mcp-scraper 0.68.0 → 0.69.0

package/dist/{chunk-SZEDXVJH.js → chunk-KO5CK5ZT.js}

@@ -908,9 +908,26 @@ function optionalString(record, ...keys) {
   }
   return void 0;
 }
+function providerReceiptRecord(receipt) {
+  const record = recordValue(receipt);
+  const structured = recordValue(record.structuredContent);
+  if (Object.keys(structured).length > 0) return structured;
+  const content = Array.isArray(record.content) ? record.content : [];
+  for (const item of content) {
+    const block = recordValue(item);
+    if (block.type !== "text" || typeof block.text !== "string" || block.text.length > 1e6) continue;
+    try {
+      const parsed = JSON.parse(block.text);
+      const parsedRecord = recordValue(parsed);
+      if (Object.keys(parsedRecord).length > 0) return parsedRecord;
+    } catch {
+    }
+  }
+  return record;
+}
 function normalizeProviderReceipt(platform, receipt, stableEventId) {
   void getAnalyticsProviderDefinition(platform);
-  const record = receipt && typeof receipt === "object" ? receipt : {};
+  const record = providerReceiptRecord(receipt);
   const warnings = [record.warnings, record.messages, record.fieldWarnings].flatMap((value) => Array.isArray(value) ? value : []).map((value) => {
     if (typeof value === "string") return value;
     const warning = recordValue(value);
@@ -1748,6 +1765,600 @@ async function migrateAnalytics() {
     await client.query(
       `ALTER TABLE analytics_connections ADD COLUMN IF NOT EXISTS last_verified_receipt_id uuid`
     );
+    await client.query(
+      `ALTER TABLE analytics_sessions ADD COLUMN IF NOT EXISTS public_ref text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS public_ref text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS event_definition_id uuid REFERENCES analytics_event_definitions(id) ON DELETE SET NULL`
+    );
+    await client.query(
+      `ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS event_definition_version integer`
+    );
+    await client.query(
+      `ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS value_source text NOT NULL DEFAULT 'default_zero' CHECK (value_source IN ('absent','default_zero','fixed','dynamic','conditional_override','provider','verified_revenue','restatement'))`
+    );
+    await client.query(
+      `ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS value_provenance jsonb NOT NULL DEFAULT '{}'::jsonb`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS touch_kind text NOT NULL DEFAULT 'click' CHECK (touch_kind IN ('click','view','direct','organic','referral','email','sms','call','other'))`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS platform text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS account_id text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS campaign_id text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS ad_set_id text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS ad_id text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS creative_id text`
+    );
+    await client.query(
+      `ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS placement text`
+    );
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_onboarding_presentations (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        preferences jsonb NOT NULL DEFAULT '{}'::jsonb,
+        last_presented_step text,
+        dismissed_help jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, user_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_funnel_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        stages jsonb NOT NULL CHECK (jsonb_typeof(stages) = 'array'),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        is_default boolean NOT NULL DEFAULT false,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_saved_views (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        name text NOT NULL,
+        report_type text NOT NULL,
+        schema_version integer NOT NULL DEFAULT 1 CHECK (schema_version > 0),
+        settings jsonb NOT NULL DEFAULT '{}'::jsonb,
+        is_default boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, owner_user_id, report_type, name)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_product_milestones (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        milestone text NOT NULL,
+        evidence_kind text NOT NULL,
+        evidence_ref text,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        safe_metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+        UNIQUE(site_id, user_id, milestone)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_purpose_policies (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        purpose text NOT NULL CHECK (purpose IN ('necessary','site_analytics','enhanced_matching','advertising_measurement')),
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        retention_days integer CHECK (retention_days IS NULL OR retention_days > 0),
+        enabled boolean NOT NULL DEFAULT true,
+        policy jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        retired_at timestamptz,
