mcp-scraper 0.88.2 → 0.89.1

package/dist/chunk-645LQBE7.js

@@ -0,0 +1,2595 @@
+import{a as Q,d as Se}from"./chunk-D6IQJP64.js";import{createHash as pe,createHmac as Yt,randomBytes as P,randomUUID as y}from"crypto";import{Pool as Wt}from"pg";var ct=[[/perplexity/i,"llm","Perplexity"],[/chatgpt|chat\.openai|openai/i,"llm","ChatGPT"],[/claude|anthropic/i,"llm","Claude"],[/\bgrok\b|xai/i,"llm","Grok"],[/ai[ _-]?overview|google[ _-]?ai|\bsge\b|gemini/i,"llm","Google AI Overview"],[/instagram/i,"social","Instagram"],[/facebook|\bfb\b|meta/i,"social","Facebook"],[/linkedin/i,"social","LinkedIn"],[/tiktok/i,"social","TikTok"],[/youtube|youtu\.be/i,"social","YouTube"],[/twitter|x\.com/i,"social","X"],[/\bg2\b|g2\.com/i,"review","G2"],[/trustpilot/i,"review","Trustpilot"],[/\bbbb\b|better business bureau/i,"review","BBB"],[/capterra/i,"review","Capterra"],[/yelp/i,"review","Yelp"],[/google|bing|duckduckgo|yahoo/i,"search","Search"]];function q(e,t=240){return typeof e=="string"&&e.trim()?e.trim().slice(0,t):null}function Ce(e){try{return e?new URL(e).hostname.replace(/^www\./,""):""}catch{return""}}function Re(e){let t=e.properties??{},i=q(e.source,180)||Ce(e.referrer)||"(direct)",n=q(e.medium,180)||(i==="(direct)"?"(none)":"referral"),s=e.clickIds??{},a=`${i} ${n} ${Ce(e.referrer)}`,r=i==="(direct)"?"direct":/email|newsletter/i.test(n)?"email":"referral",o=i==="(direct)"?"Direct":i;for(let[d,_,u]of ct)if(d.test(a)){r=_,o=u;break}return s.fbclid?(r="social",o=/instagram/i.test(a)?"Instagram":"Facebook"):s.ttclid?(r="social",o="TikTok"):s.rdt_cid?(r="social",o="Reddit"):s.gclid||s.gbraid||s.wbraid?(r="search",o="Google"):s.msclkid&&(r="search",o="Microsoft Ads"),{channelFamily:r,platform:o,source:i,medium:n,campaign:q(e.campaign),campaignId:q(t.campaign_id??t.utm_id),adSetId:q(t.adset_id??t.ad_set_id??t.adgroup_id??t.ad_group_id),adId:q(t.ad_id),creativeId:q(t.creative_id),placement:q(t.placement),term:q(t.utm_term),content:q(t.utm_content)}}import{createHash as yt,randomUUID as ee}from"crypto";import{createCipheriv as _t,createDecipheriv as ut,createHmac as fe,randomBytes as Et,scryptSync as lt,timingSafeEqual as Nt}from"crypto";var Z="xray1";function mt(){return process.env.ANALYTICS_RESTRICTED_DATA_SECRET?.trim()||Q()}function _e(e){return lt(mt(),`xray-restricted:${e}:v1`,32)}function De(e,t){let i=t.trim().slice(0,80);if(!i)throw new Error("analytics encryption purpose required");let n=Et(12),s=_t("aes-256-gcm",_e(i),n);s.setAAD(Buffer.from(`${Z}:${i}`,"utf8"));let a=Buffer.concat([s.update(e,"utf8"),s.final()]),r=s.getAuthTag();return[Z,Buffer.from(i,"utf8").toString("base64url"),n.toString("base64url"),r.toString("base64url"),a.toString("base64url")].join(".")}function Ue(e,t){try{let[i,n,s,a,r]=e.split(".");if(i!==Z||!n||!s||!a||!r)return null;let o=Buffer.from(n,"base64url").toString("utf8");if(o!==t)return null;let d=ut("aes-256-gcm",_e(o),Buffer.from(s,"base64url"));return d.setAAD(Buffer.from(`${Z}:${o}`,"utf8")),d.setAuthTag(Buffer.from(a,"base64url")),Buffer.concat([d.update(Buffer.from(r,"base64url")),d.final()]).toString("utf8")}catch{return null}}function bi(e,t){return fe("sha256",_e(`identity:${e}`)).update(t.trim().toLowerCase()).digest("hex")}function hi(e,t,i,n){return fe("sha256",n).update(`${e}.${t}.${i}`).digest("hex")}function xi(e,t){if(!e||e.length!==t.length)return!1;try{return Nt(Buffer.from(e),Buffer.from(t))}catch{return!1}}var we="enhanced_matching",pt=90,Tt=10,H=class extends Error{constructor(i,n,s){super(n);this.code=i;this.status=s;this.name="AnalyticsIdentityProfileError"}code;status};function te(e,t){return e?.trim().replace(/\s+/g," ").slice(0,t)||null}function Lt(e){if(!e)return null;let[t,i]=e.split("@");return!t||!i?null:`${t.slice(0,1)}${"*".repeat(Math.min(6,Math.max(2,t.length-1)))}@${i}`}function At(e){if(!e)return null;let t=e.replace(/\D/g,"");return t.length<4?null:`***-***-${t.slice(-4)}`}function ue(e){return yt("sha256").update(e).digest("hex")}async function ie(e,t){if(!t.signals.length)return;let i=t.signals.map(a=>a.kind),n=t.signals.map(a=>a.valueHmac);if((await e.query(`SELECT 1 FROM analytics_identity_tombstones
+      WHERE site_id=$1 AND (kind,value_hmac) IN (
+        SELECT * FROM unnest($2::text[],$3::text[])
+      ) LIMIT 1`,[t.siteId,i,n])).rowCount)throw new H("analytics_identity_deleted","This identity cannot be automatically recreated.",410)}async function ne(e,t){let i=te(t.displayName,160),n=te(t.email,320)?.toLowerCase()??null,s=te(t.phone,40);if(!i&&!n&&!s)return!1;let r=(await e.query(`SELECT p.public_ref FROM analytics_people p
+      JOIN analytics_identity_namespaces n ON n.id=p.namespace_id AND n.site_id=p.site_id AND n.status='approved'
+      WHERE p.id=$1 AND p.site_id=$2`,[t.personId,t.siteId])).rows[0]?.public_ref;if(!r)return!1;let o=[...new Set([r,...t.consentSubjectRefs].filter(Boolean))],_=(await e.query(`SELECT s.latest_receipt_id::text FROM analytics_consent_current_state s
+      JOIN analytics_consent_receipts r ON r.id=s.latest_receipt_id AND r.site_id=s.site_id
+      WHERE s.site_id=$1 AND s.subject_ref=ANY($2::text[])
+        AND s.site_analytics=true AND s.enhanced_matching=true AND s.gpc=false
+        AND r.action NOT IN ('withdraw','gpc')
+        AND (s.expires_at IS NULL OR s.expires_at > now())
+      ORDER BY s.effective_at DESC LIMIT 1`,[t.siteId,o])).rows[0]?.latest_receipt_id;if(!_)return!1;let u=t.verifiedAt&&Number.isFinite(Date.parse(t.verifiedAt))?new Date(t.verifiedAt).toISOString():new Date().toISOString(),c=De(JSON.stringify({schemaVersion:1,displayName:i,email:n,phone:s,evidenceType:t.evidenceType,verifiedAt:u}),"identity-profile");return await e.query(`INSERT INTO analytics_restricted_data(id,site_id,person_id,purpose,subject_ref,payload_ciphertext,expires_at,consent_receipt_id)
+      VALUES($1,$2,$3,$4,$5,$6,now()+($7::int * interval '1 day'),$8)
+      ON CONFLICT(site_id,purpose,subject_ref) DO UPDATE SET
+        person_id=EXCLUDED.person_id,payload_ciphertext=EXCLUDED.payload_ciphertext,
+        expires_at=EXCLUDED.expires_at,consent_receipt_id=EXCLUDED.consent_receipt_id,created_at=now()`,[ee(),t.siteId,t.personId,we,r,c,pt,_]),!0}async function Mi(e,t){let i=t.now??new Date,n=await e.query("SELECT role FROM analytics_site_grants WHERE site_id=$1 AND user_id=$2",[t.siteId,t.actorUserId]);if(!n.rowCount)throw new H("analytics_site_not_found","Site not found.",404);if(!["owner","editor"].includes(n.rows[0].role))throw new H("analytics_forbidden","Editor access is required.",403);let s=await e.query(`SELECT count(*)::text AS count FROM analytics_identity_profile_access_audits
+      WHERE site_id=$1 AND actor_user_id=$2 AND created_at > $3::timestamptz - interval '1 minute'`,[t.siteId,t.actorUserId,i.toISOString()]);if(Number(s.rows[0]?.count??0)>=Tt)throw await e.query(`INSERT INTO analytics_identity_profile_access_audits(id,site_id,actor_user_id,subject_ref_hmac,purpose,result,created_at)
+       VALUES($1,$2,$3,$4,'journey_identity_display','rate_limited',$5)`,[ee(),t.siteId,t.actorUserId,ue(t.requestedPersonRef),i.toISOString()]),new H("analytics_identity_profile_rate_limited","Identity profile rate limit exceeded.",429);let a=async c=>{throw await e.query(`INSERT INTO analytics_identity_profile_access_audits(id,site_id,actor_user_id,subject_ref_hmac,purpose,result,created_at)
+       VALUES($1,$2,$3,$4,'journey_identity_display',$5,$6)`,[ee(),t.siteId,t.actorUserId,ue(t.requestedPersonRef),c,i.toISOString()]),new H("analytics_identity_profile_not_found","Identity profile not found.",404)};if(!t.personId)return a("not_found");let r=await e.query(`SELECT p.public_ref,r.payload_ciphertext,r.expires_at
+       FROM analytics_people p
+       JOIN analytics_restricted_data r ON r.person_id=p.id AND r.site_id=p.site_id
+        AND r.purpose=$3 AND r.subject_ref=p.public_ref AND r.expires_at>$4
+       JOIN analytics_consent_current_state s ON s.site_id=p.site_id AND s.latest_receipt_id=r.consent_receipt_id
+        AND s.site_analytics=true AND s.enhanced_matching=true AND s.gpc=false
+        AND (s.expires_at IS NULL OR s.expires_at>$4)
+       JOIN analytics_consent_receipts c ON c.id=s.latest_receipt_id AND c.site_id=s.site_id
+        AND c.action NOT IN ('withdraw','gpc')
+      WHERE p.id=$1 AND p.site_id=$2
+        AND NOT EXISTS (SELECT 1 FROM analytics_identity_tombstones t WHERE t.site_id=p.site_id AND t.person_id=p.id)
+      LIMIT 1`,[t.personId,t.siteId,we,i.toISOString()]);if(!r.rowCount)return a("not_found");let o=Ue(r.rows[0].payload_ciphertext,"identity-profile");if(!o)return a("unavailable");let d;try{d=JSON.parse(o)}catch{return a("unavailable")}let _=d.evidenceType;if(!["first_party_form","authenticated_user","crm_contact"].includes(String(_)))return a("unavailable");let u={personRef:t.requestedPersonRef,displayName:te(typeof d.displayName=="string"?d.displayName:void 0,160),maskedEmail:Lt(typeof d.email=="string"?d.email:null),maskedPhone:At(typeof d.phone=="string"?d.phone:null),evidenceType:_,verifiedAt:typeof d.verifiedAt=="string"&&Number.isFinite(Date.parse(d.verifiedAt))?new Date(d.verifiedAt).toISOString():i.toISOString()};return await e.query(`INSERT INTO analytics_identity_profile_access_audits(id,site_id,person_id,actor_user_id,subject_ref_hmac,purpose,result,created_at)
+     VALUES($1,$2,$3,$4,$5,'journey_identity_display','returned_masked',$6)`,[ee(),t.siteId,t.personId,t.actorUserId,ue(t.requestedPersonRef),i.toISOString()]),u}var It=new Set(["email","website","app","phone_call","chat","physical_store","system_generated","business_messaging","other"]);function f(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:{}}function p(e,t=2048){return typeof e=="string"&&e.trim()?e.trim().slice(0,t):void 0}function gt(e){if(typeof e=="number"&&Number.isFinite(e)&&e>0)return Math.trunc(e>1e10?e/1e3:e);if(typeof e=="string"){let t=Date.parse(e);if(Number.isFinite(t)&&t>0)return Math.trunc(t/1e3)}return Math.trunc(Date.now()/1e3)}function vt(e){if(typeof e=="number"&&Number.isFinite(e)&&e>0)return new Date(e<1e10?e*1e3:e).toISOString();if(typeof e=="string"){let t=Date.parse(e);if(Number.isFinite(t)&&t>0)return new Date(t).toISOString()}throw new S("analytics_provider_destination_required","Google Data Manager requires a valid eventTimestamp.")}function be(e,t){if(typeof e=="number"&&Number.isFinite(e)&&e>0)return Math.trunc(e<1e10?e*1e3:e);if(typeof e=="string"){let i=Date.parse(e);if(Number.isFinite(i)&&i>0)return Math.trunc(i)}throw new S("analytics_provider_destination_required",`${t} requires a valid event timestamp.`)}function K(e){let t=p(e,64)?.toLowerCase();return t&&/^[a-f0-9]{64}$/.test(t)?t:void 0}function Ot(e){let t=f(e.consent),i=t.adUserData==="granted"?"CONSENT_GRANTED":t.adUserData==="denied"?"CONSENT_DENIED":void 0,n=t.adPersonalization==="granted"?"CONSENT_GRANTED":t.adPersonalization==="denied"?"CONSENT_DENIED":void 0;return i?{adUserData:i,...n?{adPersonalization:n}:{}}:void 0}function St(e,t){let i=p(t.operatingAccountId??t.googleAdsCustomerId??t.customerId,256);if(!i)throw new S("analytics_provider_destination_required","A Google Ads operating account ID is required for Data Manager activation.");let n=p(t.transactionId??t.orderId??t.eventId,256);if(!n)throw new S("analytics_provider_destination_required","A stable transactionId, orderId, or eventId is required for Google deduplication.");let s=f(t.clickIds),a=f(t.match),r=p(s.gclid,2e3),o=p(s.gbraid,2e3),d=p(s.wbraid,2e3),_=p(a.emailSha256,64),u=p(a.phoneSha256,64);if(!r&&!o&&!d&&!_&&!u)throw new S("analytics_provider_destination_required","Google Data Manager requires a click identifier or normalized SHA-256 user identifier.");let c=typeof t.valueMinor=="number"&&Number.isSafeInteger(t.valueMinor)&&t.valueMinor>=0?t.valueMinor:void 0,E=p(t.currency,3)?.toUpperCase(),N=p(t.actionSource,64),A=Ot(t);return{operatingAccountId:i,...p(t.loginAccountId,256)?{loginAccountId:p(t.loginAccountId,256)}:{},conversionActionId:e,events:[{eventTimestamp:vt(t.eventTime??t.eventTimestamp),transactionId:n,eventSource:N==="phone_call"?"PHONE":N==="app"?"APP":"WEB",...r?{gclid:r}:{},...o?{gbraid:o}:{},...d?{wbraid:d}:{},..._?{emailSha256:[_]}:{},...u?{phoneSha256:[u]}:{},...c!==void 0&&E?{conversionValue:c/100,currency:E}:{},...A?{consent:A}:{}}],...A?{consent:A}:{},validateOnly:!1}}function he(e){let t=f(e.consent),i=p(e.networkDataRetentionUntil,64),n=i?Date.parse(i):Number.NaN;return t.analytics==="granted"&&t.adUserData==="granted"&&t.globalPrivacyControl!==!0&&Number.isFinite(n)&&n>Date.now()}function Ct(e){let t=f(e.match),i=f(e.clickIds),n=p(t.emailSha256,64),s=p(t.phoneSha256,64),a=p(i.fbp,255),r=p(i.fbc,255),o={...n?{em:[n]}:{},...s?{ph:[s]}:{},...a?{fbp:a}:{},...r?{fbc:r}:{}};if(he(e)){let d=p(t.clientIpAddress,64),_=p(t.clientUserAgent,1e3);d&&(o.client_ip_address=d),_&&(o.client_user_agent=_)}return o}function Rt(e,t,i){let n=p(i.actionSource,64),s=typeof i.valueMinor=="number"&&Number.isSafeInteger(i.valueMinor)?i.valueMinor:void 0,a=p(i.currency,3)?.toUpperCase(),r=p(i.orderId,240),o={...s!==void 0&&s>=0?{value:s/100}:{},...a?{currency:a}:{},...r?{order_id:r}:{}},d=p(i.eventId,255);if(!d)throw new S("analytics_provider_destination_required","Meta requires the stable X-Ray conversion ID for event deduplication.");let _=p(i.sourceUrl),u={eventName:t,eventTime:gt(i.eventTime),actionSource:n&&It.has(n)?n:"system_generated",eventId:d,..._?{eventSourceUrl:_}:{},userData:Ct(i),...Object.keys(o).length?{customData:o}:{}},c=p(i.testEventCode,64);return{datasetId:e,events:[u],...c?{testEventCode:c}:{}}}function xe(e){return he(e)}function ft(e,t,i){let n=p(i.eventId,255);if(!n)throw new S("analytics_provider_destination_required","TikTok requires the stable X-Ray conversion ID for event deduplication.");let s=f(i.clickIds),a=f(i.match),r=K(a.emailSha256),o=K(a.phoneSha256),d=K(a.externalIdSha256),_=p(s.ttclid,2e3),u=p(s.ttp,255),c={...r?{emailSha256:[r]}:{},...o?{phoneSha256:[o]}:{},...d?{externalIdSha256:[d]}:{},..._?{ttclid:_}:{},...u?{ttp:u}:{}};if(xe(i)){let O=p(a.clientIpAddress,64),w=p(a.clientUserAgent,1e3);O&&(c.clientIpAddress=O),w&&(c.clientUserAgent=w)}if(!Object.keys(c).length)throw new S("analytics_provider_destination_required","TikTok requires ttclid, ttp, or a documented SHA-256 match field.");let E=Math.trunc(be(i.eventTime,"TikTok")/1e3),N=typeof i.valueMinor=="number"&&Number.isSafeInteger(i.valueMinor)&&i.valueMinor>=0?i.valueMinor:void 0,A=p(i.currency,3)?.toUpperCase(),v=p(i.sourceUrl,2048),R=p(i.referrer,2048),C=p(i.orderId,255),T=p(i.testEventCode,128);return{pixelCode:e,events:[{eventId:n,eventName:t,eventTime:E,userData:c,...v?{page:{url:v,...R?{referrer:R}:{}}}:{},...N!==void 0&&A?{properties:{value:N/100,currency:A,...C?{orderId:C}:{}}}:C?{properties:{orderId:C}}:{}}],...T?{testEventCode:T}:{},schemaValidationOnly:!1}}var Dt=new Map([["page_view","PAGE_VISIT"],["page_visit","PAGE_VISIT"],["view_content","VIEW_CONTENT"],["search","SEARCH"],["add_to_cart","ADD_TO_CART"],["add_to_wishlist","ADD_TO_WISHLIST"],["purchase","PURCHASE"],["lead","LEAD"],["qualified_lead","LEAD"],["sign_up","SIGN_UP"],["signup","SIGN_UP"]]);function Ut(e){let t=p(e,64);return t==="website"?"WEBSITE":t==="app"?"APP":t==="physical_store"?"PHYSICAL_STORE":"OTHER"}function wt(e,t,i){let n=p(i.eventId,255);if(!n)throw new S("analytics_provider_destination_required","Reddit requires the stable X-Ray conversion ID for event deduplication.");let s=f(i.clickIds),a=f(i.match),r=p(s.rdtCid??s.rdt_cid,2e3),o=K(a.emailSha256),d=K(a.phoneSha256),_=K(a.externalIdSha256),u=p(a.redditUuid??a.uuid,255),c={...o?{emailSha256:o}:{},...d?{phoneSha256:d}:{},..._?{externalIdSha256:_}:{},...u?{uuid:u}:{}};if(xe(i)){let O=p(a.clientIpAddress,64),w=p(a.clientUserAgent,1e3);O&&(c.ipAddress=O),w&&(c.userAgent=w)}if(!r&&!Object.keys(c).length)throw new S("analytics_provider_destination_required","Reddit requires rdt_cid or a documented user match field.");let E=t.trim().toLowerCase().replace(/[ -]+/g,"_"),N=Dt.get(E)??"CUSTOM",A=typeof i.valueMinor=="number"&&Number.isSafeInteger(i.valueMinor)&&i.valueMinor>=0?i.valueMinor:void 0,v=p(i.currency,3)?.toUpperCase(),R=typeof i.itemCount=="number"&&Number.isSafeInteger(i.itemCount)&&i.itemCount>=0?i.itemCount:void 0,C=p(i.sourceUrl,2048),T=p(i.testId,255);return{pixelId:e,events:[{conversionId:n,...r?{clickId:r}:{},eventAt:be(i.eventTime,"Reddit"),actionSource:Ut(i.actionSource),...C?{eventSourceUrl:C}:{},trackingType:N,...N==="CUSTOM"?{customEventName:t.slice(0,64)}:{},...A!==void 0&&v?{value:A/100,currency:v}:{},...R!==void 0?{itemCount:R}:{},user:c}],...T?{testId:T}:{},schemaValidationOnly:!1}}var S=class extends Error{code;constructor(t,i){super(i),this.name="AnalyticsProviderRegistryError",this.code=t}},se=Object.freeze({retryableStatusCodes:Object.freeze([408,425,429,500,502,503,504]),permanentStatusCodes:Object.freeze([400,401,403,404,409,422]),maxAttempts:8}),bt=Object.freeze({meta:Object.freeze({platform:"meta",integrationKeys:Object.freeze(["meta-marketing-api"]),actionName:"send-conversion-events",requiredDestinationField:"datasetId",supportsTestMode:!0,supportsDiagnostics:!1,maxBatchSize:1e3,retryClassification:se}),google:Object.freeze({platform:"google",integrationKeys:Object.freeze(["google-data-manager"]),actionName:"send-conversion-events",requiredDestinationField:"conversionActionId",supportsTestMode:!0,supportsDiagnostics:!0,diagnosticsActionName:"get-ingestion-diagnostics",maxBatchSize:1e3,retryClassification:se}),tiktok:Object.freeze({platform:"tiktok",integrationKeys:Object.freeze(["tiktok-business"]),actionName:"send-events",requiredDestinationField:"pixelCode",supportsTestMode:!0,supportsDiagnostics:!1,maxBatchSize:1e3,retryClassification:se}),reddit:Object.freeze({platform:"reddit",integrationKeys:Object.freeze(["reddit-ads"]),actionName:"send-conversion-events",requiredDestinationField:"pixelId",supportsTestMode:!0,supportsDiagnostics:!1,maxBatchSize:1e3,retryClassification:se})});function re(e){return bt[e]}function Ee(e,t){let i=t?.trim()??"";if(!i){let n=re(e);throw new S("analytics_provider_destination_required",`A ${n.requiredDestinationField} is required for this activation provider.