collection_url_pattern_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$16,
-	up: () => up$16
+	down: () => down$17,
+	up: () => up$17
 });
 /**
 * Migration: URL pattern for collections
@@ -947,13 +955,13 @@ var _020_collection_url_pattern_exports = /* @__PURE__ */ __exportAll({
 * can declare its own URL structure (e.g. "/{slug}" for pages, "/blog/{slug}"
 * for posts). Used for menu URL resolution, sitemaps, and path-based lookups.
 */
-async function up$16(db) {
+async function up$17(db) {
 	await sql`
 		ALTER TABLE _emdash_collections
 		ADD COLUMN url_pattern TEXT
 	`.execute(db);
 }
-async function down$16(db) {
+async function down$17(db) {
 	await sql`
 		ALTER TABLE _emdash_collections
 		DROP COLUMN url_pattern
@@ -963,8 +971,8 @@ async function down$16(db) {
 //#endregion
 //#region src/database/migrations/021_remove_section_categories.ts
 var _021_remove_section_categories_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$15,
-	up: () => up$15
+	down: () => down$16,
+	up: () => up$16
 });
 /**
 * Migration: Remove section categories
@@ -973,12 +981,12 @@ var _021_remove_section_categories_exports = /* @__PURE__ */ __exportAll({
 * Rather than building the missing UI for a feature with very little need at this stage,
 * we're removing the feature entirely.
 */
-async function up$15(db) {
+async function up$16(db) {
 	await db.schema.dropIndex("idx_sections_category").ifExists().execute();
 	await db.schema.alterTable("_emdash_sections").dropColumn("category_id").execute();
 	await db.schema.dropTable("_emdash_section_categories").execute();
 }
-async function down$15(db) {
+async function down$16(db) {
 	await db.schema.createTable("_emdash_section_categories").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("label", "text", (col) => col.notNull()).addColumn("sort_order", "integer", (col) => col.defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(sql`CURRENT_TIMESTAMP`)).execute();
 	await db.schema.alterTable("_emdash_sections").addColumn("category_id", "text", (col) => col.references("_emdash_section_categories.id").onDelete("set null")).execute();
 	await db.schema.createIndex("idx_sections_category").on("_emdash_sections").columns(["category_id"]).execute();
@@ -987,8 +995,8 @@ async function down$15(db) {
 //#endregion
 //#region src/database/migrations/022_marketplace_plugin_state.ts
 var _022_marketplace_plugin_state_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$14,
-	up: () => up$14
+	down: () => down$15,
+	up: () => up$15
 });
 /**
 * Migration: Add marketplace fields to _plugin_state
@@ -997,7 +1005,7 @@ var _022_marketplace_plugin_state_exports = /* @__PURE__ */ __exportAll({
 * whether a plugin was installed from config or marketplace,
 * and which marketplace version is installed.
 */
-async function up$14(db) {
+async function up$15(db) {
 	await sql`
 		ALTER TABLE _plugin_state
 		ADD COLUMN source TEXT NOT NULL DEFAULT 'config'
@@ -1012,7 +1020,7 @@ async function up$14(db) {
 		WHERE source = 'marketplace'
 	`.execute(db);
 }
-async function down$14(db) {
+async function down$15(db) {
 	await sql`
 		DROP INDEX IF EXISTS idx_plugin_state_source
 	`.execute(db);
@@ -1029,8 +1037,8 @@ async function down$14(db) {
 //#endregion
 //#region src/database/migrations/023_plugin_metadata.ts
 var _023_plugin_metadata_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$13,
-	up: () => up$13
+	down: () => down$14,
+	up: () => up$14
 });
 /**
 * Migration: Add display metadata to _plugin_state
@@ -1039,7 +1047,7 @@ var _023_plugin_metadata_exports = /* @__PURE__ */ __exportAll({
 * so the admin UI can show meaningful info without re-fetching
 * from the marketplace on every page load.
 */
-async function up$13(db) {
+async function up$14(db) {
 	await sql`
 		ALTER TABLE _plugin_state
 		ADD COLUMN display_name TEXT
@@ -1049,7 +1057,7 @@ async function up$13(db) {
 		ADD COLUMN description TEXT
 	`.execute(db);
 }
-async function down$13(db) {
+async function down$14(db) {
 	await sql`
 		ALTER TABLE _plugin_state
 		DROP COLUMN description
@@ -1063,8 +1071,8 @@ async function down$13(db) {
 //#endregion
 //#region src/database/migrations/024_media_placeholders.ts
 var _024_media_placeholders_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$12,
-	up: () => up$12
+	down: () => down$13,
+	up: () => up$13
 });
 /**
 * Migration: Add placeholder columns to media table
@@ -1072,7 +1080,7 @@ var _024_media_placeholders_exports = /* @__PURE__ */ __exportAll({
 * Stores blurhash and dominant_color for LQIP (Low Quality Image Placeholder)
 * support. Generated at upload time from image pixel data.