+        UNIQUE(site_id, purpose, policy_version, jurisdiction_profile)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_consent_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        subject_ref text NOT NULL,
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        necessary boolean NOT NULL DEFAULT true CHECK (necessary),
+        site_analytics boolean NOT NULL DEFAULT false,
+        enhanced_matching boolean NOT NULL DEFAULT false,
+        advertising_measurement boolean NOT NULL DEFAULT false,
+        gpc boolean NOT NULL DEFAULT false,
+        action text NOT NULL CHECK (action IN ('accept_all','reject_all','save_choices','withdraw','gpc')),
+        source text NOT NULL CHECK (source IN ('gateway','api','gpc','system')),
+        presented_at timestamptz,
+        occurred_at timestamptz NOT NULL,
+        expires_at timestamptz,
+        supersedes_id uuid REFERENCES analytics_consent_receipts(id) ON DELETE SET NULL,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await client.query(
+      `ALTER TABLE analytics_consent_receipts ADD COLUMN IF NOT EXISTS presented_at timestamptz`
+    );
+    await client.query(`
+      DO $$
+      BEGIN
+        IF NOT EXISTS (
+          SELECT 1 FROM pg_constraint
+           WHERE conrelid = 'analytics_consent_receipts'::regclass
+             AND conname = 'analytics_consent_receipts_presentation_order_check'
+        ) THEN
+          ALTER TABLE analytics_consent_receipts
+            ADD CONSTRAINT analytics_consent_receipts_presentation_order_check
+            CHECK (presented_at IS NULL OR presented_at <= occurred_at);
+        END IF;
+      END $$
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_consent_current_state (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        subject_ref text NOT NULL,
+        latest_receipt_id uuid NOT NULL REFERENCES analytics_consent_receipts(id) ON DELETE CASCADE,
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        necessary boolean NOT NULL DEFAULT true CHECK (necessary),
+        site_analytics boolean NOT NULL DEFAULT false,
+        enhanced_matching boolean NOT NULL DEFAULT false,
+        advertising_measurement boolean NOT NULL DEFAULT false,
+        gpc boolean NOT NULL DEFAULT false,
+        effective_at timestamptz NOT NULL,
+        expires_at timestamptz,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, subject_ref)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_namespaces (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','approved','disabled','archived')),
+        approved_hosts jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(approved_hosts) = 'array'),
+        approved_sources jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(approved_sources) = 'array'),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version),
+        UNIQUE(id, site_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_sources (
+        id uuid PRIMARY KEY,
+        namespace_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        source_kind text NOT NULL CHECK (source_kind IN ('pixel','host','form','crm','call','server','import')),
+        source_ref text NOT NULL,
+        status text NOT NULL DEFAULT 'approved' CHECK (status IN ('pending','approved','revoked')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        revoked_at timestamptz,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(namespace_id, source_kind, source_ref)
+      )
+    `);
+    await client.query(
+      `ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS namespace_id uuid REFERENCES analytics_identity_namespaces(id) ON DELETE RESTRICT`
+    );
+    await client.query(
+      `ALTER TABLE analytics_identity_nodes ADD COLUMN IF NOT EXISTS namespace_id uuid REFERENCES analytics_identity_namespaces(id) ON DELETE RESTRICT`
+    );
+    await client.query(
+      `ALTER TABLE analytics_identity_edges ADD COLUMN IF NOT EXISTS namespace_id uuid REFERENCES analytics_identity_namespaces(id) ON DELETE RESTRICT`
+    );
+    await client.query(
+      "CREATE UNIQUE INDEX IF NOT EXISTS analytics_identity_nodes_namespace_ref ON analytics_identity_nodes(id, site_id, namespace_id)"
+    );
+    await client.query(
+      "CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_namespace_ref ON analytics_people(id, site_id, namespace_id)"
+    );
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_associations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        left_identity_node_id uuid NOT NULL,
+        right_identity_node_id uuid NOT NULL,
+        confidence numeric(5,4) NOT NULL CHECK (confidence >= 0 AND confidence <= 1),
+        confidence_band text NOT NULL CHECK (confidence_band IN ('high','medium','low','ineligible')),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','expired','rejected','promoted','deleted')),
+        consent_receipt_id uuid NOT NULL REFERENCES analytics_consent_receipts(id) ON DELETE RESTRICT,
+        model_version text NOT NULL,
+        first_observed_at timestamptz NOT NULL,
+        last_observed_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL,
+        promoted_person_id uuid,