`)}return i}function ae(e,t){return typeof e=="string"&&e.trim().length>0&&e.trim().length<=t&&/^[a-zA-Z][a-zA-Z0-9_.: -]*$/.test(e.trim())}function X(e){if(e&&Object.prototype.hasOwnProperty.call(e,"__tool"))throw new S("analytics_provider_action_unavailable","Activation action selection is managed by X-Ray.");if(!e)return{schemaVersion:1,mappings:[]};if("schemaVersion"in e||"mappings"in e){let i=e;if(i.schemaVersion!==1||!Array.isArray(i.mappings)||i.mappings.length>200)throw new S("analytics_provider_destination_required","Activation mappings must use the supported versioned mapping contract.");let n=i.mappings.map(a=>{if(!a||typeof a!="object"||!ae(a.source,160)||!ae(a.providerEvent,160)||typeof a.enabled!="boolean"||!["primary","observation"].includes(a.role)||!["none","event","fixed"].includes(a.valueMode))throw new S("analytics_provider_destination_required","Activation mapping contains an unsupported event, role, or value mode.");let r=a.currency?.trim().toUpperCase();if(a.valueMode==="fixed"&&(!Number.isFinite(a.fixedValue)||Number(a.fixedValue)<0||Number(a.fixedValue)>1e9||!r||!/^[A-Z]{3}$/.test(r)))throw new S("analytics_provider_destination_required","Fixed activation values require a non-negative value and ISO currency.");return{source:a.source.trim(),providerEvent:a.providerEvent.trim(),enabled:a.enabled,role:a.role,valueMode:a.valueMode,...a.valueMode==="fixed"?{fixedValue:Number(a.fixedValue),currency:r}:{}}}),s=n.filter(a=>a.enabled);if(s.length&&s.filter(a=>a.role==="primary").length!==1)throw new S("analytics_provider_destination_required","Enabled activation mappings require exactly one primary optimization event.");if(new Set(n.map(a=>a.source.toLowerCase())).size!==n.length)throw new S("analytics_provider_destination_required","Each X-Ray event may be mapped only once per destination.");return{schemaVersion:1,mappings:n}}return{schemaVersion:1,mappings:Object.entries(e).map(([i,n],s)=>{if(!ae(i,160)||!ae(n,160))throw new S("analytics_provider_destination_required","Activation mapping contains an invalid event name.");return{source:i.trim(),providerEvent:n.trim(),enabled:!0,role:s===0?"primary":"observation",valueMode:"event"}})}}function le(e){X(e)}function oe(e,t){let i=re(t);if(!Se(e,i.integrationKeys,i.actionName))throw new S("analytics_provider_action_unavailable","The selected connection cannot send conversions for this provider.");return i}function ht(e){let t=String(e.payload.eventName||"conversion");return X(e.eventMapping).mappings.find(n=>n.enabled&&n.source===t)?.providerEvent||t}function Fe(e,t){let i=X(e);return i.mappings.length===0||i.mappings.some(n=>n.enabled&&n.source===t)}function xt(e){let t=String(e.payload.eventName||"conversion"),i=X(e.eventMapping).mappings.find(s=>s.enabled&&s.source===t);if(!i||i.valueMode==="event")return e.payload;let n={...e.payload};return i.valueMode==="none"?(delete n.valueMinor,delete n.currency,n):(n.valueMinor=Math.round((i.fixedValue??0)*100),n.currency=i.currency,n)}function Ft(e){let t=Ee(e.platform,e.destinationId);le(e.eventMapping);let i=ht(e),n=xt(e);return e.platform==="meta"?Rt(t,i,n):e.platform==="google"?St(t,n):e.platform==="tiktok"?ft(t,i,n):wt(t,i,n)}function $e(e){let t=re(e.platform),i=Ft(e);return e.platform==="google"?{...i,validateOnly:!0}:e.platform==="tiktok"?p(e.payload.testEventCode,128)?i:{...i,schemaValidationOnly:!0}:e.platform==="reddit"?p(e.payload.testId,255)?i:{...i,schemaValidationOnly:!0}:t.supportsTestMode?{...i,testMode:!0}:i}function Y(e,...t){for(let i of t){let n=e[i];if(typeof n=="string"&&n.trim())return n.trim().slice(0,500)}}function $t(e){let t=f(e),i=f(t.structuredContent);if(Object.keys(i).length>0)return i;let n=Array.isArray(t.content)?t.content:[];for(let s of n){let a=f(s);if(!(a.type!=="text"||typeof a.text!="string"||a.text.length>1e6))try{let r=JSON.parse(a.text),o=f(r);if(Object.keys(o).length>0)return o}catch{}}return t}function qe(e,t,i){re(e);let n=$t(t),s=[n.warnings,n.messages,n.fieldWarnings].flatMap(E=>Array.isArray(E)?E:[]).map(E=>{if(typeof E=="string")return E;let N=f(E),A=p(N.reason,200),v=p(N.field,200),R=p(N.description,500);return[A,v,R].filter(Boolean).join(": ")}).filter(E=>!!E).slice(0,50).map(E=>E.slice(0,500)),a=typeof n.eventsReceived=="number"&&Number.isFinite(n.eventsReceived)?Math.max(0,Math.trunc(n.eventsReceived)):void 0,r=typeof n.eventsRejected=="number"&&Number.isFinite(n.eventsRejected)?Math.max(0,Math.trunc(n.eventsRejected)):void 0,o=n.partiallyAccepted===!0,d=Array.isArray(n.errors)?n.errors:[],_=e==="google"&&(/PARTIAL_SUCCESS/i.test(String(n.status??""))||o)&&(d.length>0||(r??0)>0),u=e==="google"&&n.acceptedForProcessing===!0&&!!Y(n,"requestId")&&!_,c=n.accepted===!0||n.success===!0||n.providerAccepted===!0||(a??0)>0;return{accepted:n.schemaValidationOnly!==!0&&!_&&(e==="google"?c&&!u:c),...u?{pending:!0}:{},...o?{partiallyAccepted:!0}:{},...Y(n,"requestId","receiptId","fbtraceId","fbtrace_id","id")?{requestId:Y(n,"requestId","receiptId","fbtraceId","fbtrace_id","id")}:{},...Y(n,"eventId","conversionId")||p(i,255)?{eventId:Y(n,"eventId","conversionId")||p(i,255)}:{},...a!==void 0?{eventsReceived:a}:{},...r!==void 0?{eventsRejected:r}:{},warnings:[...s,...d.map(E=>{let N=f(E);return[p(N.reason,200),p(N.field,200),p(N.description,500)].filter(Boolean).join(": ")||"provider_error"})].slice(0,50)}}var qt=["first_touch","last_touch","last_non_direct","linear","time_decay","position_based","custom_weighted"];var Me=[7,14,30,60,90,180,365,"lifetime"],U=class extends Error{constructor(i,n){super(n);this.code=i;this.name="AnalyticsAttributionReportError"}code};function Mt(e){let t=e==="position_40_20_40"?"position_based":e;if(!qt.includes(t))throw new U("invalid_model",`Unsupported attribution model: ${e}.`);return t}function x(e,t){let i=e instanceof Date?e.getTime():Date.parse(e);if(!Number.isFinite(i))throw new U("invalid_timestamp",`${t} must be a valid timestamp.`);return i}function je(e,t){if(e==null)return 0n;try{let i=typeof e=="bigint"?e:BigInt(e);if(i<0n)throw new Error("negative");return i}catch{throw new U("invalid_minor_units",`${t} must be a non-negative integer.`)}}function Ke(e){if(e==null||e.trim()==="")return null;let t=e.trim().toUpperCase();if(!/^[A-Z]{3}$/.test(t))throw new U("invalid_currency",`Invalid currency ${e}.`);return t}function kt(e){return e.touchKind==="direct"||e.source?.trim().toLowerCase()==="(direct)"&&["(none)","none",""].includes(e.medium?.trim().toLowerCase()??"")}function Ht(e,t){return e.touchKind==="view"?t.viewWindow??90:t.clickWindow??90}function Pt(e,t,i){let n=x(t.occurredAt,"conversion.occurredAt");return e.filter(s=>s.subjectRef===t.subjectRef&&s.journeyTier===t.journeyTier).filter(s=>{let a=x(s.occurredAt,"touch.occurredAt");if(a>n)return!1;let r=Ht(s,i);return r==="lifetime"||n-a<=r*864e5}).sort((s,a)=>x(s.occurredAt,"touch.occurredAt")-x(a.occurredAt,"touch.occurredAt")||s.touchId.localeCompare(a.touchId))}function jt(e,t){let i=[`touch:${e.touchId}`,e.adId?`ad:${e.adId}`:null,e.adSetId?`ad_set:${e.adSetId}`:null,e.campaignId?`campaign:${e.campaignId}`:null,e.platform?`platform:${e.platform}`:null,e.source?`source:${e.source}`:null,e.medium?`medium:${e.medium}`:null,`touch_kind:${e.touchKind}`,"default"];for(let n of i)if(n&&t[n]!=null)return t[n];return 0}function Kt(e,t){if(e.length===0)return[];if(t.model==="first_touch")return e.map((s,a)=>a===0?1:0);if(t.model==="last_touch")return e.map((s,a)=>a===e.length-1?1:0);if(t.model==="last_non_direct"){let s=-1;for(let a=e.length-1;a>=0;a-=1)if(!kt(e[a])){s=a;break}return s===-1&&(s=e.length-1),e.map((a,r)=>r===s?1:0)}if(t.model==="linear")return e.map(()=>1);if(t.model==="time_decay"){let s=t.timeDecayHalfLifeDays??7;if(!Number.isFinite(s)||s<=0)throw new U("invalid_half_life","Time-decay half-life must be positive.");let a=Math.max(...e.map(r=>x(r.occurredAt,"touch.occurredAt")));return e.map(r=>Math.pow(.5,(a-x(r.occurredAt,"touch.occurredAt"))/864e5/s))}if(t.model==="position_based"||t.model==="position_40_20_40")return e.length===1?[1]:e.length===2?[.5,.5]:e.map((s,a)=>a===0||a===e.length-1?.4:.2/(e.length-2));let i=t.customWeights;if(!i||Object.keys(i).length===0)throw new U("custom_weights_required","Custom-weighted attribution requires at least one selector.");for(let[s,a]of Object.entries(i))if(!s.trim()||!Number.isFinite(a)||a<0)throw new U("invalid_custom_weight",`Invalid custom weight for ${s||"(empty)"}.`);let n=new Set(["first","middle","last"]);if(Object.keys(i).every(s=>n.has(s))){let s=i.first??0,a=i.middle??0,r=i.last??0;return e.length===1?[s+a+r]:e.length===2?[s+a/2,r+a/2]:e.map((o,d)=>d===0?s:d===e.length-1?r:a/(e.length-2))}return e.map(s=>jt(s,i))}function Xt(e){if(e.length===0)return[];let t=e.reduce((r,o)=>r+o,0);if(!Number.isFinite(t)||t<=0)throw new U("zero_attribution_weight","Eligible touches must have a positive total weight.");let i=e.map(r=>r/t*1e6),n=i.map(r=>Math.floor(r)),s=1e6-n.reduce((r,o)=>r+o,0),a=i.map((r,o)=>({index:o,fraction:r-n[o]})).sort((r,o)=>o.fraction-r.fraction||r.index-o.index);for(let r=0;r<s;r+=1)n[a[r%a.length].index]+=1;return n}function Bt(e,t){if(t.length===0)return[];let i=BigInt(1e6),n=t.map(o=>e*BigInt(o)/i),s=e-n.reduce((o,d)=>o+d,0n),a=t.map((o,d)=>({index:d,remainder:e*BigInt(o)%i})).sort((o,d)=>o.remainder===d.remainder?o.index-d.index:o.remainder>d.remainder?-1:1),r=0;for(;s>0n;)n[a[r%a.length].index]+=1n,s-=1n,r+=1;return n}function W(e,t){let i={platform:e.platform?.trim()||null};return t==="platform"||(i.accountId=e.accountId?.trim()||null,t==="account")||(i.campaignId=e.campaignId?.trim()||null,i.campaignName=e.campaignName?.trim()||null,t==="campaign")||(i.adSetId=e.adSetId?.trim()||null,i.adSetName=e.adSetName?.trim()||null,t==="ad_set")||(i.adId=e.adId?.trim()||null,i.adName=e.adName?.trim()||null),i}function ke(e,t){let i=W(e,t);return[i.platform,i.accountId,i.campaignId,i.adSetId,i.adId].filter((n,s)=>s<=["platform","account","campaign","ad_set","ad"].indexOf(t)).map(n=>n||"(missing)").join("|")}function zt(e,t){let i=W(e,t);return!i.platform||t!=="platform"&&!i.accountId||["campaign","ad_set","ad"].includes(t)&&!i.campaignId||["ad_set","ad"].includes(t)&&!i.adSetId?!0:t==="ad"&&!i.adId}function He(e,t,i){let n=[];for(let s of e){let a=Pt(t,s,i),r=Ke(s.currency),o=je(s.valueMinor,"conversion.valueMinor");if(a.length===0){n.push({conversionId:s.conversionId,touchId:null,subjectRef:s.subjectRef,journeyTier:s.journeyTier,occurredAt:new Date(x(s.occurredAt,"conversion.occurredAt")).toISOString(),outcome:s.outcome,creditMicros:1e6,creditedValueMinor:o.toString(),currency:r,unattributed:!0});continue}let d=Xt(Kt(a,i)),_=Bt(o,d);a.forEach((u,c)=>{d[c]!==0&&n.push({...W(u,"ad"),conversionId:s.conversionId,touchId:u.touchId,subjectRef:s.subjectRef,journeyTier:s.journeyTier,occurredAt:new Date(x(s.occurredAt,"conversion.occurredAt")).toISOString(),outcome:s.outcome,creditMicros:d[c],creditedValueMinor:_[c].toString(),currency:r,unattributed:!1})})}return n}function Pe(e,t,i){let n=new Map,s=(_,u,c)=>{let E=n.get(_);return E||(E={dimensions:u,unattributed:c,leadMicros:0,qualifiedMicros:0,conversionMicros:0,customerMicros:0,revenueMinor:0n,spendMinor:0n,currencies:new Set,spendFacts:0,matchedSpendFacts:0,missingDimension:zt(u,i),hasCredits:!1},n.set(_,E)),E},a=0;for(let _ of e){let u=_.unattributed?{}:W(_,i),c=_.unattributed?"(unattributed)":ke(u,i),E=s(c,u,_.unattributed);E.hasCredits=!0,!_.unattributed&&E.missingDimension&&(a+=1),_.outcome==="lead"&&(E.leadMicros+=_.creditMicros),_.outcome==="qualified"&&(E.qualifiedMicros+=_.creditMicros),_.outcome==="conversion"&&(E.conversionMicros+=_.creditMicros),_.outcome==="customer"&&(E.customerMicros+=_.creditMicros),E.revenueMinor+=BigInt(_.creditedValueMinor),_.currency&&E.currencies.add(_.currency)}let r=0;for(let _ of t){let u=W(_,i),c=ke(u,i),E=s(c,u,!1);E.spendMinor+=je(_.spendMinor,"spendFact.spendMinor"),E.currencies.add(Ke(_.currency)),E.spendFacts+=1,E.hasCredits&&!E.missingDimension?E.matchedSpendFacts+=1:r+=1}let o=new Set;for(let _ of n.values())for(let u of _.currencies)o.add(u);if(o.size>1)throw new U("mixed_currencies",`Attribution reports require one currency; received ${[...o].sort().join(", ")}.`);return{rows:[...n.entries()].map(([_,u])=>{let c=u.leadMicros/1e6,E=u.qualifiedMicros/1e6,N=u.conversionMicros/1e6,A=u.customerMicros/1e6,v=Number(u.spendMinor),R=Number(u.revenueMinor),C=u.spendFacts>0,T=O=>C&&O>0?v/O:null;return{...u.dimensions,key:_,unattributed:u.unattributed,leadCredit:c,qualifiedCredit:E,conversionCredit:N,customerCredit:A,spendMinor:C?u.spendMinor.toString():null,revenueMinor:u.hasCredits&&u.currencies.size>0?u.revenueMinor.toString():null,currency:u.currencies.size===1?[...u.currencies][0]:null,cplMinor:T(c),cpqlMinor:T(E),cpaMinor:T(N),cacMinor:T(A),roas:C&&v>0&&u.hasCredits?R/v:null,coverage:{spendFacts:u.spendFacts,matchedSpendFacts:u.matchedSpendFacts,missingDimension:u.missingDimension}}}).sort((_,u)=>_.key.localeCompare(u.key)),unmatchedSpendFactCount:r,missingDimensionCredits:a}}function Ne(e,t){let i=new Set;for(let n of e){if(!n.id||i.has(n.id))throw new U(`invalid_${t}_id`,`${t} IDs must be present and unique.`);i.add(n.id)}}function me(e){let t=Mt(e.configuration.model),i=e.configuration.clickWindow??90,n=e.configuration.viewWindow??90;if(!Me.includes(i)||!Me.includes(n))throw new U("invalid_window","Attribution window must be 7, 14, 30, 60, 90, 180, 365 or lifetime.");Ne(e.touches.map(E=>({id:E.touchId})),"touch"),Ne(e.conversions.map(E=>({id:E.conversionId})),"conversion"),Ne((e.spendFacts??[]).map(E=>({id:E.spendFactId})),"spend_fact");let s={...e.configuration,model:t,clickWindow:i,viewWindow:n},a=e.conversions.filter(E=>E.journeyTier==="confirmed"),r=e.conversions.filter(E=>E.journeyTier==="candidate"&&E.candidateConfidence==="high"),o=He(a,e.touches.filter(E=>E.journeyTier==="confirmed"),s),d=He(r,e.touches.filter(E=>E.journeyTier==="candidate"&&E.candidateConfidence==="high"),s),_=e.granularity??"campaign",u=Pe(o,e.spendFacts??[],_),c=Pe(d,[],_);return{configuration:{id:e.configuration.id??`${t}:${i}:${n}`,model:t,clickWindow:i,viewWindow:n,timeDecayHalfLifeDays:e.configuration.timeDecayHalfLifeDays??7},confirmed:{credits:o,rows:u.rows,conversionCount:a.length,unattributedCount:new Set(o.filter(E=>E.unattributed).map(E=>E.conversionId)).size},candidateAssist:{credits:d,rows:c.rows,conversionCount:r.length,unattributedCount:new Set(d.filter(E=>E.unattributed).map(E=>E.conversionId)).size,eligibility:"high_confidence_only"},coverage:{touchCount:e.touches.length,conversionCount:e.conversions.length,excludedCandidateConversions:e.conversions.filter(E=>E.journeyTier==="candidate"&&E.candidateConfidence!=="high").length,spendFactCount:e.spendFacts?.length??0,unmatchedSpendFactCount:u.unmatchedSpendFactCount,missingDimensionCredits:u.missingDimensionCredits},providerComparison:e.providerRead?{availability:"available",provider:e.providerRead.provider,conversionCount:e.providerRead.conversionCount,sourceRef:e.providerRead.sourceRef}:{availability:"unavailable"}}}function Xe(e){if(e.configurations.length<1||e.configurations.length>3)throw new U("invalid_comparison_count","Compare between one and three attribution configurations.");let t=e.configurations.map((i,n)=>i.id??`${i.model}:${i.clickWindow??90}:${i.viewWindow??90}:${n}`);if(new Set(t).size!==t.length)throw new U("duplicate_comparison_id","Comparison configuration IDs must be unique.");return{evidence:{touchIds:e.touches.map(i=>i.touchId).sort(),conversionIds:e.conversions.map(i=>i.conversionId).sort(),spendFactIds:(e.spendFacts??[]).map(i=>i.spendFactId).sort()},projections:e.configurations.map((i,n)=>me({...e,configuration:{...i,id:t[n]}}))}}async function Be(e){let t=new Date(x(e.from,"from")).toISOString(),i=new Date(x(e.to,"to")).toISOString(),n=await e.client.query(`SELECT id, person_id, occurred_at, conversion_kind, value_minor::text, currency
+       FROM analytics_conversions
+      WHERE site_id = $1 AND person_id IS NOT NULL AND occurred_at >= $2 AND occurred_at < $3
+      ORDER BY occurred_at, id`,[e.siteId,t,i]),s=await e.client.query(`SELECT id, person_id, occurred_at, touch_kind, source, medium, platform, account_id, campaign_id, campaign, ad_set_id, ad_id
+       FROM analytics_attribution_touches
+      WHERE site_id = $1 AND person_id IS NOT NULL AND occurred_at < $2
+      ORDER BY occurred_at, id`,[e.siteId,i]),a=await e.client.query(`SELECT id, bucket, platform, account_id, campaign_id, campaign_name, ad_set_id, ad_set_name, ad_id, ad_name, spend_minor::text, currency, source_ref
+       FROM analytics_ad_spend_facts
+      WHERE site_id = $1 AND bucket >= $2::date AND bucket < $3::date