 */
-async function up$12(db) {
+async function up$13(db) {
 	await sql`
 		ALTER TABLE media
 		ADD COLUMN blurhash TEXT
@@ -1082,7 +1090,7 @@ async function up$12(db) {
 		ADD COLUMN dominant_color TEXT
 	`.execute(db);
 }
-async function down$12(db) {
+async function down$13(db) {
 	await sql`
 		ALTER TABLE media
 		DROP COLUMN dominant_color
@@ -1096,8 +1104,8 @@ async function down$12(db) {
 //#endregion
 //#region src/database/migrations/025_oauth_clients.ts
 var _025_oauth_clients_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$11,
-	up: () => up$11
+	down: () => down$12,
+	up: () => up$12
 });
 /**
 * Migration: Create OAuth clients table
@@ -1108,18 +1116,18 @@ var _025_oauth_clients_exports = /* @__PURE__ */ __exportAll({
 * Each client has a set of pre-registered redirect URIs (JSON array).
 * The authorize endpoint rejects any redirect_uri not in the client's list.
 */
-async function up$11(db) {
+async function up$12(db) {
 	await db.schema.createTable("_emdash_oauth_clients").addColumn("id", "text", (col) => col.primaryKey()).addColumn("name", "text", (col) => col.notNull()).addColumn("redirect_uris", "text", (col) => col.notNull()).addColumn("scopes", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 }
-async function down$11(db) {
+async function down$12(db) {
 	await db.schema.dropTable("_emdash_oauth_clients").execute();
 }
 
 //#endregion
 //#region src/database/migrations/026_cron_tasks.ts
 var _026_cron_tasks_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$10,
-	up: () => up$10
+	down: () => down$11,
+	up: () => up$11
 });
 /**
 * Migration: Create cron tasks table for plugin scheduled tasks.
@@ -1130,7 +1138,7 @@ var _026_cron_tasks_exports = /* @__PURE__ */ __exportAll({
 * The `next_run_at` + `status` + `enabled` index drives the "find overdue
 * tasks" query used by CronExecutor.tick().
 */
-async function up$10(db) {
+async function up$11(db) {
 	await db.schema.createTable("_emdash_cron_tasks").addColumn("id", "text", (col) => col.primaryKey()).addColumn("plugin_id", "text", (col) => col.notNull()).addColumn("task_name", "text", (col) => col.notNull()).addColumn("schedule", "text", (col) => col.notNull()).addColumn("is_oneshot", "integer", (col) => col.notNull().defaultTo(0)).addColumn("data", "text").addColumn("next_run_at", "text", (col) => col.notNull()).addColumn("last_run_at", "text").addColumn("status", "text", (col) => col.notNull().defaultTo("idle")).addColumn("locked_at", "text").addColumn("enabled", "integer", (col) => col.notNull().defaultTo(1)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addUniqueConstraint("uq_cron_tasks_plugin_task", ["plugin_id", "task_name"]).execute();
 	await db.schema.createIndex("idx_cron_tasks_due").on("_emdash_cron_tasks").columns([
 		"enabled",
@@ -1139,17 +1147,17 @@ async function up$10(db) {
 	]).execute();
 	await db.schema.createIndex("idx_cron_tasks_plugin").on("_emdash_cron_tasks").column("plugin_id").execute();
 }
-async function down$10(db) {
+async function down$11(db) {
 	await db.schema.dropTable("_emdash_cron_tasks").execute();
 }
 
 //#endregion
 //#region src/database/migrations/027_comments.ts
 var _027_comments_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$9,
-	up: () => up$9
+	down: () => down$10,
+	up: () => up$10
 });
-async function up$9(db) {
+async function up$10(db) {