+        promoted_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK (left_identity_node_id <> right_identity_node_id),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(left_identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(right_identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(promoted_person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE RESTRICT,
+        UNIQUE(namespace_id, left_identity_node_id, right_identity_node_id, model_version),
+        UNIQUE(id, namespace_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_evidence (
+        id uuid PRIMARY KEY,
+        association_id uuid NOT NULL,
+        namespace_id uuid NOT NULL,
+        feature_kind text NOT NULL CHECK (feature_kind IN ('device_bucket','browser_bucket','coarse_geo','network_bucket','temporal_pattern','journey_pattern')),
+        feature_hmac text NOT NULL,
+        contribution numeric(6,5) NOT NULL CHECK (contribution >= -1 AND contribution <= 1),
+        observed_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(association_id, feature_kind, feature_hmac)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_promotions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        association_id uuid NOT NULL,
+        person_id uuid NOT NULL,
+        evidence_kind text NOT NULL CHECK (evidence_kind IN ('verified_email','verified_phone','crm_contact','signed_linker','authenticated_user')),
+        evidence_ref_hmac text NOT NULL,
+        promoted_by text NOT NULL CHECK (promoted_by IN ('system','user')),
+        promoted_by_user_id bigint,
+        promoted_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(association_id, person_id)
+      )
+    `);
+    await client.query(
+      "CREATE UNIQUE INDEX IF NOT EXISTS analytics_touches_site_ref ON analytics_attribution_touches(id, site_id)"
+    );
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_attribution_touches (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        association_id uuid NOT NULL,
+        touch_id uuid NOT NULL,
+        eligibility text NOT NULL DEFAULT 'overlay_only' CHECK (eligibility IN ('overlay_only','review','ineligible','expired')),
+        association_confidence numeric(5,4) NOT NULL CHECK (association_confidence >= 0 AND association_confidence <= 1),
+        model_version text NOT NULL,
+        linked_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(touch_id, site_id) REFERENCES analytics_attribution_touches(id, site_id) ON DELETE CASCADE,
+        UNIQUE(association_id, touch_id, model_version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_value_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        event_definition_id uuid NOT NULL REFERENCES analytics_event_definitions(id) ON DELETE CASCADE,
+        version integer NOT NULL CHECK (version > 0),
+        base_mode text NOT NULL DEFAULT 'none' CHECK (base_mode IN ('none','fixed','dynamic')),
+        fixed_value_minor bigint,
+        currency text NOT NULL DEFAULT 'USD',
+        dynamic_source jsonb,
+        conditional_event_definition_id uuid REFERENCES analytics_event_definitions(id) ON DELETE SET NULL,
+        conditional_window_days integer CHECK (conditional_window_days IS NULL OR conditional_window_days > 0),
+        conditional_value_minor bigint,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK ((base_mode = 'fixed') = (fixed_value_minor IS NOT NULL)),
+        CHECK ((conditional_event_definition_id IS NULL) = (conditional_value_minor IS NULL)),
+        UNIQUE(site_id, event_definition_id, version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_value_evaluations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        source_event_id uuid NOT NULL REFERENCES analytics_events(id) ON DELETE CASCADE,
+        definition_id uuid REFERENCES analytics_event_value_definitions(id) ON DELETE SET NULL,
+        definition_version integer,
+        value_minor bigint,
+        currency text,
+        value_source text NOT NULL CHECK (value_source IN ('absent','default_zero','fixed','dynamic','conditional_override','provider','verified_revenue','restatement')),
+        matched_event_id uuid REFERENCES analytics_events(id) ON DELETE SET NULL,
+        provenance jsonb NOT NULL DEFAULT '{}'::jsonb,
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, source_event_id, definition_version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_data_class_policies (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        data_class text NOT NULL,
+        purpose text NOT NULL,
+        jurisdiction_profile text NOT NULL,
+        retention_days integer CHECK (retention_days IS NULL OR retention_days > 0),
+        storage_kind text NOT NULL CHECK (storage_kind IN ('ordinary','pseudonymous','encrypted_restricted','ephemeral')),
+        withdrawal_action text NOT NULL CHECK (withdrawal_action IN ('stop_future','expire','delete','retain_necessary')),
+        deletion_action text NOT NULL CHECK (deletion_action IN ('delete','anonymize','retain_legal')),
+        read_surface text NOT NULL,
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, data_class, jurisdiction_profile, version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_privacy_audits (
+        id uuid PRIMARY KEY,