+      ORDER BY bucket, id`,[e.siteId,t,i]);return{conversions:n.rows.map(r=>({conversionId:r.id,subjectRef:r.person_id,journeyTier:"confirmed",occurredAt:r.occurred_at,outcome:["lead","qualified","conversion","customer"].includes(r.conversion_kind)?r.conversion_kind:"conversion",valueMinor:r.value_minor,currency:r.currency})),touches:s.rows.map(r=>({touchId:r.id,subjectRef:r.person_id,journeyTier:"confirmed",occurredAt:r.occurred_at,touchKind:r.touch_kind,source:r.source,medium:r.medium,platform:r.platform,accountId:r.account_id,campaignId:r.campaign_id,campaignName:r.campaign,adSetId:r.ad_set_id,adId:r.ad_id})),spendFacts:a.rows.map(r=>({spendFactId:r.id,bucket:r.bucket,platform:r.platform,accountId:r.account_id,campaignId:r.campaign_id,campaignName:r.campaign_name,adSetId:r.ad_set_id,adSetName:r.ad_set_name,adId:r.ad_id,adName:r.ad_name,spendMinor:r.spend_minor,currency:r.currency,sourceRef:r.source_ref}))}}async function ze(e){let t=new Date(x(e.from,"from")).toISOString(),i=new Date(x(e.to,"to")).toISOString(),n=await e.client.query(`SELECT t.id, cat.association_id, cat.association_confidence, t.occurred_at, t.touch_kind,
+            t.source, t.medium, t.platform, t.account_id, t.campaign_id, t.campaign, t.ad_set_id, t.ad_id
+       FROM analytics_candidate_attribution_touches cat
+       JOIN analytics_candidate_associations ca ON ca.id=cat.association_id AND ca.namespace_id=cat.namespace_id
+       JOIN analytics_attribution_touches t ON t.id=cat.touch_id AND t.site_id=cat.site_id
+      WHERE cat.site_id=$1 AND cat.eligibility='overlay_only' AND cat.expires_at > now()
+        AND ca.status='active' AND ca.confidence_band='high' AND ca.expires_at > now()
+        AND t.occurred_at < $2
+      ORDER BY t.occurred_at,t.id`,[e.siteId,i]),s=await e.client.query(`SELECT DISTINCT ON (c.id) c.id, cat.association_id, cat.association_confidence, c.occurred_at,
+            c.conversion_kind, c.value_minor::text, c.currency
+       FROM analytics_candidate_attribution_touches cat
+       JOIN analytics_candidate_associations ca ON ca.id=cat.association_id AND ca.namespace_id=cat.namespace_id
+       JOIN analytics_attribution_touches t ON t.id=cat.touch_id AND t.site_id=cat.site_id
+       JOIN analytics_sessions s ON s.id=t.session_id AND s.site_id=t.site_id
+       JOIN analytics_conversions c ON c.site_id=cat.site_id AND c.session_hmac=s.session_hmac
+      WHERE cat.site_id=$1 AND cat.eligibility='overlay_only' AND cat.expires_at > now()
+        AND ca.status='active' AND ca.confidence_band='high' AND ca.expires_at > now()
+        AND c.occurred_at >= $2 AND c.occurred_at < $3
+      ORDER BY c.id,cat.association_confidence DESC,cat.association_id`,[e.siteId,t,i]);return{touches:n.rows.map(a=>({touchId:`candidate:${a.association_id}:${a.id}`,subjectRef:`candidate:${a.association_id}`,journeyTier:"candidate",candidateConfidence:"high",occurredAt:a.occurred_at,touchKind:a.touch_kind,source:a.source,medium:a.medium,platform:a.platform,accountId:a.account_id,campaignId:a.campaign_id,campaignName:a.campaign,adSetId:a.ad_set_id,adId:a.ad_id})),conversions:s.rows.map(a=>({conversionId:`candidate:${a.association_id}:${a.id}`,subjectRef:`candidate:${a.association_id}`,journeyTier:"candidate",candidateConfidence:"high",occurredAt:a.occurred_at,outcome:["lead","qualified","conversion","customer"].includes(a.conversion_kind)?a.conversion_kind:"conversion",valueMinor:a.value_minor,currency:a.currency})),spendFacts:[]}}var m=class extends Error{constructor(i,n,s=400){super(n);this.code=i;this.status=s;this.name="AnalyticsRepositoryError"}code;status},B=null;function Gt(){let e=process.env.ANALYTICS_DATABASE_URL?.trim();if(!e)throw new m("analytics_database_unavailable","Site Analytics is not configured.",503);return e}function l(){return B||(B=new Wt({connectionString:Gt(),max:8})),B}async function Vi(){if(!B)return;let e=B;B=null,await e.end()}async function Ji(){let t=await l().connect();try{await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_schema_migrations (
+        version text PRIMARY KEY,
+        applied_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_sites (
+        id uuid PRIMARY KEY,
+        slug text NOT NULL,
+        name text NOT NULL,
+        owner_user_id bigint NOT NULL,
+        timezone text NOT NULL DEFAULT 'UTC',
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'disabled')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(owner_user_id, slug)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_grants (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        role text NOT NULL CHECK (role IN ('viewer', 'editor', 'owner')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, user_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_pixels (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        public_id text NOT NULL UNIQUE,
+        name text NOT NULL,
+        environment text NOT NULL DEFAULT 'production',
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'disabled')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        disabled_at timestamptz
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_pixel_domains (
+        id uuid PRIMARY KEY,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        state text NOT NULL DEFAULT 'observed_unverified'
+          CHECK (state IN ('observed_unverified', 'approved', 'rejected', 'revoked')),
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        accepted_count bigint NOT NULL DEFAULT 0,
+        rejected_count bigint NOT NULL DEFAULT 0,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(pixel_id, hostname)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_host_groups (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        auto_decorate boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(pixel_id, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_host_group_members (
+        group_id uuid NOT NULL REFERENCES analytics_host_groups(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(group_id, hostname)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_events (
+        id uuid PRIMARY KEY,
+        event_id text NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        visitor_id text,
+        session_id text,
+        visitor_hmac text,
+        session_hmac text,
+        event_name text NOT NULL,
+        occurred_at timestamptz NOT NULL,
+        received_at timestamptz NOT NULL DEFAULT now(),
+        path text NOT NULL DEFAULT '/',
+        canonical_url text,
+        title text,
+        referrer text,
+        source text,
+        medium text,
+        campaign text,
+        device_class text,
+        properties jsonb NOT NULL DEFAULT '{}'::jsonb,
+        bot_status text NOT NULL DEFAULT 'unknown',
+        UNIQUE(site_id, event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_conversions (
+        id uuid PRIMARY KEY,
+        source_event_id text NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        session_id text,
+        session_hmac text,
+        conversion_kind text NOT NULL,
+        value_minor bigint NOT NULL DEFAULT 0,
+        currency text NOT NULL DEFAULT 'USD',
+        occurred_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, source_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_ingestion_receipts (
+        id uuid PRIMARY KEY,
+        request_id text NOT NULL UNIQUE,
+        site_id uuid REFERENCES analytics_sites(id) ON DELETE SET NULL,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        hostname text,
+        accepted_count integer NOT NULL DEFAULT 0,
+        rejected_count integer NOT NULL DEFAULT 0,
+        reason_codes jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_rollups_daily (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        bucket date NOT NULL,
+        source text NOT NULL DEFAULT '(direct)',
+        medium text NOT NULL DEFAULT '(none)',
+        campaign text NOT NULL DEFAULT '(none)',
+        pageviews integer NOT NULL DEFAULT 0,
+        events integer NOT NULL DEFAULT 0,
+        visitors integer NOT NULL DEFAULT 0,
+        sessions integer NOT NULL DEFAULT 0,
+        refreshed_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, pixel_id, hostname, bucket, source, medium, campaign)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_rollup_runs (
+        id uuid PRIMARY KEY,
+        window_start timestamptz NOT NULL,
+        window_end timestamptz NOT NULL,
+        status text NOT NULL CHECK (status IN ('running', 'complete', 'failed')),
+        row_count integer NOT NULL DEFAULT 0,
+        started_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        error_code text
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_exports (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        requested_by_user_id bigint NOT NULL,
+        idempotency_key text,
+        report text NOT NULL,
+        format text NOT NULL CHECK (format IN ('csv', 'json', 'markdown')),
+        filters jsonb NOT NULL,
+        content text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_campaign_links (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        name text NOT NULL,
+        destination_url text NOT NULL,
+        short_code text NOT NULL UNIQUE,
+        utm_source text NOT NULL,
+        utm_medium text NOT NULL,
+        utm_campaign text NOT NULL,
+        utm_term text,
+        utm_content text,
+        ad_group text,
+        ad_name text,
+        creative_id text,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_campaign_clicks (
+        id uuid PRIMARY KEY,
+        link_id uuid NOT NULL REFERENCES analytics_campaign_links(id) ON DELETE CASCADE,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        referrer text
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_forms (
+        id uuid PRIMARY KEY,
+        public_id text NOT NULL UNIQUE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE RESTRICT,
+        name text NOT NULL,
+        slug text NOT NULL,
+        fields jsonb NOT NULL,
+        brand jsonb NOT NULL,
+        submit_label text NOT NULL DEFAULT 'Submit',
+        success_message text NOT NULL DEFAULT 'Thank you. Your response was received.',
+        redirect_url text,
+        consent_text text,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'published', 'archived')),
+        version integer NOT NULL DEFAULT 1,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, slug)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_form_submissions (
+        id uuid PRIMARY KEY,
+        form_id uuid NOT NULL REFERENCES analytics_forms(id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE RESTRICT,
+        visitor_id text,
+        session_id text,
+        crm_person_ref text,
+        source text,
+        medium text,
+        campaign text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS crm_delivery_status text NOT NULL DEFAULT 'pending'"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS crm_entity_id uuid"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS bridge_run_id uuid"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS idempotency_key text"),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_form_submissions_idempotency
+         ON analytics_form_submissions(form_id, idempotency_key)
+         WHERE idempotency_key IS NOT NULL`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_form_delivery_jobs (
+        id uuid PRIMARY KEY,
+        submission_id uuid NOT NULL UNIQUE REFERENCES analytics_form_submissions(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        payload_ciphertext text NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'delivered', 'failed', 'expired')),
+        attempts integer NOT NULL DEFAULT 0,
+        last_error_code text,
+        next_attempt_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL DEFAULT now() + interval '7 days',
+        created_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz
+      )
+    `),await t.query("ALTER TABLE analytics_form_delivery_jobs ADD COLUMN IF NOT EXISTS bridge_run_id uuid"),await t.query("ALTER TABLE analytics_form_delivery_jobs ADD COLUMN IF NOT EXISTS crm_entity_id uuid"),await t.query("ALTER TABLE analytics_form_delivery_jobs ADD COLUMN IF NOT EXISTS idempotency_key text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_form_bridge_receipts (
+        id uuid PRIMARY KEY,
+        bridge_run_id uuid NOT NULL,
+        submission_id uuid NOT NULL REFERENCES analytics_form_submissions(id) ON DELETE CASCADE,
+        system text NOT NULL CHECK (system IN ('analytics','crm')),
+        status text NOT NULL CHECK (status IN ('pending','delivered','failed','expired')),
+        opaque_entity_id uuid,
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(bridge_run_id, system)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_people (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        crm_person_ref text NOT NULL,
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, crm_person_ref)
+      )
+    `),await t.query("ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS crm_entity_id uuid"),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_crm_entity
+         ON analytics_people(site_id, crm_entity_id)
+         WHERE crm_entity_id IS NOT NULL`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_nodes (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        kind text NOT NULL CHECK (kind IN ('visitor_id','session_id','email','phone','customer_id','click_id','device_signal','network_signal')),
+        value_hmac text NOT NULL,
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, kind, value_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_edges (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        identity_node_id uuid NOT NULL REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        evidence_kind text NOT NULL,
+        confidence numeric(4,3) NOT NULL CHECK (confidence >= 0 AND confidence <= 1),
+        consent_scope text NOT NULL DEFAULT 'analytics',
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(person_id, identity_node_id, evidence_kind)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_assignments (
+        identity_node_id uuid PRIMARY KEY REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        crm_entity_id uuid,
+        evidence_kind text NOT NULL,
+        assigned_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK (crm_entity_id IS NULL OR crm_entity_id::text <> '')
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_assignment_conflicts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        identity_node_id uuid REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        active_person_id uuid REFERENCES analytics_people(id) ON DELETE CASCADE,
+        attempted_person_id uuid REFERENCES analytics_people(id) ON DELETE CASCADE,
+        active_crm_entity_id uuid,
+        attempted_crm_entity_id uuid,
+        evidence_kind text NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','resolved','dismissed')),
+        observed_at timestamptz NOT NULL DEFAULT now(),
+        resolved_at timestamptz,
+        CONSTRAINT analytics_identity_assignment_conflicts_pending_identity
+          CHECK (status <> 'pending' OR (
+            identity_node_id IS NOT NULL AND active_person_id IS NOT NULL
+            AND attempted_person_id IS NOT NULL AND active_person_id <> attempted_person_id
+          ))
+      )
+    `),await t.query("ALTER TABLE analytics_identity_assignment_conflicts ALTER COLUMN identity_node_id DROP NOT NULL"),await t.query("ALTER TABLE analytics_identity_assignment_conflicts ALTER COLUMN active_person_id DROP NOT NULL"),await t.query("ALTER TABLE analytics_identity_assignment_conflicts ALTER COLUMN attempted_person_id DROP NOT NULL"),await t.query(`ALTER TABLE analytics_identity_assignment_conflicts
+         DROP CONSTRAINT IF EXISTS analytics_identity_assignment_conflicts_check`),await t.query(`
+      DO $$ BEGIN
+        IF NOT EXISTS (
+          SELECT 1 FROM pg_constraint
+           WHERE conrelid='analytics_identity_assignment_conflicts'::regclass
+             AND conname='analytics_identity_assignment_conflicts_pending_identity'
+        ) THEN
+          ALTER TABLE analytics_identity_assignment_conflicts
+            ADD CONSTRAINT analytics_identity_assignment_conflicts_pending_identity
+            CHECK (status <> 'pending' OR (
+              identity_node_id IS NOT NULL AND active_person_id IS NOT NULL
+              AND attempted_person_id IS NOT NULL AND active_person_id <> attempted_person_id
+            ));
+        END IF;
+      END $$
+    `),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_identity_assignment_conflicts_pending
+         ON analytics_identity_assignment_conflicts(identity_node_id, active_person_id, attempted_person_id)
+         WHERE status='pending'`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_linker_tokens (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        host_group_id uuid NOT NULL REFERENCES analytics_host_groups(id) ON DELETE CASCADE,
+        identity_node_id uuid NOT NULL REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        source_hostname text NOT NULL,
+        audience_hostname text NOT NULL,
+        expires_at timestamptz NOT NULL,