 	await db.schema.createTable("_emdash_comments").addColumn("id", "text", (col) => col.primaryKey()).addColumn("collection", "text", (col) => col.notNull()).addColumn("content_id", "text", (col) => col.notNull()).addColumn("parent_id", "text", (col) => col.references("_emdash_comments.id").onDelete("cascade")).addColumn("author_name", "text", (col) => col.notNull()).addColumn("author_email", "text", (col) => col.notNull()).addColumn("author_url", "text").addColumn("author_user_id", "text", (col) => col.references("users.id").onDelete("set null")).addColumn("body", "text", (col) => col.notNull()).addColumn("status", "text", (col) => col.notNull().defaultTo("pending")).addColumn("ip_hash", "text").addColumn("user_agent", "text").addColumn("moderation_metadata", "text").addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_comments_content").on("_emdash_comments").columns([
 		"collection",
@@ -1165,30 +1173,30 @@ async function up$9(db) {
 	await db.schema.alterTable("_emdash_collections").addColumn("comments_closed_after_days", "integer", (col) => col.defaultTo(90)).execute();
 	await db.schema.alterTable("_emdash_collections").addColumn("comments_auto_approve_users", "integer", (col) => col.defaultTo(1)).execute();
 }
-async function down$9(db) {
+async function down$10(db) {
 	await db.schema.dropTable("_emdash_comments").execute();
 }
 
 //#endregion
 //#region src/database/migrations/028_drop_author_url.ts
 var _028_drop_author_url_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$8,
-	up: () => up$8
+	down: () => down$9,
+	up: () => up$9
 });
-async function up$8(db) {
+async function up$9(db) {
 	await sql`ALTER TABLE _emdash_comments DROP COLUMN author_url`.execute(db);
 }
-async function down$8(db) {
+async function down$9(db) {
 	await db.schema.alterTable("_emdash_comments").addColumn("author_url", "text").execute();
 }
 
 //#endregion
 //#region src/database/migrations/029_redirects.ts
 var _029_redirects_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$7,
-	up: () => up$7
+	down: () => down$8,
+	up: () => up$8
 });
-async function up$7(db) {
+async function up$8(db) {
 	await db.schema.createTable("_emdash_redirects").addColumn("id", "text", (col) => col.primaryKey()).addColumn("source", "text", (col) => col.notNull()).addColumn("destination", "text", (col) => col.notNull()).addColumn("type", "integer", (col) => col.notNull().defaultTo(301)).addColumn("is_pattern", "integer", (col) => col.notNull().defaultTo(0)).addColumn("enabled", "integer", (col) => col.notNull().defaultTo(1)).addColumn("hits", "integer", (col) => col.notNull().defaultTo(0)).addColumn("last_hit_at", "text").addColumn("group_name", "text").addColumn("auto", "integer", (col) => col.notNull().defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await db.schema.createIndex("idx_redirects_source").on("_emdash_redirects").column("source").execute();
 	await db.schema.createIndex("idx_redirects_enabled").on("_emdash_redirects").column("enabled").execute();
@@ -1197,7 +1205,7 @@ async function up$7(db) {
 	await db.schema.createIndex("idx_404_log_path").on("_emdash_404_log").column("path").execute();
 	await db.schema.createIndex("idx_404_log_created").on("_emdash_404_log").column("created_at").execute();
 }
-async function down$7(db) {
+async function down$8(db) {
 	await db.schema.dropTable("_emdash_404_log").execute();
 	await db.schema.dropTable("_emdash_redirects").execute();
 }
@@ -1205,8 +1213,8 @@ async function down$7(db) {
 //#endregion
 //#region src/database/migrations/030_widen_scheduled_index.ts
 var _030_widen_scheduled_index_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$6,
-	up: () => up$6
+	down: () => down$7,
+	up: () => up$7
 });
 /**
 * Migration: Widen scheduled publishing index
@@ -1215,7 +1223,7 @@ var _030_widen_scheduled_index_exports = /* @__PURE__ */ __exportAll({
 * Published posts can now have scheduled draft changes, so widen the
 * index to cover all rows where scheduled_at IS NOT NULL.