+        site_id uuid REFERENCES analytics_sites(id) ON DELETE SET NULL,
+        namespace_ref text,
+        subject_ref text,
+        action text NOT NULL CHECK (action IN ('export_requested','export_completed','deletion_requested','deletion_completed','withdrawal_applied','retention_expired','candidate_promoted')),
+        idempotency_key text NOT NULL,
+        actor_user_id bigint,
+        result_code text NOT NULL,
+        affected_counts jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `);
+    await client.query("ALTER TABLE analytics_privacy_audits ADD COLUMN IF NOT EXISTS request_fingerprint text");
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provider_capabilities (
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL CHECK (contract_version > 0),
+        capabilities jsonb NOT NULL DEFAULT '{}'::jsonb,
+        documentation_refs jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        retired_at timestamptz,
+        PRIMARY KEY(provider, contract_version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provisioning_plans (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL CHECK (contract_version > 0),
+        tenant_schema_version text,
+        plan jsonb NOT NULL,
+        status text NOT NULL DEFAULT 'preview' CHECK (status IN ('preview','approved','applying','verified','failed','reverted')),
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provisioning_receipts (
+        id uuid PRIMARY KEY,
+        plan_id uuid NOT NULL REFERENCES analytics_crm_provisioning_plans(id) ON DELETE CASCADE,
+        operation text NOT NULL CHECK (operation IN ('describe','discover','create_field','test_write','revert_test','verify')),
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','reverted')),
+        external_object_ref text,
+        safe_error_code text,
+        warnings jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_person_mappings (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL,
+        provider_person_ref text NOT NULL,
+        mapping_version integer NOT NULL DEFAULT 1 CHECK (mapping_version > 0),
+        last_synced_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(connection_id, person_id),
+        UNIQUE(connection_id, provider_person_ref)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_pipeline_mappings (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        funnel_definition_id uuid REFERENCES analytics_funnel_definitions(id) ON DELETE SET NULL,
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        mapping jsonb NOT NULL,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(connection_id, version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_state (
+        connection_id uuid PRIMARY KEY REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provisioning_plan_id uuid REFERENCES analytics_crm_provisioning_plans(id) ON DELETE SET NULL,
+        cursor jsonb,
+        direction text NOT NULL DEFAULT 'bidirectional' CHECK (direction IN ('inbound','outbound','bidirectional','webhook_only')),
+        status text NOT NULL DEFAULT 'idle' CHECK (status IN ('idle','pending','running','healthy','degraded','disabled')),
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_success_at timestamptz,
+        last_error_code text,
+        next_sync_at timestamptz,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        direction text NOT NULL CHECK (direction IN ('inbound','outbound')),
+        operation text NOT NULL CHECK (operation IN ('person_upsert','activity_append','pipeline_update','schema_read','historical_pull')),
+        subject_ref text,
+        external_receipt_id text,
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','retrying')),
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_score_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        score_kind text NOT NULL CHECK (score_kind IN ('fit','engagement','combined')),
+        rules jsonb NOT NULL CHECK (jsonb_typeof(rules) = 'array'),
+        thresholds jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(thresholds) = 'array'),
+        minimum_score integer NOT NULL DEFAULT 0,
+        maximum_score integer NOT NULL DEFAULT 100 CHECK (maximum_score >= minimum_score),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_score_evaluations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        definition_id uuid NOT NULL REFERENCES analytics_score_definitions(id) ON DELETE CASCADE,
+        definition_version integer NOT NULL CHECK (definition_version > 0),
+        person_id uuid,
+        candidate_association_id uuid,
+        score integer NOT NULL,
+        band text,
+        contributions jsonb NOT NULL DEFAULT '[]'::jsonb,
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(candidate_association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        CHECK ((person_id IS NOT NULL)::integer + (candidate_association_id IS NOT NULL)::integer = 1)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_targets (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        name text NOT NULL,
+        target_event_definition_id uuid NOT NULL REFERENCES analytics_event_definitions(id) ON DELETE RESTRICT,