+        consumed_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS click_ids jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS visitor_hmac text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS session_hmac text"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS session_hmac text"),await Ti(t),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS click_ids jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS channel_family text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS platform text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS campaign_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS ad_set_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS ad_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS creative_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS placement text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS utm_term text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS utm_content text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS engaged_ms integer"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS scroll_depth smallint"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_sites ADD COLUMN IF NOT EXISTS business_model text NOT NULL DEFAULT 'leadgen' CHECK (business_model IN ('leadgen','saas','ecommerce'))"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_ad_spend_daily (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        bucket date NOT NULL,
+        platform text NOT NULL,
+        campaign text NOT NULL DEFAULT '(all)',
+        spend_minor bigint NOT NULL CHECK (spend_minor >= 0),
+        currency text NOT NULL DEFAULT 'USD',
+        source_ref text,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, bucket, platform, campaign)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_imports (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        requested_by_user_id bigint NOT NULL,
+        source_system text NOT NULL,
+        filename text NOT NULL,
+        status text NOT NULL DEFAULT 'queued' CHECK (status IN ('queued','processing','complete','partial','failed')),
+        accepted_count integer NOT NULL DEFAULT 0,
+        rejected_count integer NOT NULL DEFAULT 0,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_import_rows (
+        id uuid PRIMARY KEY,
+        import_id uuid NOT NULL REFERENCES analytics_crm_imports(id) ON DELETE CASCADE,
+        crm_person_ref text NOT NULL,
+        payload_ciphertext text NOT NULL,
+        delivery_status text NOT NULL DEFAULT 'pending' CHECK (delivery_status IN ('pending','delivered','failed','expired')),
+        attempts integer NOT NULL DEFAULT 0,
+        last_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz,
+        UNIQUE(import_id, crm_person_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_destinations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        platform text NOT NULL CHECK (platform IN ('meta','google','tiktok','reddit')),
+        name text NOT NULL,
+        connection_ref text,
+        external_dataset_id text,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','paused','archived')),
+        automatic_delivery_enabled boolean NOT NULL DEFAULT false,
+        event_mapping jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_jobs (
+        id uuid PRIMARY KEY,
+        destination_id uuid NOT NULL REFERENCES analytics_activation_destinations(id) ON DELETE CASCADE,
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        payload_ciphertext text NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','delivered','failed','expired')),
+        attempts integer NOT NULL DEFAULT 0,
+        last_error_code text,
+        next_attempt_at timestamptz NOT NULL DEFAULT now(),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz,
+        UNIQUE(destination_id, conversion_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_thorbit_entitlements (
+        user_id bigint PRIMARY KEY,
+        thorbit_org_id text,
+        connection_source text NOT NULL DEFAULT 'trial' CHECK (connection_source IN ('trial','api_key','thorbit_session')),
+        eligible boolean NOT NULL DEFAULT false,
+        reason text NOT NULL,
+        plan_id text,
+        subscription_status text,
+        monthly_recurring_revenue_cents integer NOT NULL DEFAULT 0,
+        minimum_monthly_recurring_revenue_cents integer NOT NULL DEFAULT 5000,
+        verified_at timestamptz NOT NULL,
+        refresh_after timestamptz NOT NULL,
+        access_expires_at timestamptz NOT NULL,
+        trial_started_at timestamptz NOT NULL DEFAULT now(),
+        trial_ends_at timestamptz NOT NULL DEFAULT (now() + interval '30 days'),
+        last_refresh_error text,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_thorbit_entitlements ALTER COLUMN thorbit_org_id DROP NOT NULL"),await t.query("ALTER TABLE analytics_thorbit_entitlements ADD COLUMN IF NOT EXISTS trial_started_at timestamptz NOT NULL DEFAULT now()"),await t.query("ALTER TABLE analytics_thorbit_entitlements ADD COLUMN IF NOT EXISTS trial_ends_at timestamptz NOT NULL DEFAULT (now() + interval '30 days')"),await t.query("ALTER TABLE analytics_thorbit_entitlements DROP CONSTRAINT IF EXISTS analytics_thorbit_entitlements_connection_source_check"),await t.query("ALTER TABLE analytics_thorbit_entitlements ADD CONSTRAINT analytics_thorbit_entitlements_connection_source_check CHECK (connection_source IN ('trial','api_key','thorbit_session'))"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_thorbit_connect_states (
+        state_hash text PRIMARY KEY,
+        user_id bigint NOT NULL,
+        expires_at timestamptz NOT NULL,
+        consumed_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_exports ADD COLUMN IF NOT EXISTS idempotency_key text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS country_code text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS region_code text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_sessions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        visitor_hmac text NOT NULL,
+        session_hmac text NOT NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        started_at timestamptz NOT NULL,
+        last_active_at timestamptz NOT NULL,
+        ended_at timestamptz,
+        duration_ms bigint NOT NULL DEFAULT 0 CHECK (duration_ms >= 0),
+        landing_path text,
+        exit_path text,
+        pageview_count integer NOT NULL DEFAULT 0,
+        event_count integer NOT NULL DEFAULT 0,
+        first_touch_id uuid,
+        last_touch_id uuid,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, session_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_attribution_touches (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        session_id uuid REFERENCES analytics_sessions(id) ON DELETE SET NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        visitor_hmac text,
+        occurred_at timestamptz NOT NULL,
+        source text,
+        medium text,
+        campaign text,
+        referrer text,
+        click_ids jsonb NOT NULL DEFAULT '{}'::jsonb,
+        landing_path text,
+        touch_hash text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, touch_hash)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_connections (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        name text NOT NULL,
+        source_account_ref text NOT NULL,
+        service_connection_ref text,
+        secret_ciphertext text,
+        config jsonb NOT NULL DEFAULT '{}'::jsonb,
+        readiness text NOT NULL DEFAULT 'configured_unverified'
+          CHECK (readiness IN ('not_configured','configured_unverified','verified','live','degraded','disabled')),
+        last_verified_at timestamptz,
+        last_event_at timestamptz,
+        last_reconciled_at timestamptz,
+        last_error_code text,
+        verification_evidence text CHECK (verification_evidence IN ('synthetic','provider')),
+        last_verified_receipt_id uuid,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, provider, source_account_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_webhook_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        source_event_id text NOT NULL,
+        signature_status text NOT NULL CHECK (signature_status IN ('verified','invalid','not_supported')),
+        normalization_status text NOT NULL DEFAULT 'pending'
+          CHECK (normalization_status IN ('pending','accepted','rejected','replayed')),
+        payload_ciphertext text,
+        payload_expires_at timestamptz,
+        error_code text,
+        received_at timestamptz NOT NULL DEFAULT now(),
+        normalized_at timestamptz,
+        UNIQUE(site_id, provider, source_account_ref, source_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_external_events (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        receipt_id uuid REFERENCES analytics_webhook_receipts(id) ON DELETE SET NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        source text NOT NULL,
+        source_account_ref text NOT NULL,
+        source_event_id text NOT NULL,
+        event_kind text NOT NULL CHECK (event_kind IN ('form','call','crm','transaction','custom_server','conversion','delivery')),
+        event_name text NOT NULL,
+        occurred_at timestamptz NOT NULL,
+        visitor_hmac text,
+        session_hmac text,
+        call_id text,
+        deal_id text,
+        order_id text,
+        value_minor bigint,
+        currency text,
+        click_ids jsonb NOT NULL DEFAULT '{}'::jsonb,
+        properties jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, source, source_account_ref, source_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_reconciliation_cursors (
+        connection_id uuid PRIMARY KEY REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        cursor jsonb,
+        health text NOT NULL DEFAULT 'webhook_only'
+          CHECK (health IN ('webhook_only','reconciled','degraded')),
+        records_replayed bigint NOT NULL DEFAULT 0,
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_source_event_id text,
+        last_error_code text,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_reconciliation_jobs (
+        id uuid PRIMARY KEY,
+        connection_id uuid NOT NULL UNIQUE REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','leased')),
+        attempts integer NOT NULL DEFAULT 0,
+        next_attempt_at timestamptz NOT NULL DEFAULT now(),
+        lease_until timestamptz,
+        last_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        event_name text NOT NULL,
+        trigger_kind text NOT NULL CHECK (trigger_kind IN ('page','click','form','semantic','custom_server','call','crm_stage','transaction')),
+        definition jsonb NOT NULL,
+        version integer NOT NULL DEFAULT 1,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name)
+      )
+    `),await t.query(`
+      DO $$
+      BEGIN
+        IF EXISTS (
+          SELECT 1
+            FROM pg_constraint
+           WHERE conrelid = 'analytics_event_definitions'::regclass
+             AND conname = 'analytics_event_definitions_trigger_kind_check'
+             AND pg_get_constraintdef(oid) NOT LIKE '%semantic%'
+        ) THEN
+          ALTER TABLE analytics_event_definitions
+            DROP CONSTRAINT analytics_event_definitions_trigger_kind_check;
+          ALTER TABLE analytics_event_definitions
+            ADD CONSTRAINT analytics_event_definitions_trigger_kind_check
+            CHECK (trigger_kind IN ('page','click','form','semantic','custom_server','call','crm_stage','transaction'));
+        END IF;
+      END $$
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_conversion_rules (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        conversion_kind text NOT NULL,
+        condition jsonb NOT NULL,
+        default_value_minor bigint,
+        default_currency text NOT NULL DEFAULT 'USD',
+        version integer NOT NULL DEFAULT 1,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_restricted_data (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE CASCADE,
+        purpose text NOT NULL,
+        subject_ref text NOT NULL,
+        payload_ciphertext text NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, purpose, subject_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_tombstones (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid,
+        kind text NOT NULL,
+        value_hmac text NOT NULL,
+        reason text NOT NULL CHECK (reason IN ('subject_deletion')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id,kind,value_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_profile_access_audits (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid,
+        actor_user_id bigint NOT NULL,
+        subject_ref_hmac text NOT NULL,
+        purpose text NOT NULL CHECK (purpose IN ('journey_identity_display')),
+        result text NOT NULL CHECK (result IN ('returned_masked','not_found','unavailable','rate_limited')),
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_identity_profile_access_rate ON analytics_identity_profile_access_audits(site_id,actor_user_id,created_at DESC)"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS readiness text NOT NULL DEFAULT 'configured_unverified' CHECK (readiness IN ('not_configured','configured_unverified','verified','live','degraded','disabled'))"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS last_tested_at timestamptz"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS last_receipt_id text"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS provider_config jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS mapping_version integer NOT NULL DEFAULT 1"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS automatic_delivery_enabled boolean NOT NULL DEFAULT false"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS lease_until timestamptz"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS mapping_version integer NOT NULL DEFAULT 1"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS external_receipt_id text"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS response_code integer"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS response_category text"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS dead_lettered_at timestamptz"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_destination_tests (
+        id uuid PRIMARY KEY,
+        destination_id uuid NOT NULL REFERENCES analytics_activation_destinations(id) ON DELETE CASCADE,
+        mapping_version integer NOT NULL,
+        provider_request_id text,
+        provider_event_id text,
+        warnings jsonb NOT NULL DEFAULT '[]'::jsonb,
+        safe_error_category text,
+        request_started_at timestamptz NOT NULL DEFAULT now(),
+        response_received_at timestamptz,
+        next_diagnostic_at timestamptz,
+        actor text NOT NULL,
+        accepted boolean NOT NULL DEFAULT false,
+        validation_only boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_delivery_attempts (
+        id uuid PRIMARY KEY,
+        job_id uuid NOT NULL REFERENCES analytics_activation_jobs(id) ON DELETE CASCADE,
+        destination_id uuid NOT NULL REFERENCES analytics_activation_destinations(id) ON DELETE CASCADE,
+        mapping_version integer NOT NULL,
+        attempt_number integer NOT NULL,
+        provider_request_id text,
+        provider_event_id text,
+        warnings jsonb NOT NULL DEFAULT '[]'::jsonb,
+        safe_error_category text,
+        request_started_at timestamptz NOT NULL DEFAULT now(),
+        response_received_at timestamptz,
+        next_diagnostic_at timestamptz,
+        actor text NOT NULL,
+        accepted boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(job_id, attempt_number)
+      )
+    `),await t.query("ALTER TABLE analytics_crm_import_rows ADD COLUMN IF NOT EXISTS next_attempt_at timestamptz NOT NULL DEFAULT now()"),await t.query("ALTER TABLE analytics_crm_import_rows ADD COLUMN IF NOT EXISTS lease_until timestamptz"),await t.query("ALTER TABLE analytics_crm_import_rows ADD COLUMN IF NOT EXISTS expires_at timestamptz NOT NULL DEFAULT (now() + interval '7 days')"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS rule_id uuid REFERENCES analytics_conversion_rules(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS rule_version integer"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS order_id text"),await t.query("ALTER TABLE analytics_connections ADD COLUMN IF NOT EXISTS verification_evidence text CHECK (verification_evidence IN ('synthetic','provider'))"),await t.query("ALTER TABLE analytics_connections ADD COLUMN IF NOT EXISTS last_verified_receipt_id uuid"),await t.query("ALTER TABLE analytics_sessions ADD COLUMN IF NOT EXISTS public_ref text"),await t.query("ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS public_ref text"),await t.query(`UPDATE analytics_people
+          SET public_ref = 'xrp_' || substr(md5(random()::text || clock_timestamp()::text || id::text || site_id::text), 1, 24)
+        WHERE public_ref IS NULL`),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS event_definition_id uuid REFERENCES analytics_event_definitions(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS event_definition_version integer"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS value_source text NOT NULL DEFAULT 'default_zero' CHECK (value_source IN ('absent','default_zero','fixed','dynamic','conditional_override','provider','verified_revenue','restatement'))"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS value_provenance jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS touch_kind text NOT NULL DEFAULT 'click' CHECK (touch_kind IN ('click','view','direct','organic','referral','email','sms','call','other'))"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS platform text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS account_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS campaign_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS ad_set_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS ad_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS creative_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS placement text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_onboarding_presentations (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        preferences jsonb NOT NULL DEFAULT '{}'::jsonb,