 */
-async function up$6(db) {
+async function up$7(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1229,7 +1237,7 @@ async function up$6(db) {
 		`.execute(db);
 	}
 }
-async function down$6(db) {
+async function down$7(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1247,10 +1255,10 @@ async function down$6(db) {
 //#endregion
 //#region src/database/migrations/031_bylines.ts
 var _031_bylines_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$5,
-	up: () => up$5
+	down: () => down$6,
+	up: () => up$6
 });
-async function up$5(db) {
+async function up$6(db) {
 	await db.schema.createTable("_emdash_bylines").addColumn("id", "text", (col) => col.primaryKey()).addColumn("slug", "text", (col) => col.notNull().unique()).addColumn("display_name", "text", (col) => col.notNull()).addColumn("bio", "text").addColumn("avatar_media_id", "text", (col) => col.references("media.id").onDelete("set null")).addColumn("website_url", "text").addColumn("user_id", "text", (col) => col.references("users.id").onDelete("set null")).addColumn("is_guest", "integer", (col) => col.notNull().defaultTo(0)).addColumn("created_at", "text", (col) => col.defaultTo(currentTimestamp(db))).addColumn("updated_at", "text", (col) => col.defaultTo(currentTimestamp(db))).execute();
 	await sql`
 		CREATE UNIQUE INDEX ${sql.ref("idx_bylines_user_id_unique")}
@@ -1282,7 +1290,7 @@ async function up$5(db) {
 		`.execute(db);
 	}
 }
-async function down$5(db) {
+async function down$6(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		await sql`
@@ -1300,8 +1308,8 @@ async function down$5(db) {
 //#endregion
 //#region src/database/migrations/032_rate_limits.ts
 var _032_rate_limits_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$4,
-	up: () => up$4
+	down: () => down$5,
+	up: () => up$5
 });
 /**
 * Migration: Rate limits table + device code polling tracking.
@@ -1312,12 +1320,12 @@ var _032_rate_limits_exports = /* @__PURE__ */ __exportAll({
 * 2. Add last_polled_at column to _emdash_device_codes for
 *    RFC 8628 slow_down enforcement.
 */
-async function up$4(db) {
+async function up$5(db) {
 	await db.schema.createTable("_emdash_rate_limits").addColumn("key", "text", (col) => col.notNull()).addColumn("window", "text", (col) => col.notNull()).addColumn("count", "integer", (col) => col.notNull().defaultTo(1)).addPrimaryKeyConstraint("pk_rate_limits", ["key", "window"]).execute();
 	await db.schema.createIndex("idx_rate_limits_window").on("_emdash_rate_limits").column("window").execute();
 	await db.schema.alterTable("_emdash_device_codes").addColumn("last_polled_at", "text").execute();
 }
-async function down$4(db) {
+async function down$5(db) {
 	await db.schema.dropTable("_emdash_rate_limits").execute();
 	await db.schema.alterTable("_emdash_device_codes").dropColumn("last_polled_at").execute();
 }
@@ -1325,8 +1333,8 @@ async function down$4(db) {
 //#endregion
 //#region src/database/migrations/033_optimize_content_indexes.ts
 var _033_optimize_content_indexes_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$3,
-	up: () => up$3
+	down: () => down$4,
+	up: () => up$4
 });
 /**
 * Migration: Optimize content table indexes for D1 performance
@@ -1339,7 +1347,7 @@ var _033_optimize_content_indexes_exports = /* @__PURE__ */ __exportAll({
 *
 * Impact: Reduces D1 row reads by 90%+ for admin panel operations.
 */
-async function up$3(db) {
+async function up$4(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1381,7 +1389,7 @@ async function up$3(db) {
 		WHERE status = 'trash'
 	`.execute(db);
 }
-async function down$3(db) {
+async function down$4(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1414,10 +1422,10 @@ async function down$3(db) {
 //#endregion
 //#region src/database/migrations/034_published_at_index.ts
 var _034_published_at_index_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$2,
-	up: () => up$2
+	down: () => down$3,
+	up: () => up$3
 });
-async function up$2(db) {
+async function up$3(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1427,7 +1435,7 @@ async function up$2(db) {
 		`.execute(db);
 	}
 }
-async function down$2(db) {
+async function down$3(db) {
 	const tableNames = await listTablesLike(db, "ec_%");
 	for (const tableName of tableNames) {
 		const table = { name: tableName };
@@ -1438,8 +1446,8 @@ async function down$2(db) {
 //#endregion
 //#region src/database/migrations/035_bounded_404_log.ts