+        horizon_days integer NOT NULL CHECK (horizon_days > 0),
+        minimum_confirmed_people integer NOT NULL CHECK (minimum_confirmed_people > 0),
+        minimum_positive_outcomes integer NOT NULL CHECK (minimum_positive_outcomes > 0),
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','eligible','training','active','degraded','disabled')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(id, site_id, namespace_id),
+        UNIQUE(namespace_id, name)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_manifests (
+        id uuid PRIMARY KEY,
+        target_id uuid NOT NULL REFERENCES analytics_prediction_targets(id) ON DELETE CASCADE,
+        model_version text NOT NULL,
+        training_window_start timestamptz NOT NULL,
+        training_window_end timestamptz NOT NULL,
+        confirmed_people_count integer NOT NULL CHECK (confirmed_people_count >= 0),
+        positive_outcome_count integer NOT NULL CHECK (positive_outcome_count >= 0),
+        calibration jsonb NOT NULL DEFAULT '{}'::jsonb,
+        feature_manifest jsonb NOT NULL DEFAULT '{}'::jsonb,
+        status text NOT NULL CHECK (status IN ('ineligible','training','validated','active','degraded','retired')),
+        trained_at timestamptz,
+        activated_at timestamptz,
+        retired_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(target_id, model_version),
+        UNIQUE(id, target_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_results (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        target_id uuid NOT NULL,
+        manifest_id uuid NOT NULL,
+        person_id uuid NOT NULL,
+        probability numeric(7,6) NOT NULL CHECK (probability >= 0 AND probability <= 1),
+        expected_value_minor bigint,
+        currency text,
+        status text NOT NULL DEFAULT 'available' CHECK (status IN ('available','stale','superseded','deleted')),
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(target_id, site_id, namespace_id) REFERENCES analytics_prediction_targets(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(manifest_id, target_id) REFERENCES analytics_prediction_manifests(id, target_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(manifest_id, person_id)
+      )
+    `);
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS analytics_ad_spend_facts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        bucket date NOT NULL,
+        platform text NOT NULL,
+        account_id text,
+        campaign_id text,
+        campaign_name text,
+        ad_set_id text,
+        ad_set_name text,
+        ad_id text,
+        ad_name text,
+        creative_id text,
+        placement text,
+        spend_minor bigint NOT NULL CHECK (spend_minor >= 0),
+        currency text NOT NULL,
+        source_ref text NOT NULL,
+        source_updated_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, platform, bucket, source_ref)
+      )
+    `);
     await client.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_exports_owner_idempotency
       ON analytics_exports(requested_by_user_id, idempotency_key) WHERE idempotency_key IS NOT NULL`);
     await client.query(
@@ -1798,9 +2409,93 @@ async function migrateAnalytics() {
     await client.query(
       "CREATE INDEX IF NOT EXISTS analytics_linker_tokens_expiry ON analytics_linker_tokens(expires_at) WHERE consumed_at IS NULL"
     );
+    await client.query(
+      "CREATE UNIQUE INDEX IF NOT EXISTS analytics_sessions_site_public_ref ON analytics_sessions(site_id, public_ref) WHERE public_ref IS NOT NULL"
+    );
+    await client.query(
+      "CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_site_public_ref ON analytics_people(site_id, public_ref) WHERE public_ref IS NOT NULL"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_sessions_keyset ON analytics_sessions(site_id, started_at DESC, id DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_events_keyset ON analytics_events(site_id, occurred_at DESC, id DESC)"
+    );
+    await client.query(
+      "CREATE UNIQUE INDEX IF NOT EXISTS analytics_funnels_one_default ON analytics_funnel_definitions(site_id) WHERE is_default AND status = 'active'"
+    );
+    await client.query(
+      "CREATE UNIQUE INDEX IF NOT EXISTS analytics_saved_views_one_default ON analytics_saved_views(site_id, owner_user_id, report_type) WHERE is_default"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_product_milestones_site_time ON analytics_product_milestones(site_id, occurred_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_consent_receipts_subject_time ON analytics_consent_receipts(site_id, subject_ref, occurred_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_consent_receipts_expiry ON analytics_consent_receipts(expires_at) WHERE expires_at IS NOT NULL"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_consent_current_expiry ON analytics_consent_current_state(expires_at) WHERE expires_at IS NOT NULL"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_identity_sources_site ON analytics_identity_sources(site_id, namespace_id, status)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_candidates_active_expiry ON analytics_candidate_associations(namespace_id, expires_at) WHERE