+        last_presented_step text,
+        dismissed_help jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, user_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_funnel_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        stages jsonb NOT NULL CHECK (jsonb_typeof(stages) = 'array'),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        is_default boolean NOT NULL DEFAULT false,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_saved_views (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        name text NOT NULL,
+        report_type text NOT NULL,
+        schema_version integer NOT NULL DEFAULT 1 CHECK (schema_version > 0),
+        settings jsonb NOT NULL DEFAULT '{}'::jsonb,
+        is_default boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, owner_user_id, report_type, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_product_milestones (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        milestone text NOT NULL,
+        evidence_kind text NOT NULL,
+        evidence_ref text,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        safe_metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+        UNIQUE(site_id, user_id, milestone)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_scheduled_occurrences (
+        id uuid PRIMARY KEY,
+        lane_key text NOT NULL,
+        scheduled_for timestamptz NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','running','retrying','succeeded','dead_letter')),
+        attempt_count integer NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+        max_attempts integer NOT NULL DEFAULT 5 CHECK (max_attempts BETWEEN 1 AND 20),
+        next_attempt_at timestamptz NOT NULL,
+        lease_owner text,
+        lease_until timestamptz,
+        started_at timestamptz,
+        completed_at timestamptz,
+        dead_lettered_at timestamptz,
+        last_error_code text,
+        result_summary jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(lane_key, scheduled_for)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_purpose_policies (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        purpose text NOT NULL CHECK (purpose IN ('necessary','site_analytics','enhanced_matching','advertising_measurement')),
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        retention_days integer CHECK (retention_days IS NULL OR retention_days > 0),
+        enabled boolean NOT NULL DEFAULT true,
+        policy jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        retired_at timestamptz,
+        UNIQUE(site_id, purpose, policy_version, jurisdiction_profile)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_consent_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        subject_ref text NOT NULL,
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        necessary boolean NOT NULL DEFAULT true CHECK (necessary),
+        site_analytics boolean NOT NULL DEFAULT false,
+        enhanced_matching boolean NOT NULL DEFAULT false,
+        advertising_measurement boolean NOT NULL DEFAULT false,
+        gpc boolean NOT NULL DEFAULT false,
+        action text NOT NULL CHECK (action IN ('accept_all','reject_all','save_choices','withdraw','gpc')),
+        source text NOT NULL CHECK (source IN ('gateway','api','gpc','system')),
+        presented_at timestamptz,
+        occurred_at timestamptz NOT NULL,
+        expires_at timestamptz,
+        supersedes_id uuid REFERENCES analytics_consent_receipts(id) ON DELETE SET NULL,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_consent_receipts ADD COLUMN IF NOT EXISTS presented_at timestamptz"),await t.query(`
+      DO $$
+      BEGIN
+        IF NOT EXISTS (
+          SELECT 1 FROM pg_constraint
+           WHERE conrelid = 'analytics_consent_receipts'::regclass
+             AND conname = 'analytics_consent_receipts_presentation_order_check'
+        ) THEN
+          ALTER TABLE analytics_consent_receipts
+            ADD CONSTRAINT analytics_consent_receipts_presentation_order_check
+            CHECK (presented_at IS NULL OR presented_at <= occurred_at);
+        END IF;
+      END $$
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_consent_current_state (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        subject_ref text NOT NULL,
+        latest_receipt_id uuid NOT NULL REFERENCES analytics_consent_receipts(id) ON DELETE CASCADE,
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        necessary boolean NOT NULL DEFAULT true CHECK (necessary),
+        site_analytics boolean NOT NULL DEFAULT false,
+        enhanced_matching boolean NOT NULL DEFAULT false,
+        advertising_measurement boolean NOT NULL DEFAULT false,
+        gpc boolean NOT NULL DEFAULT false,
+        effective_at timestamptz NOT NULL,
+        expires_at timestamptz,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, subject_ref)
+      )
+    `),await t.query("ALTER TABLE analytics_restricted_data ADD COLUMN IF NOT EXISTS consent_receipt_id uuid REFERENCES analytics_consent_receipts(id) ON DELETE CASCADE"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_namespaces (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','approved','disabled','archived')),
+        approved_hosts jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(approved_hosts) = 'array'),
+        approved_sources jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(approved_sources) = 'array'),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version),
+        UNIQUE(id, site_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_sources (
+        id uuid PRIMARY KEY,
+        namespace_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        source_kind text NOT NULL CHECK (source_kind IN ('pixel','host','form','crm','call','server','import')),
+        source_ref text NOT NULL,
+        status text NOT NULL DEFAULT 'approved' CHECK (status IN ('pending','approved','revoked')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        revoked_at timestamptz,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(namespace_id, source_kind, source_ref)
+      )
+    `),await t.query("ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS namespace_id uuid"),await t.query("ALTER TABLE analytics_identity_nodes ADD COLUMN IF NOT EXISTS namespace_id uuid"),await t.query("ALTER TABLE analytics_identity_edges ADD COLUMN IF NOT EXISTS namespace_id uuid"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_site_ref ON analytics_people(id, site_id)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_identity_nodes_site_ref ON analytics_identity_nodes(id, site_id)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_identity_nodes_namespace_ref ON analytics_identity_nodes(id, site_id, namespace_id)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_namespace_ref ON analytics_people(id, site_id, namespace_id)"),await t.query(`
+      DO $$
+      BEGIN
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_people_namespace_site_fkey') THEN
+          ALTER TABLE analytics_people ADD CONSTRAINT analytics_people_namespace_site_fkey
+            FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id)
+            ON DELETE RESTRICT NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_nodes_namespace_site_fkey') THEN
+          ALTER TABLE analytics_identity_nodes ADD CONSTRAINT analytics_identity_nodes_namespace_site_fkey
+            FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id)
+            ON DELETE RESTRICT NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_person_site_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_person_site_fkey
+            FOREIGN KEY(person_id, site_id) REFERENCES analytics_people(id, site_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_node_site_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_node_site_fkey
+            FOREIGN KEY(identity_node_id, site_id) REFERENCES analytics_identity_nodes(id, site_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_namespace_site_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_namespace_site_fkey
+            FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id)
+            ON DELETE RESTRICT NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_person_namespace_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_person_namespace_fkey
+            FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_node_namespace_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_node_namespace_fkey
+            FOREIGN KEY(identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+      END $$
+    `);for(let i of[["analytics_people","analytics_people_namespace_site_fkey"],["analytics_identity_nodes","analytics_identity_nodes_namespace_site_fkey"],["analytics_identity_edges","analytics_identity_edges_person_site_fkey"],["analytics_identity_edges","analytics_identity_edges_node_site_fkey"],["analytics_identity_edges","analytics_identity_edges_namespace_site_fkey"],["analytics_identity_edges","analytics_identity_edges_person_namespace_fkey"],["analytics_identity_edges","analytics_identity_edges_node_namespace_fkey"]])await t.query(`ALTER TABLE ${i[0]} VALIDATE CONSTRAINT ${i[1]}`);await t.query("ALTER TABLE analytics_people DROP CONSTRAINT IF EXISTS analytics_people_namespace_id_fkey"),await t.query("ALTER TABLE analytics_identity_nodes DROP CONSTRAINT IF EXISTS analytics_identity_nodes_namespace_id_fkey"),await t.query("ALTER TABLE analytics_identity_edges DROP CONSTRAINT IF EXISTS analytics_identity_edges_namespace_id_fkey"),await t.query("ALTER TABLE analytics_identity_edges DROP CONSTRAINT IF EXISTS analytics_identity_edges_person_id_fkey"),await t.query("ALTER TABLE analytics_identity_edges DROP CONSTRAINT IF EXISTS analytics_identity_edges_identity_node_id_fkey"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_associations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        left_identity_node_id uuid NOT NULL,
+        right_identity_node_id uuid NOT NULL,
+        confidence numeric(5,4) NOT NULL CHECK (confidence >= 0 AND confidence <= 1),
+        confidence_band text NOT NULL CHECK (confidence_band IN ('high','medium','low','ineligible')),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','expired','rejected','promoted','deleted')),
+        consent_receipt_id uuid NOT NULL REFERENCES analytics_consent_receipts(id) ON DELETE RESTRICT,
+        model_version text NOT NULL,
+        first_observed_at timestamptz NOT NULL,
+        last_observed_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL,
+        promoted_person_id uuid,
+        promoted_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK (left_identity_node_id <> right_identity_node_id),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(left_identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(right_identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(promoted_person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE RESTRICT,
+        UNIQUE(namespace_id, left_identity_node_id, right_identity_node_id, model_version),
+        UNIQUE(id, namespace_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_evidence (
+        id uuid PRIMARY KEY,
+        association_id uuid NOT NULL,
+        namespace_id uuid NOT NULL,
+        feature_kind text NOT NULL CHECK (feature_kind IN ('device_bucket','browser_bucket','coarse_geo','network_bucket','temporal_pattern','journey_pattern')),
+        feature_hmac text NOT NULL,
+        contribution numeric(6,5) NOT NULL CHECK (contribution >= -1 AND contribution <= 1),
+        observed_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(association_id, feature_kind, feature_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_promotions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        association_id uuid NOT NULL,
+        person_id uuid NOT NULL,
+        evidence_kind text NOT NULL CHECK (evidence_kind IN ('verified_email','verified_phone','crm_contact','signed_linker','authenticated_user')),
+        evidence_ref_hmac text NOT NULL,
+        promoted_by text NOT NULL CHECK (promoted_by IN ('system','user')),
+        promoted_by_user_id bigint,
+        promoted_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(association_id, person_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_promotion_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        canonical_person_id uuid NOT NULL,
+        canonical_person_ref_hmac text NOT NULL,
+        evidence_kind text NOT NULL,
+        evidence_ref_hmac text NOT NULL,
+        prior_person_ids uuid[] NOT NULL DEFAULT '{}',
+        prior_identity_node_ids uuid[] NOT NULL DEFAULT '{}',
+        candidate_association_ids uuid[] NOT NULL DEFAULT '{}',
+        affected_history_counts jsonb NOT NULL DEFAULT '{}'::jsonb CHECK (jsonb_typeof(affected_history_counts)='object'),
+        schema_version text NOT NULL DEFAULT 'xray.identity-promotion.v1',
+        idempotency_key text NOT NULL,
+        promoted_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_touches_site_ref ON analytics_attribution_touches(id, site_id)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_attribution_touches (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        association_id uuid NOT NULL,
+        touch_id uuid NOT NULL,
+        eligibility text NOT NULL DEFAULT 'overlay_only' CHECK (eligibility IN ('overlay_only','review','ineligible','expired')),
+        association_confidence numeric(5,4) NOT NULL CHECK (association_confidence >= 0 AND association_confidence <= 1),
+        model_version text NOT NULL,
+        linked_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(touch_id, site_id) REFERENCES analytics_attribution_touches(id, site_id) ON DELETE CASCADE,
+        UNIQUE(association_id, touch_id, model_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_value_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        event_definition_id uuid NOT NULL REFERENCES analytics_event_definitions(id) ON DELETE CASCADE,
+        version integer NOT NULL CHECK (version > 0),
+        base_mode text NOT NULL DEFAULT 'none' CHECK (base_mode IN ('none','fixed','dynamic')),
+        fixed_value_minor bigint,
+        currency text NOT NULL DEFAULT 'USD',
+        dynamic_source jsonb,
+        conditional_event_definition_id uuid REFERENCES analytics_event_definitions(id) ON DELETE SET NULL,
+        conditional_window_days integer CHECK (conditional_window_days IS NULL OR conditional_window_days > 0),
+        conditional_value_minor bigint,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK ((base_mode = 'fixed') = (fixed_value_minor IS NOT NULL)),
+        CHECK ((conditional_event_definition_id IS NULL) = (conditional_value_minor IS NULL)),
+        UNIQUE(site_id, event_definition_id, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_value_evaluations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        source_event_id uuid NOT NULL REFERENCES analytics_events(id) ON DELETE CASCADE,
+        definition_id uuid REFERENCES analytics_event_value_definitions(id) ON DELETE SET NULL,
+        definition_version integer,
+        value_minor bigint,
+        currency text,
+        value_source text NOT NULL CHECK (value_source IN ('absent','default_zero','fixed','dynamic','conditional_override','provider','verified_revenue','restatement')),
+        matched_event_id uuid REFERENCES analytics_events(id) ON DELETE SET NULL,
+        provenance jsonb NOT NULL DEFAULT '{}'::jsonb,
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, source_event_id, definition_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_data_class_policies (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        data_class text NOT NULL,
+        purpose text NOT NULL,
+        jurisdiction_profile text NOT NULL,
+        retention_days integer CHECK (retention_days IS NULL OR retention_days > 0),
+        storage_kind text NOT NULL CHECK (storage_kind IN ('ordinary','pseudonymous','encrypted_restricted','ephemeral')),
+        withdrawal_action text NOT NULL CHECK (withdrawal_action IN ('stop_future','expire','delete','retain_necessary')),
+        deletion_action text NOT NULL CHECK (deletion_action IN ('delete','anonymize','retain_legal')),
+        read_surface text NOT NULL,
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, data_class, jurisdiction_profile, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_privacy_audits (
+        id uuid PRIMARY KEY,
+        site_id uuid REFERENCES analytics_sites(id) ON DELETE SET NULL,
+        namespace_ref text,
+        subject_ref text,
+        action text NOT NULL CHECK (action IN ('export_requested','export_completed','deletion_requested','deletion_completed','withdrawal_applied','retention_expired','candidate_promoted')),
+        idempotency_key text NOT NULL,
+        actor_user_id bigint,
+        result_code text NOT NULL,
+        affected_counts jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query("ALTER TABLE analytics_privacy_audits ADD COLUMN IF NOT EXISTS request_fingerprint text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provider_capabilities (
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL CHECK (contract_version > 0),
+        capabilities jsonb NOT NULL DEFAULT '{}'::jsonb,
+        documentation_refs jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        retired_at timestamptz,