 var _035_bounded_404_log_exports = /* @__PURE__ */ __exportAll({
-	down: () => down$1,
-	up: () => up$1
+	down: () => down$2,
+	up: () => up$2
 });
 /**
 * Migration: Bounded 404 logging
@@ -1457,7 +1465,7 @@ var _035_bounded_404_log_exports = /* @__PURE__ */ __exportAll({
 *     path and summing hits
 *   - Adds a UNIQUE index on `path` so upsert semantics work
 */
-async function up$1(db) {
+async function up$2(db) {
 	const hitsExists = await columnExists(db, "_emdash_404_log", "hits");
 	if (!hitsExists) await db.schema.alterTable("_emdash_404_log").addColumn("hits", "integer", (col) => col.notNull().defaultTo(1)).execute();
 	if (!await columnExists(db, "_emdash_404_log", "last_seen_at")) await db.schema.alterTable("_emdash_404_log").addColumn("last_seen_at", "text").execute();
@@ -1506,7 +1514,7 @@ async function up$1(db) {
 	await db.schema.dropIndex("idx_404_log_path").ifExists().execute();
 	await db.schema.createIndex("idx_404_log_last_seen").ifNotExists().on("_emdash_404_log").column("last_seen_at").execute();
 }
-async function down$1(db) {
+async function down$2(db) {
 	await db.schema.dropIndex("idx_404_log_last_seen").ifExists().execute();
 	await db.schema.dropIndex("idx_404_log_path_unique").ifExists().execute();
 	await db.schema.createIndex("idx_404_log_path").ifNotExists().on("_emdash_404_log").column("path").execute();
@@ -1517,8 +1525,8 @@ async function down$1(db) {
 //#endregion
 //#region src/database/migrations/036_i18n_menus_and_taxonomies.ts
 var _036_i18n_menus_and_taxonomies_exports = /* @__PURE__ */ __exportAll({
-	down: () => down,
-	up: () => up
+	down: () => down$1,
+	up: () => up$1
 });
 /**
 * i18n for menus + taxonomies. Adds `locale` + `translation_group` to system
@@ -1529,7 +1537,7 @@ var _036_i18n_menus_and_taxonomies_exports = /* @__PURE__ */ __exportAll({
 function getDefaultLocale() {
 	return getI18nConfig()?.defaultLocale ?? "en";
 }
-async function up(db) {
+async function up$1(db) {
 	const defaultLocale = getDefaultLocale();
 	if (isSqlite(db)) {
 		await sql.raw(`PRAGMA foreign_keys = OFF`).execute(db);
@@ -1718,7 +1726,7 @@ async function assertSingleLocale(db, defaultLocale) {
 		if (count > 0) throw new Error(`Cannot revert migration 036_i18n_menus_and_taxonomies: ${count} row(s) in "${table}" use a non-default locale (defaultLocale="${defaultLocale}"). Reverting would drop them silently. Export translations first (or delete them) and re-run the rollback. See packages/core/src/database/migrations/036_i18n_menus_and_taxonomies.ts.`);
 	}
 }
-async function down(db) {
+async function down$1(db) {
 	const defaultLocale = getDefaultLocale();
 	await assertSingleLocale(db, defaultLocale);
 	const widenedTables = [
@@ -1807,6 +1815,19 @@ async function rebuildTaxonomyDefsDown(db) {
 	await sql`ALTER TABLE _emdash_taxonomy_defs_old RENAME TO _emdash_taxonomy_defs`.execute(db);
 }
 
+//#endregion
+//#region src/database/migrations/037_credential_algorithm.ts
+var _037_credential_algorithm_exports = /* @__PURE__ */ __exportAll({
+	down: () => down,
+	up: () => up
+});
+async function up(db) {
+	if (!await columnExists(db, "credentials", "algorithm")) await db.schema.alterTable("credentials").addColumn("algorithm", "integer", (col) => col.notNull().defaultTo(-7)).execute();
+}
+async function down(db) {
+	if (await columnExists(db, "credentials", "algorithm")) await db.schema.alterTable("credentials").dropColumn("algorithm").execute();
+}
+
 //#endregion
 //#region src/database/migrations/runner.ts
 const MIGRATIONS = Object.freeze({
@@ -1844,7 +1865,8 @@ const MIGRATIONS = Object.freeze({
 	"033_optimize_content_indexes": _033_optimize_content_indexes_exports,
 	"034_published_at_index": _034_published_at_index_exports,
 	"035_bounded_404_log": _035_bounded_404_log_exports,
-	"036_i18n_menus_and_taxonomies": _036_i18n_menus_and_taxonomies_exports
+	"036_i18n_menus_and_taxonomies": _036_i18n_menus_and_taxonomies_exports,
+	"037_credential_algorithm": _037_credential_algorithm_exports
 });
 /** Total number of registered migrations. Exported for use in tests. */
 const MIGRATION_COUNT = Object.keys(MIGRATIONS).length;
@@ -2041,4 +2063,4 @@ async function rollbackMigration(db) {
 
 //#endregion
 export { __exportAll as i, rollbackMigration as n, runMigrations as r, getMigrationStatus as t };
-//# sourceMappingURL=runner-DMnlIkh4.mjs.map
+//# sourceMappingURL=runner-DIcU2UCC.mjs.map