status = 'active'"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_candidates_review ON analytics_candidate_associations(namespace_id, confidence_band, updated_at DESC) WHERE status = 'active'"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_candidate_evidence_expiry ON analytics_candidate_evidence(expires_at)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_candidate_promotions_person_time ON analytics_candidate_promotions(site_id, person_id, promoted_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_candidate_touches_overlay ON analytics_candidate_attribution_touches(site_id, namespace_id, linked_at DESC) WHERE eligibility = 'overlay_only'"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_candidate_touches_expiry ON analytics_candidate_attribution_touches(expires_at) WHERE eligibility IN ('overlay_only','review')"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_value_evaluations_event ON analytics_event_value_evaluations(site_id, source_event_id)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_privacy_audits_site_time ON analytics_privacy_audits(site_id, created_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_crm_provisioning_connection_time ON analytics_crm_provisioning_plans(connection_id, created_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_crm_sync_due ON analytics_crm_sync_state(status, next_sync_at) WHERE next_sync_at IS NOT NULL"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_crm_sync_receipts_connection_time ON analytics_crm_sync_receipts(connection_id, occurred_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_scores_person_time ON analytics_score_evaluations(site_id, person_id, evaluated_at DESC) WHERE person_id IS NOT NULL"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_scores_candidate_time ON analytics_score_evaluations(site_id, candidate_association_id, evaluated_at DESC) WHERE candidate_association_id IS NOT NULL"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_prediction_results_person_time ON analytics_prediction_results(site_id, person_id, evaluated_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_prediction_results_expiry ON analytics_prediction_results(expires_at) WHERE status = 'available'"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_touches_hierarchy ON analytics_attribution_touches(site_id, platform, account_id, campaign_id, ad_set_id, ad_id, occurred_at DESC)"
+    );
+    await client.query(
+      "CREATE INDEX IF NOT EXISTS analytics_spend_facts_hierarchy ON analytics_ad_spend_facts(site_id, platform, account_id, campaign_id, ad_set_id, ad_id, bucket DESC)"
+    );
     await client.query(`
       INSERT INTO analytics_schema_migrations(version)
-      VALUES ('2026-08-05.1'), ('2026-08-05.2'), ('2026-08-05.3'), ('2026-08-05.4'), ('2026-08-05.5'), ('2026-08-05.6'), ('2026-08-05.7'), ('2026-08-05.8'), ('2026-08-05.9'), ('2026-08-05.10'), ('2026-08-05.11'), ('2026-08-05.12'), ('2026-08-05.13'), ('2026-08-05.14'), ('2026-08-26.1'), ('2026-08-26.2'), ('2026-08-26.3'), ('2026-08-26.4')
+      VALUES ('2026-08-05.1'), ('2026-08-05.2'), ('2026-08-05.3'), ('2026-08-05.4'), ('2026-08-05.5'), ('2026-08-05.6'), ('2026-08-05.7'), ('2026-08-05.8'), ('2026-08-05.9'), ('2026-08-05.10'), ('2026-08-05.11'), ('2026-08-05.12'), ('2026-08-05.13'), ('2026-08-05.14'), ('2026-08-26.1'), ('2026-08-26.2'), ('2026-08-26.3'), ('2026-08-26.4'), ('2026-08-27.1')
       ON CONFLICT (version) DO NOTHING
     `);
     await client.query("COMMIT");
@@ -4301,14 +4996,14 @@ async function setAnalyticsActivationReadiness(input) {
     );
   }
   const evidencePredicate = input.evidenceKind === "provider_test" ? `EXISTS (SELECT 1 FROM analytics_activation_destination_tests t
-                WHERE t.id=$5 AND t.destination_id=d.id AND t.accepted=true)` : input.evidenceKind === "real_delivery" ? `EXISTS (SELECT 1 FROM analytics_activation_delivery_attempts a
-                  WHERE a.id=$5 AND a.destination_id=d.id AND a.accepted=true)` : `EXISTS (SELECT 1 FROM analytics_activation_destination_tests t
-                  WHERE t.id=$5 AND t.destination_id=d.id AND t.safe_error_category IS NOT NULL)`;
+                WHERE t.id=$5::uuid AND t.destination_id=d.id AND t.accepted=true)` : input.evidenceKind === "real_delivery" ? `EXISTS (SELECT 1 FROM analytics_activation_delivery_attempts a
+                  WHERE a.id=$5::uuid AND a.destination_id=d.id AND a.accepted=true)` : `EXISTS (SELECT 1 FROM analytics_activation_destination_tests t
+                  WHERE t.id=$5::uuid AND t.destination_id=d.id AND t.safe_error_category IS NOT NULL)`;
   const result = await getAnalyticsPool().query(
     `UPDATE analytics_activation_destinations d
         SET readiness=$3, updated_at=now(),
             last_tested_at=CASE WHEN $3='verified' THEN now() ELSE last_tested_at END,
-            last_receipt_id=CASE WHEN $3 IN ('verified','live') THEN $5 ELSE last_receipt_id END
+            last_receipt_id=CASE WHEN $3 IN ('verified','live') THEN $5::text ELSE last_receipt_id END
       WHERE d.id=$1 AND d.site_id=$2 AND d.readiness = ANY($4::text[])
         AND ${evidencePredicate}
       RETURNING d.readiness`,