+        PRIMARY KEY(provider, contract_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provisioning_plans (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL CHECK (contract_version > 0),
+        tenant_schema_version text,
+        plan jsonb NOT NULL,
+        status text NOT NULL DEFAULT 'preview' CHECK (status IN ('preview','approved','applying','verified','failed','reverted')),
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provisioning_receipts (
+        id uuid PRIMARY KEY,
+        plan_id uuid NOT NULL REFERENCES analytics_crm_provisioning_plans(id) ON DELETE CASCADE,
+        operation text NOT NULL CHECK (operation IN ('describe','discover','create_field','test_write','revert_test','verify')),
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','reverted')),
+        external_object_ref text,
+        safe_error_code text,
+        warnings jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_person_mappings (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL,
+        provider_person_ref text NOT NULL,
+        mapping_version integer NOT NULL DEFAULT 1 CHECK (mapping_version > 0),
+        last_synced_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(connection_id, person_id),
+        UNIQUE(connection_id, provider_person_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_pipeline_mappings (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        funnel_definition_id uuid REFERENCES analytics_funnel_definitions(id) ON DELETE SET NULL,
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        mapping jsonb NOT NULL,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(connection_id, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_state (
+        connection_id uuid PRIMARY KEY REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provisioning_plan_id uuid REFERENCES analytics_crm_provisioning_plans(id) ON DELETE SET NULL,
+        cursor jsonb,
+        direction text NOT NULL DEFAULT 'bidirectional' CHECK (direction IN ('inbound','outbound','bidirectional','webhook_only')),
+        status text NOT NULL DEFAULT 'idle' CHECK (status IN ('idle','pending','running','healthy','degraded','disabled')),
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_success_at timestamptz,
+        last_error_code text,
+        next_sync_at timestamptz,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        direction text NOT NULL CHECK (direction IN ('inbound','outbound')),
+        operation text NOT NULL CHECK (operation IN ('person_upsert','activity_append','pipeline_update','schema_read','historical_pull')),
+        subject_ref text,
+        external_receipt_id text,
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','retrying')),
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS public_plan_id text"),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS schema_fingerprint text"),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS request_fingerprint text"),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS approved_field_ids jsonb NOT NULL DEFAULT '[]'::jsonb"),await t.query("ALTER TABLE analytics_crm_provisioning_receipts ADD COLUMN IF NOT EXISTS public_receipt_id text"),await t.query("ALTER TABLE analytics_crm_provisioning_receipts ADD COLUMN IF NOT EXISTS receipt jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_crm_plan_public_scope ON analytics_crm_provisioning_plans(site_id, public_plan_id) WHERE public_plan_id IS NOT NULL"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_crm_receipt_public_id ON analytics_crm_provisioning_receipts(public_receipt_id) WHERE public_receipt_id IS NOT NULL"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_connection_capabilities (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL DEFAULT 1 CHECK (contract_version > 0),
+        mode text NOT NULL CHECK (mode IN ('incremental_and_webhook','incremental_only','webhook_only','manual_backfill','unavailable')),
+        schema_fingerprint text,
+        allowed_operations jsonb NOT NULL DEFAULT '[]'::jsonb,
+        evidence jsonb NOT NULL,
+        verified_at timestamptz NOT NULL,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(connection_id, contract_version),
+        UNIQUE(site_id, connection_id, provider, contract_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_runs (
+        sync_id text PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        mode text NOT NULL CHECK (mode IN ('initial','incremental','webhook')),
+        state text NOT NULL DEFAULT 'queued' CHECK (state IN ('queued','running','completed','degraded','cancelled','webhook_only')),
+        mapping jsonb NOT NULL,
+        mapping_version integer NOT NULL DEFAULT 1 CHECK (mapping_version > 0),
+        capability_evidence jsonb NOT NULL DEFAULT '{}'::jsonb,
+        cursor jsonb,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL,
+        last_started_at timestamptz,
+        last_success_at timestamptz,
+        next_run_at timestamptz,
+        interval_seconds integer CHECK (interval_seconds IS NULL OR (interval_seconds >= 900 AND interval_seconds <= 604800)),
+        imported integer NOT NULL DEFAULT 0 CHECK (imported >= 0),
+        deduplicated integer NOT NULL DEFAULT 0 CHECK (deduplicated >= 0),
+        rejected integer NOT NULL DEFAULT 0 CHECK (rejected >= 0),
+        last_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query("ALTER TABLE analytics_crm_sync_runs ADD COLUMN IF NOT EXISTS interval_seconds integer CHECK (interval_seconds IS NULL OR (interval_seconds >= 900 AND interval_seconds <= 604800))"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_sync_runs_due ON analytics_crm_sync_runs(state, next_run_at) WHERE next_run_at IS NOT NULL"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_policies (
+        policy_id text PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        kind text NOT NULL CHECK (kind IN ('person_summary','pipeline_event')),
+        enabled boolean NOT NULL DEFAULT false,
+        version integer NOT NULL CHECK (version > 0),
+        provisioning_receipt_id text NOT NULL,
+        schema_fingerprint text NOT NULL,
+        mapping_version integer CHECK (mapping_version > 0),
+        mapping jsonb,
+        allowed_fields jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(allowed_fields) = 'array'),
+        selected_events jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(selected_events) = 'array'),
+        purpose text NOT NULL CHECK (purpose IN ('necessary_form_fulfillment','site_analytics','advertising_measurement')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, connection_id, kind, version),
+        CHECK ((kind='person_summary' AND mapping_version IS NULL AND mapping IS NULL) OR
+               (kind='pipeline_event' AND mapping_version IS NOT NULL AND mapping IS NOT NULL))
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_jobs (
+        job_id text PRIMARY KEY,
+        policy_id text NOT NULL REFERENCES analytics_crm_outbound_policies(policy_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        kind text NOT NULL CHECK (kind IN ('person_summary','pipeline_event')),
+        state text NOT NULL DEFAULT 'pending' CHECK (state IN ('pending','running','retrying','delivered','dead_letter','cancelled')),
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        mapping_version integer CHECK (mapping_version > 0),
+        source_event_id text,
+        payload_ciphertext text NOT NULL,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL,
+        attempts integer NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+        max_attempts integer NOT NULL DEFAULT 5 CHECK (max_attempts BETWEEN 1 AND 20),
+        next_attempt_at timestamptz,
+        lease_expires_at timestamptz,
+        safe_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz,
+        cancelled_at timestamptz,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_attempts (
+        id uuid PRIMARY KEY,
+        job_id text NOT NULL REFERENCES analytics_crm_outbound_jobs(job_id) ON DELETE CASCADE,
+        attempt integer NOT NULL CHECK (attempt > 0),
+        status text NOT NULL CHECK (status IN ('started','accepted','retrying','failed','cancelled')),
+        safe_error_code text,
+        started_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        UNIQUE(job_id, attempt)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_receipts (
+        receipt_id text PRIMARY KEY,
+        job_id text NOT NULL REFERENCES analytics_crm_outbound_jobs(job_id) ON DELETE CASCADE,
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','retrying')),
+        external_receipt_id text,
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_worker_state (
+        worker_key text PRIMARY KEY,
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_success_at timestamptz,
+        last_error_code text,
+        last_claimed integer NOT NULL DEFAULT 0,
+        last_remaining_due integer NOT NULL DEFAULT 0,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_jobs_due ON analytics_crm_outbound_jobs(state,next_attempt_at) WHERE state IN ('pending','retrying')"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_jobs_person ON analytics_crm_outbound_jobs(site_id,person_id,created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_receipts_job ON analytics_crm_outbound_receipts(job_id,occurred_at DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_score_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        score_kind text NOT NULL CHECK (score_kind IN ('fit','engagement','combined')),
+        rules jsonb NOT NULL CHECK (jsonb_typeof(rules) = 'array'),
+        thresholds jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(thresholds) = 'array'),
+        minimum_score integer NOT NULL DEFAULT 0,
+        maximum_score integer NOT NULL DEFAULT 100 CHECK (maximum_score >= minimum_score),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_score_evaluations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        definition_id uuid NOT NULL REFERENCES analytics_score_definitions(id) ON DELETE CASCADE,
+        definition_version integer NOT NULL CHECK (definition_version > 0),
+        person_id uuid,
+        candidate_association_id uuid,
+        score integer NOT NULL,
+        band text,
+        contributions jsonb NOT NULL DEFAULT '[]'::jsonb,
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(candidate_association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        CHECK ((person_id IS NOT NULL)::integer + (candidate_association_id IS NOT NULL)::integer = 1)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_targets (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        name text NOT NULL,
+        target_event_definition_id uuid NOT NULL REFERENCES analytics_event_definitions(id) ON DELETE RESTRICT,
+        horizon_days integer NOT NULL CHECK (horizon_days > 0),
+        minimum_confirmed_people integer NOT NULL CHECK (minimum_confirmed_people > 0),
+        minimum_positive_outcomes integer NOT NULL CHECK (minimum_positive_outcomes > 0),
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','eligible','training','active','degraded','disabled')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(id, site_id, namespace_id),
+        UNIQUE(namespace_id, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_manifests (
+        id uuid PRIMARY KEY,
+        target_id uuid NOT NULL REFERENCES analytics_prediction_targets(id) ON DELETE CASCADE,
+        model_version text NOT NULL,
+        training_window_start timestamptz NOT NULL,
+        training_window_end timestamptz NOT NULL,
+        confirmed_people_count integer NOT NULL CHECK (confirmed_people_count >= 0),
+        positive_outcome_count integer NOT NULL CHECK (positive_outcome_count >= 0),
+        calibration jsonb NOT NULL DEFAULT '{}'::jsonb,
+        feature_manifest jsonb NOT NULL DEFAULT '{}'::jsonb,
+        status text NOT NULL CHECK (status IN ('ineligible','training','validated','active','degraded','retired')),
+        trained_at timestamptz,
+        activated_at timestamptz,
+        retired_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(target_id, model_version),
+        UNIQUE(id, target_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_results (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        target_id uuid NOT NULL,
+        manifest_id uuid NOT NULL,
+        person_id uuid NOT NULL,
+        probability numeric(7,6) NOT NULL CHECK (probability >= 0 AND probability <= 1),
+        expected_value_minor bigint,
+        currency text,
+        status text NOT NULL DEFAULT 'available' CHECK (status IN ('available','stale','superseded','deleted')),
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(target_id, site_id, namespace_id) REFERENCES analytics_prediction_targets(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(manifest_id, target_id) REFERENCES analytics_prediction_manifests(id, target_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(manifest_id, person_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_ad_spend_facts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        bucket date NOT NULL,
+        platform text NOT NULL,
+        account_id text,
+        campaign_id text,
+        campaign_name text,
+        ad_set_id text,
+        ad_set_name text,
+        ad_id text,
+        ad_name text,
+        creative_id text,
+        placement text,
+        spend_minor bigint NOT NULL CHECK (spend_minor >= 0),
+        currency text NOT NULL,
+        source_ref text NOT NULL,
+        source_updated_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, platform, bucket, source_ref)
+      )
+    `),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_exports_owner_idempotency
+      ON analytics_exports(requested_by_user_id, idempotency_key) WHERE idempotency_key IS NOT NULL`),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_time ON analytics_events(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_session_hmac_time ON analytics_events(site_id, session_hmac, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_visitor_hmac_time ON analytics_events(site_id, visitor_hmac, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_conversions_site_session_hmac_time ON analytics_conversions(site_id, session_hmac, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_pixel_time ON analytics_events(pixel_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_hostname_time ON analytics_events(site_id, hostname, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_acquisition ON analytics_events(site_id, source, medium, campaign, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_conversions_site_time ON analytics_conversions(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_sessions_site_visitor_time ON analytics_sessions(site_id, visitor_hmac, started_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_touches_site_person_time ON analytics_attribution_touches(site_id, person_id, occurred_at)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_external_events_site_time ON analytics_external_events(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_webhook_receipts_reconcile ON analytics_webhook_receipts(connection_id, received_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_reconciliation_jobs_due ON analytics_reconciliation_jobs(status, next_attempt_at, lease_until)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_jobs_due ON analytics_activation_jobs(status, next_attempt_at) WHERE status = 'pending'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_tests_destination_time ON analytics_activation_destination_tests(destination_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_attempts_destination_time ON analytics_activation_delivery_attempts(destination_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_tests_diagnostics_due ON analytics_activation_destination_tests(next_diagnostic_at) WHERE next_diagnostic_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_restricted_data_expiry ON analytics_restricted_data(expires_at)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_linker_tokens_expiry ON analytics_linker_tokens(expires_at) WHERE consumed_at IS NULL"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_sessions_site_public_ref ON analytics_sessions(site_id, public_ref) WHERE public_ref IS NOT NULL"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_site_public_ref ON analytics_people(site_id, public_ref) WHERE public_ref IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_sessions_keyset ON analytics_sessions(site_id, started_at DESC, id DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_keyset ON analytics_events(site_id, occurred_at DESC, id DESC)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_funnels_one_default ON analytics_funnel_definitions(site_id) WHERE is_default AND status = 'active'"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_saved_views_one_default ON analytics_saved_views(site_id, owner_user_id, report_type) WHERE is_default"),await t.query("CREATE INDEX IF NOT EXISTS analytics_product_milestones_site_time ON analytics_product_milestones(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scheduled_occurrences_due ON analytics_scheduled_occurrences(status,next_attempt_at,scheduled_for) WHERE status IN ('pending','retrying')"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scheduled_occurrences_lease ON analytics_scheduled_occurrences(lease_until) WHERE status='running'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_consent_receipts_subject_time ON analytics_consent_receipts(site_id, subject_ref, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_consent_receipts_expiry ON analytics_consent_receipts(expires_at) WHERE expires_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_consent_current_expiry ON analytics_consent_current_state(expires_at) WHERE expires_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_identity_sources_site ON analytics_identity_sources(site_id, namespace_id, status)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidates_active_expiry ON analytics_candidate_associations(namespace_id, expires_at) WHERE status = 'active'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidates_review ON analytics_candidate_associations(namespace_id, confidence_band, updated_at DESC) WHERE status = 'active'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_evidence_expiry ON analytics_candidate_evidence(expires_at)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_promotions_person_time ON analytics_candidate_promotions(site_id, person_id, promoted_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_identity_promotion_receipts_person_time ON analytics_identity_promotion_receipts(site_id, canonical_person_id, promoted_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_touches_overlay ON analytics_candidate_attribution_touches(site_id, namespace_id, linked_at DESC) WHERE eligibility = 'overlay_only'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_touches_expiry ON analytics_candidate_attribution_touches(expires_at) WHERE eligibility IN ('overlay_only','review')"),await t.query("CREATE INDEX IF NOT EXISTS analytics_value_evaluations_event ON analytics_event_value_evaluations(site_id, source_event_id)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_privacy_audits_site_time ON analytics_privacy_audits(site_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_provisioning_connection_time ON analytics_crm_provisioning_plans(connection_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_sync_due ON analytics_crm_sync_state(status, next_sync_at) WHERE next_sync_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_sync_receipts_connection_time ON analytics_crm_sync_receipts(connection_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scores_person_time ON analytics_score_evaluations(site_id, person_id, evaluated_at DESC) WHERE person_id IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scores_candidate_time ON analytics_score_evaluations(site_id, candidate_association_id, evaluated_at DESC) WHERE candidate_association_id IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_prediction_results_person_time ON analytics_prediction_results(site_id, person_id, evaluated_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_prediction_results_expiry ON analytics_prediction_results(expires_at) WHERE status = 'available'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_touches_hierarchy ON analytics_attribution_touches(site_id, platform, account_id, campaign_id, ad_set_id, ad_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_spend_facts_hierarchy ON analytics_ad_spend_facts(site_id, platform, account_id, campaign_id, ad_set_id, ad_id, bucket DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_runtime_manifests (
+        manifest_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        digest text NOT NULL CHECK (digest ~ '^[a-f0-9]{64}$'),
+        manifest jsonb NOT NULL,
+        is_current boolean NOT NULL DEFAULT false,
+        created_by_user_id bigint NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, revision)
+      )
+    `),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_runtime_manifests_one_current ON analytics_runtime_manifests(site_id) WHERE is_current"),await t.query("CREATE INDEX IF NOT EXISTS analytics_runtime_manifests_site_created ON analytics_runtime_manifests(site_id, created_at DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_runtime_manifest_publications (
+        publication_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        manifest_id uuid NOT NULL REFERENCES analytics_runtime_manifests(manifest_id) ON DELETE CASCADE,
+        setup_id uuid,
+        setup_revision integer,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        manifest jsonb NOT NULL,
+        published_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_runtime_rule_health (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        manifest_id uuid NOT NULL REFERENCES analytics_runtime_manifests(manifest_id) ON DELETE CASCADE,
+        rule_id uuid NOT NULL,
+        rule_version integer NOT NULL,
+        route_path text NOT NULL,
+        selector_quality text NOT NULL CHECK (selector_quality IN ('portable','stable','fragile')),
+        match_count integer NOT NULL CHECK (match_count BETWEEN 0 AND 100),
+        structural_fingerprint text NOT NULL CHECK (structural_fingerprint ~ '^[a-f0-9]{64}$'),
+        observed_at timestamptz NOT NULL,
+        PRIMARY KEY(manifest_id, rule_id, route_path)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_experiments (
+        experiment_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        current_revision integer NOT NULL CHECK (current_revision > 0),
+        state text NOT NULL CHECK (state IN ('draft','approved','canary','active','paused','killed','archived')),
+        created_by_user_id bigint NOT NULL,
+        create_idempotency_key text,
+        create_request_fingerprint text,
+        started_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_experiments ADD COLUMN IF NOT EXISTS create_idempotency_key text"),await t.query("ALTER TABLE analytics_experiments ADD COLUMN IF NOT EXISTS create_request_fingerprint text"),await t.query("ALTER TABLE analytics_experiments ADD COLUMN IF NOT EXISTS started_at timestamptz"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_experiments_site_create_idempotency ON analytics_experiments(site_id, create_idempotency_key) WHERE create_idempotency_key IS NOT NULL"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_experiment_revisions (
+        experiment_id uuid NOT NULL REFERENCES analytics_experiments(experiment_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        plan jsonb NOT NULL,
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(experiment_id, revision)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_experiment_receipts (
+        receipt_id uuid PRIMARY KEY,
+        experiment_id uuid NOT NULL REFERENCES analytics_experiments(experiment_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL,
+        operation text NOT NULL,
+        idempotency_key text,
+        receipt jsonb NOT NULL,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(experiment_id, idempotency_key)
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_experiments_site_updated ON analytics_experiments(site_id, updated_at DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_setups (
+        setup_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        revision integer NOT NULL CHECK (revision > 0),
+        status text NOT NULL,
+        start_url text NOT NULL,
+        state jsonb NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL,
+        updated_at timestamptz NOT NULL
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_setup_revisions (
+        setup_id uuid NOT NULL REFERENCES analytics_site_setups(setup_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        revision integer NOT NULL CHECK (revision > 0),
+        status text NOT NULL,
+        state jsonb NOT NULL,
+        created_at timestamptz NOT NULL,
+        PRIMARY KEY(setup_id, revision)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_setup_receipts (
+        receipt_id uuid PRIMARY KEY,
+        setup_id uuid NOT NULL REFERENCES analytics_site_setups(setup_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        revision integer NOT NULL,
+        operation text NOT NULL,
+        status text NOT NULL,
+        receipt jsonb NOT NULL,
+        occurred_at timestamptz NOT NULL
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_site_setups_owner_updated ON analytics_site_setups(owner_user_id, updated_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_site_setups_site_updated ON analytics_site_setups(site_id, updated_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_site_setup_receipts_setup_revision ON analytics_site_setup_receipts(setup_id, revision, occurred_at)"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_key text"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_id uuid"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_version_id uuid"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS restated_at timestamptz"),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_conversions_site_authority_key
+      ON analytics_conversions(site_id, authority_key) WHERE authority_key IS NOT NULL`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_authorities (
+        authority_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        outcome_family text NOT NULL,
+        authority_role text NOT NULL CHECK (authority_role IN ('primary','observation')),
+        state text NOT NULL CHECK (state IN ('configured_unverified','verified','live','degraded','disabled','blocked')),
+        current_revision integer NOT NULL DEFAULT 1 CHECK (current_revision > 0),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        disabled_at timestamptz,
+        UNIQUE(site_id, provider, source_account_ref, outcome_family)
+      )
+    `),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_revenue_authorities_one_primary
+      ON analytics_revenue_authorities(site_id, outcome_family)
+      WHERE authority_role='primary' AND state <> 'disabled'`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_provider_customer_bindings (
+        binding_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        authority_id uuid NOT NULL REFERENCES analytics_revenue_authorities(authority_id) ON DELETE CASCADE,
+        provider_customer_ref_hmac text NOT NULL CHECK (provider_customer_ref_hmac ~ '^[a-f0-9]{64}$'),
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        verification_status text NOT NULL CHECK (verification_status IN ('verified','revoked')),
+        evidence_ref text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        revoked_at timestamptz,
+        UNIQUE(authority_id, provider_customer_ref_hmac),
+        UNIQUE(authority_id, person_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_authoritative_outcomes (
+        outcome_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        authority_id uuid NOT NULL REFERENCES analytics_revenue_authorities(authority_id) ON DELETE RESTRICT,
+        authority_key text NOT NULL,
+        provider_object_kind text NOT NULL,
+        provider_object_ref_hmac text NOT NULL,
+        provider_customer_ref_hmac text,
+        outcome_kind text NOT NULL,
+        current_version integer NOT NULL DEFAULT 0 CHECK (current_version >= 0),
+        conversion_id uuid REFERENCES analytics_conversions(id) ON DELETE SET NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        first_observed_at timestamptz NOT NULL,
+        last_observed_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, authority_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_authoritative_outcome_versions (
+        version_id uuid NOT NULL UNIQUE,
+        outcome_id uuid NOT NULL REFERENCES analytics_authoritative_outcomes(outcome_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        version integer NOT NULL CHECK (version > 0),
+        transport_event_id text NOT NULL,
+        status text NOT NULL,
+        value_minor bigint NOT NULL,
+        currency text NOT NULL CHECK (currency ~ '^[A-Z]{3}$'),
+        occurred_at timestamptz NOT NULL,
+        observed_at timestamptz NOT NULL,
+        provenance jsonb NOT NULL DEFAULT '{}'::jsonb,
+        receipt_ref text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(outcome_id, version),
+        UNIQUE(site_id, transport_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_setup_revisions (
+        setup_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        authority_id uuid REFERENCES analytics_revenue_authorities(authority_id) ON DELETE SET NULL,
+        state text NOT NULL,
+        plan jsonb NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(setup_id, revision)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_setup_receipts (
+        receipt_id uuid PRIMARY KEY,
+        setup_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL,
+        operation text NOT NULL,
+        status text NOT NULL,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        receipt jsonb NOT NULL,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(setup_id, revision) REFERENCES analytics_revenue_setup_revisions(setup_id, revision) ON DELETE CASCADE,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_surveys (
+        survey_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        current_revision integer NOT NULL DEFAULT 1 CHECK (current_revision > 0),
+        state text NOT NULL CHECK (state IN ('draft','published','paused','archived')),
+        name text NOT NULL,
+        question text NOT NULL,
+        selection_mode text NOT NULL CHECK (selection_mode IN ('single','multiple')),
+        eligible_outcome_families text[] NOT NULL,
+        exchange_ttl_seconds integer NOT NULL CHECK (exchange_ttl_seconds BETWEEN 60 AND 86400),
+        session_ttl_seconds integer NOT NULL CHECK (session_ttl_seconds BETWEEN 60 AND 86400),
+        approved_copy_id text,
+        create_idempotency_key text,
+        create_request_fingerprint text,
+        state_transition_receipts jsonb NOT NULL DEFAULT '{}'::jsonb CHECK (jsonb_typeof(state_transition_receipts)='object'),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        archived_at timestamptz,
+        UNIQUE(site_id, create_idempotency_key)
+      )
+    `),await t.query(`ALTER TABLE analytics_post_purchase_surveys
+      ADD COLUMN IF NOT EXISTS state_transition_receipts jsonb NOT NULL DEFAULT '{}'::jsonb`),await t.query(`ALTER TABLE analytics_post_purchase_surveys
+      DROP CONSTRAINT IF EXISTS analytics_post_purchase_surveys_state_transition_receipts_check`),await t.query(`ALTER TABLE analytics_post_purchase_surveys
+      ADD CONSTRAINT analytics_post_purchase_surveys_state_transition_receipts_check
+      CHECK (jsonb_typeof(state_transition_receipts)='object')`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_options (
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        option_id text NOT NULL,
+        label text NOT NULL,
+        position integer NOT NULL CHECK (position >= 0),
+        active boolean NOT NULL DEFAULT true,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(survey_id, revision, option_id),
+        UNIQUE(survey_id, revision, position)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_invites (
+        invite_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        invitation_token_digest text NOT NULL CHECK (invitation_token_digest ~ '^[a-f0-9]{64}$'),
+        purpose text NOT NULL DEFAULT 'customer_reported_measurement' CHECK (purpose='customer_reported_measurement'),
+        approved_copy_id text NOT NULL,
+        exchange_expires_at timestamptz NOT NULL,
+        exchanged_at timestamptz,
+        session_token_digest text CHECK (session_token_digest IS NULL OR session_token_digest ~ '^[a-f0-9]{64}$'),
+        session_expires_at timestamptz,
+        response_id uuid,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, invitation_token_digest),
+        UNIQUE(site_id, session_token_digest),
+        UNIQUE(survey_id, conversion_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_responses (
+        response_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        invite_id uuid NOT NULL REFERENCES analytics_post_purchase_survey_invites(invite_id) ON DELETE RESTRICT,
+        body_fingerprint text NOT NULL CHECK (body_fingerprint ~ '^[a-f0-9]{64}$'),
+        submitted_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(survey_id, conversion_id),
+        UNIQUE(invite_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_reported_influences (
+        evidence_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        response_id uuid NOT NULL REFERENCES analytics_post_purchase_survey_responses(response_id) ON DELETE CASCADE,
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        option_id text NOT NULL,
+        option_label text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(response_id, option_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_view_evidence_receipts (
+        receipt_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        provider_event_id text NOT NULL,
+        evidence_granularity text NOT NULL CHECK (evidence_granularity='event_level'),
+        verification_status text NOT NULL CHECK (verification_status='verified'),
+        subject_kind text NOT NULL CHECK (subject_kind IN ('person','session','visitor')),
+        subject_ref_hmac text NOT NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        session_id uuid REFERENCES analytics_sessions(id) ON DELETE SET NULL,
+        provider_receipt_ref text NOT NULL,
+        occurred_at timestamptz NOT NULL,
+        retention_expires_at timestamptz NOT NULL,
+        touch_id uuid REFERENCES analytics_attribution_touches(id) ON DELETE SET NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, provider, source_account_ref, provider_event_id)
+      )
+    `),await t.query("ALTER TABLE analytics_conversions DROP CONSTRAINT IF EXISTS analytics_conversions_authority_id_fkey"),await t.query(`ALTER TABLE analytics_conversions ADD CONSTRAINT analytics_conversions_authority_id_fkey
+      FOREIGN KEY(authority_id) REFERENCES analytics_revenue_authorities(authority_id) ON DELETE SET NULL`),await t.query("ALTER TABLE analytics_conversions DROP CONSTRAINT IF EXISTS analytics_conversions_authority_version_id_fkey"),await t.query(`ALTER TABLE analytics_conversions ADD CONSTRAINT analytics_conversions_authority_version_id_fkey
+      FOREIGN KEY(authority_version_id) REFERENCES analytics_authoritative_outcome_versions(version_id) ON DELETE SET NULL`),await t.query(`CREATE INDEX IF NOT EXISTS analytics_authoritative_outcomes_person
+      ON analytics_authoritative_outcomes(site_id, person_id, last_observed_at DESC)`),await t.query(`CREATE INDEX IF NOT EXISTS analytics_reported_influences_conversion
+      ON analytics_reported_influences(site_id, conversion_id, created_at)`),await t.query(`CREATE INDEX IF NOT EXISTS analytics_view_evidence_subject
+      ON analytics_view_evidence_receipts(site_id, subject_ref_hmac, occurred_at DESC)`),await t.query(`
+      INSERT INTO analytics_schema_migrations(version)
+      VALUES ('2026-08-05.1'), ('2026-08-05.2'), ('2026-08-05.3'), ('2026-08-05.4'), ('2026-08-05.5'), ('2026-08-05.6'), ('2026-08-05.7'), ('2026-08-05.8'), ('2026-08-05.9'), ('2026-08-05.10'), ('2026-08-05.11'), ('2026-08-05.12'), ('2026-08-05.13'), ('2026-08-05.14'), ('2026-08-26.1'), ('2026-08-26.2'), ('2026-08-26.3'), ('2026-08-26.4'), ('2026-08-27.1'), ('2026-08-28.1'), ('2026-08-28.2'), ('2026-08-28.3'), ('2026-08-28.4'), ('2026-08-31.1'), ('2026-09-01.1'), ('2026-09-01.2')
+      ON CONFLICT (version) DO NOTHING
+    `)}catch(i){throw i}finally{t.release()}}function Qe(e){return e.trim().toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,80)||`site-${P(4).toString("hex")}`}function G(e){if(!e||e==="null")return null;try{let t=new URL(e);return t.protocol!=="http:"&&t.protocol!=="https:"?null:t.hostname.toLowerCase().replace(/\.$/,"")}catch{return null}}function Vt(){return`px_${P(18).toString("base64url")}`}async function g(e,t,i){let s=(await e.query("SELECT role FROM analytics_site_grants WHERE site_id = $1 AND user_id = $2",[t,i])).rows[0]?.role;if(!s)throw new m("analytics_site_not_found","Site not found.",404);return s}async function D(e,t,i){let n=await g(e,t,i);if(n==="viewer")throw new m("analytics_forbidden","Editor access is required.",403);return n}async function Qi(e,t,i){return g(e,t,i)}async function Zi(e,t,i){return D(e,t,i)}async function en(e){let i=await l().connect(),n=y(),s=Qe(e.slug||e.name);try{await i.query("BEGIN");let a=s;for(let r=0;r<3;r+=1)try{await i.query(`INSERT INTO analytics_sites(id, slug, name, owner_user_id, timezone)
+           VALUES ($1, $2, $3, $4, $5)`,[n,a,e.name.trim(),e.userId,e.timezone||"UTC"]);break}catch(o){if(o.code!=="23505"||r===2)throw o;a=`${s}-${P(2).toString("hex")}`}return await i.query("INSERT INTO analytics_site_grants(site_id, user_id, role) VALUES ($1, $2, 'owner')",[n,e.userId]),await i.query("COMMIT"),{id:n,slug:a,name:e.name.trim(),timezone:e.timezone||"UTC",status:"active",role:"owner",pixel_count:0,last_event_at:null,business_model:"leadgen"}}catch(a){throw await i.query("ROLLBACK"),a}finally{i.release()}}async function Jt(e){let t=await l().query(`SELECT s.id, s.slug, s.name, s.timezone, s.status, s.business_model, g.role,
+            count(DISTINCT p.id)::int AS pixel_count,
+            max(e.occurred_at)::text AS last_event_at
+       FROM analytics_sites s
+       JOIN analytics_site_grants g ON g.site_id = s.id AND g.user_id = $1
+       LEFT JOIN analytics_pixels p ON p.site_id = s.id
+       LEFT JOIN analytics_events e ON e.site_id = s.id
+      GROUP BY s.id, g.role
+      ORDER BY s.created_at ASC`,[e]);return t.rows}async function tn(e){let t=l();await D(t,e.siteId,e.userId),await t.query("UPDATE analytics_sites SET business_model = $1, updated_at = now() WHERE id = $2",[e.businessModel,e.siteId])}async function nn(e){let t=l();await D(t,e.siteId,e.userId);for(let i of e.rows)await t.query(`INSERT INTO analytics_ad_spend_daily(site_id, bucket, platform, campaign, spend_minor, currency, source_ref)
+       VALUES ($1,$2::date,$3,$4,$5,$6,$7)
+       ON CONFLICT(site_id,bucket,platform,campaign) DO UPDATE SET spend_minor=EXCLUDED.spend_minor,currency=EXCLUDED.currency,source_ref=EXCLUDED.source_ref,updated_at=now()`,[e.siteId,i.date,i.platform.slice(0,80),i.campaign?.slice(0,240)||"(all)",i.spendMinor,(i.currency||"USD").toUpperCase(),i.sourceRef?.slice(0,500)||null]);return{accepted:e.rows.length}}async function sn(e,t,i,n){let s=l();await g(s,e,t);let a=await s.query("SELECT business_model FROM analytics_sites WHERE id=$1",[e]),r=await s.query(`SELECT count(*)::int AS conversions, count(DISTINCT person_id)::int AS customers,
+            count(*) FILTER (WHERE conversion_kind IN ('form_submitted','lead','qualified_lead'))::int AS leads,
+            count(*) FILTER (WHERE conversion_kind IN ('purchase','order_completed'))::int AS purchases,
+            count(*) FILTER (WHERE conversion_kind IN ('trial_started','demo_started'))::int AS trials,
+            count(*) FILTER (WHERE conversion_kind IN ('subscription_started','subscription_renewed'))::int AS subscriptions,
+            count(*) FILTER (WHERE conversion_kind IN ('subscription_cancelled','churned'))::int AS churns,
+            COALESCE(sum(value_minor),0)::bigint AS revenue_minor,
+            (SELECT count(*)::int FROM (SELECT person_id FROM analytics_conversions WHERE site_id=$1 AND person_id IS NOT NULL AND conversion_kind IN ('purchase','order_completed') AND occurred_at >= $2 AND occurred_at < $3 GROUP BY person_id HAVING count(*) > 1) r) AS repeat_customers
+       FROM analytics_conversions WHERE site_id=$1 AND occurred_at >= $2 AND occurred_at < $3`,[e,i,n]),o=await s.query("SELECT COALESCE(sum(spend_minor),0)::bigint AS spend_minor FROM analytics_ad_spend_daily WHERE site_id=$1 AND bucket >= $2::date AND bucket < $3::date",[e,i,n]),d=r.rows[0],_=Number(o.rows[0]?.spend_minor||0),u=Number(d.revenue_minor||0);return{businessModel:a.rows[0]?.business_model||"leadgen",period:{start:i,end:n},metrics:{...d,revenue_minor:u,spend_minor:_,roas:_>0?u/_:null,cost_per_lead:_>0&&d.leads>0?_/d.leads:null,average_order_value:d.purchases>0?u/d.purchases:null,repeat_customer_rate:d.customers>0?d.repeat_customers/d.customers:null,churn_rate:d.subscriptions>0?d.churns/d.subscriptions:null},missingInputs:_>0?[]:["ad_spend"]}}async function an(e,t,i=12){let n=l();await g(n,e,t);let a=(await n.query(`WITH months AS (SELECT generate_series(date_trunc('month', now()) - interval '11 months', date_trunc('month', now()), interval '1 month') AS month)
+     SELECT m.month::date::text AS month,
+            COALESCE((SELECT sum(value_minor) FROM analytics_conversions c WHERE c.site_id=$1 AND c.occurred_at >= m.month AND c.occurred_at < m.month+interval '1 month'),0)::bigint AS revenue_minor,
+            COALESCE((SELECT sum(spend_minor) FROM analytics_ad_spend_daily s WHERE s.site_id=$1 AND s.bucket >= m.month::date AND s.bucket < (m.month+interval '1 month')::date),0)::bigint AS spend_minor
+       FROM months m ORDER BY m.month`,[e])).rows.map(T=>({month:T.month,revenueMinor:Number(T.revenue_minor),spendMinor:Number(T.spend_minor)}));if(a.filter(T=>T.revenueMinor>0||T.spendMinor>0).length<3)return{status:"insufficient_data",history:a,forecast:[],horizonMonths:i,missingInputs:["at_least_3_months_of_revenue_or_spend"]};let o=a.map(T=>T.revenueMinor),d=o.length,_=(d-1)/2,u=o.reduce((T,O)=>T+O,0)/d,c=o.reduce((T,O,w)=>T+(w-_)*(O-u),0)/o.reduce((T,O,w)=>T+(w-_)**2,0),E=u-c*_,N=Math.sqrt(o.reduce((T,O,w)=>T+(O-(E+c*w))**2,0)/d),A=a.filter(T=>T.spendMinor>0),v=A.length?A.reduce((T,O)=>T+O.spendMinor,0)/A.length:0,R=new Date(`${a.at(-1)?.month}T00:00:00Z`),C=Array.from({length:Math.min(Math.max(i,1),36)},(T,O)=>{let w=new Date(Date.UTC(R.getUTCFullYear(),R.getUTCMonth()+O+1,1)),k=Math.max(0,E+c*(d+O));return{month:w.toISOString().slice(0,10),lowerRevenueMinor:Math.max(0,Math.round(k-N)),baseRevenueMinor:Math.round(k),upperRevenueMinor:Math.round(k+N),projectedSpendMinor:Math.round(v),baseRoas:v>0?k/v:null}});return{status:"modeled",method:"monthly_linear_trend_v1",history:a,forecast:C,horizonMonths:C.length,missingInputs:v>0?[]:["ad_spend"],caveats:["Scenario range reflects historical residual variation, not a guarantee."]}}async function rn(e){let t=l();if(await g(t,e.siteId,e.userId)!=="owner")throw new m("analytics_forbidden","Owner access is required.",403);if(!(await t.query("DELETE FROM analytics_sites WHERE id = $1 AND owner_user_id = $2",[e.siteId,e.userId])).rowCount)throw new m("analytics_site_not_found","Site not found.",404)}async function on(e){let t=l();return await D(t,e.siteId,e.userId),{...(await t.query(`INSERT INTO analytics_pixels(id, site_id, public_id, name, environment)
+     VALUES ($1, $2, $3, $4, $5)
+     RETURNING id, site_id, public_id, name, environment, status, created_at::text, NULL::text AS last_event_at`,[y(),e.siteId,Vt(),e.name.trim(),e.environment||"production"])).rows[0],domains:[]}}async function Qt(e,t){let i=l();await g(i,e,t);let[n,s]=await Promise.all([i.query(`SELECT p.id, p.site_id, p.public_id, p.name, p.environment, p.status,
+              p.created_at::text, max(e.occurred_at)::text AS last_event_at
+         FROM analytics_pixels p
+         LEFT JOIN analytics_events e ON e.pixel_id = p.id
+        WHERE p.site_id = $1
+        GROUP BY p.id
+        ORDER BY p.created_at ASC`,[e]),i.query(`SELECT pixel_id, hostname, state, first_seen_at::text, last_seen_at::text,
+              accepted_count::int, rejected_count::int
+         FROM analytics_pixel_domains
+        WHERE pixel_id IN (SELECT id FROM analytics_pixels WHERE site_id = $1)
+        ORDER BY last_seen_at DESC`,[e])]);return n.rows.map(a=>({...a,domains:s.rows.filter(r=>r.pixel_id===a.id).map(({pixel_id:r,...o})=>o)}))}async function dn(e){let t=l();if(await D(t,e.siteId,e.userId),!(await t.query(`UPDATE analytics_pixels
+        SET name = COALESCE($3, name),
+            environment = COALESCE($4, environment),
+            status = COALESCE($5, status),
+            disabled_at = CASE WHEN $5 = 'disabled' THEN now() WHEN $5 = 'active' THEN NULL ELSE disabled_at END,
+            updated_at = now()
+      WHERE id = $1 AND site_id = $2`,[e.pixelId,e.siteId,e.name??null,e.environment??null,e.status??null])).rowCount)throw new m("analytics_pixel_not_found","Pixel not found.",404)}async function cn(e){let t=l();await D(t,e.siteId,e.userId);let i=G(`https://${e.hostname}`);if(!i)throw new m("invalid_hostname","Enter a valid hostname.");if(!(await t.query(`INSERT INTO analytics_pixel_domains(id, pixel_id, hostname, state)
+     SELECT $1, p.id, $4, $5 FROM analytics_pixels p WHERE p.id = $2 AND p.site_id = $3
+     ON CONFLICT(pixel_id, hostname) DO UPDATE SET state = EXCLUDED.state, updated_at = now()
+     RETURNING id`,[y(),e.pixelId,e.siteId,i,e.state])).rowCount)throw new m("analytics_pixel_not_found","Pixel not found.",404)}async function _n(e){let t=await l().connect();try{await t.query("BEGIN"),await D(t,e.siteId,e.userId);let i=[...new Set(e.hostnames.map(a=>G(`https://${a}`)).filter(a=>!!a))];if(i.length<2||i.length>20)throw new m("invalid_host_group","A host group requires between two and twenty valid hostnames.");if((await t.query(`SELECT d.hostname
+         FROM analytics_pixels p
+         JOIN analytics_pixel_domains d ON d.pixel_id=p.id
+        WHERE p.id=$1 AND p.site_id=$2 AND p.status='active'
+          AND d.state='approved' AND d.hostname = ANY($3::text[])`,[e.pixelId,e.siteId,i])).rows.length!==i.length)throw new m("host_group_unapproved","Every host group member must be approved for this active Pixel.",403);let s=await t.query(`INSERT INTO analytics_host_groups(id, site_id, pixel_id, name, auto_decorate)
+       VALUES ($1,$2,$3,$4,$5)
+       ON CONFLICT(pixel_id, name) DO UPDATE SET
+         auto_decorate=EXCLUDED.auto_decorate, updated_at=now()
+       RETURNING id`,[y(),e.siteId,e.pixelId,e.name.trim().slice(0,120),!!e.autoDecorate]);await t.query("DELETE FROM analytics_host_group_members WHERE group_id=$1",[s.rows[0].id]);for(let a of i)await t.query("INSERT INTO analytics_host_group_members(group_id, hostname) VALUES ($1,$2)",[s.rows[0].id,a]);return await t.query("COMMIT"),{id:s.rows[0].id,siteId:e.siteId,pixelId:e.pixelId,name:e.name.trim().slice(0,120),autoDecorate:!!e.autoDecorate,hostnames:i}}catch(i){throw await t.query("ROLLBACK"),i}finally{t.release()}}async function un(e){let t=l();return await g(t,e.siteId,e.userId),(await t.query(`SELECT g.id, g.site_id, g.pixel_id, g.name, g.auto_decorate,
+            COALESCE(array_agg(m.hostname ORDER BY m.hostname) FILTER (WHERE m.hostname IS NOT NULL), '{}') AS hostnames
+       FROM analytics_host_groups g
+       LEFT JOIN analytics_host_group_members m ON m.group_id=g.id
+      WHERE g.site_id=$1 AND g.pixel_id=$2
+      GROUP BY g.id ORDER BY g.created_at`,[e.siteId,e.pixelId])).rows.map(n=>({id:n.id,siteId:n.site_id,pixelId:n.pixel_id,name:n.name,autoDecorate:n.auto_decorate,hostnames:n.hostnames}))}async function En(e){let t=await l().connect(),i=G(`https://${e.sourceHostname}`),n=G(`https://${e.audienceHostname}`);if(!i||!n||i===n)throw new m("linker_host_invalid","Choose a different approved destination hostname.",403);try{await t.query("BEGIN");let s=await t.query(`SELECT p.site_id, p.id AS pixel_id, g.id AS host_group_id
+         FROM analytics_pixels p
+         JOIN analytics_host_groups g ON g.pixel_id=p.id AND g.site_id=p.site_id
+         JOIN analytics_host_group_members source ON source.group_id=g.id AND source.hostname=$2
+         JOIN analytics_host_group_members audience ON audience.group_id=g.id AND audience.hostname=$3
+         JOIN analytics_pixel_domains source_domain ON source_domain.pixel_id=p.id AND source_domain.hostname=$2 AND source_domain.state='approved'
+         JOIN analytics_pixel_domains audience_domain ON audience_domain.pixel_id=p.id AND audience_domain.hostname=$3 AND audience_domain.state='approved'
+        WHERE p.public_id=$1 AND p.status='active'
+          AND NOT EXISTS (
+            SELECT 1 FROM analytics_host_group_members member
+            LEFT JOIN analytics_pixel_domains member_domain
+              ON member_domain.pixel_id=p.id AND member_domain.hostname=member.hostname
+            WHERE member.group_id=g.id AND COALESCE(member_domain.state, '') <> 'approved'
+          )
+        LIMIT 1`,[e.publicPixelId,i,n]);if(!s.rowCount)throw new m("linker_host_unapproved","Both hostnames must belong to the same approved Pixel host group.",403);let{site_id:a,pixel_id:r,host_group_id:o}=s.rows[0],d=await t.query(`INSERT INTO analytics_identity_nodes(id, site_id, kind, value_hmac)
+       VALUES ($1,$2,'visitor_id',$3)
+       ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at=now()
+       RETURNING id`,[y(),a,L("visitor_id",e.visitorId)]),u=(await t.query(`SELECT person_id FROM analytics_identity_assignments
+        WHERE site_id=$1 AND identity_node_id=$2`,[a,d.rows[0].id])).rows[0]?.person_id;u||(u=(await t.query(`INSERT INTO analytics_people(id, site_id, crm_person_ref, public_ref) VALUES ($1,$2,$3,$4)
+         ON CONFLICT(site_id, crm_person_ref) DO UPDATE SET last_seen_at=now(),
+           public_ref=COALESCE(analytics_people.public_ref,EXCLUDED.public_ref) RETURNING id`,[y(),a,`XRay::anonymous::${L("visitor_id",e.visitorId).slice(0,24)}`,ye()])).rows[0].id,await t.query(`INSERT INTO analytics_identity_edges(id, site_id, person_id, identity_node_id, evidence_kind, confidence)
+         VALUES ($1,$2,$3,$4,'first_party_linker',0.980)
+         ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at=now()`,[y(),a,u,d.rows[0].id]),await J(t,{siteId:a,personId:u,identityNodeId:d.rows[0].id,evidenceKind:"first_party_linker"}));let c=y();return await t.query(`INSERT INTO analytics_linker_tokens(
+         id, site_id, pixel_id, host_group_id, identity_node_id,
+         source_hostname, audience_hostname, expires_at
+       ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8)`,[c,a,r,o,d.rows[0].id,i,n,e.expiresAt]),await t.query("COMMIT"),{tokenId:c,siteId:a,pixelId:r,identityNodeId:d.rows[0].id,sourceHostname:i,audienceHostname:n,expiresAt:e.expiresAt}}catch(s){throw await t.query("ROLLBACK"),s}finally{t.release()}}async function ln(e){let t=await l().connect();try{if(await t.query("BEGIN"),!(await t.query(`UPDATE analytics_linker_tokens SET consumed_at=now()
+        WHERE id=$1 AND site_id=$2 AND pixel_id=$3 AND identity_node_id=$4
+          AND audience_hostname=$5 AND consumed_at IS NULL AND expires_at > now()
+        RETURNING identity_node_id`,[e.tokenId,e.siteId,e.pixelId,e.identityNodeId,e.audienceHostname])).rowCount)throw new m("linker_replayed_or_expired","The linker token was already used or has expired.",409);let s=(await t.query(`SELECT person_id FROM analytics_identity_assignments
+        WHERE site_id=$1 AND identity_node_id=$2`,[e.siteId,e.identityNodeId])).rows[0]?.person_id;if(!s)throw new m("linker_identity_missing","The linker identity is unavailable.",409);let a=await t.query(`INSERT INTO analytics_identity_nodes(id, site_id, kind, value_hmac)
+       VALUES ($1,$2,'visitor_id',$3)
+       ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at=now()
+       RETURNING id`,[y(),e.siteId,L("visitor_id",e.visitorId)]);if(await t.query(`INSERT INTO analytics_identity_edges(id, site_id, person_id, identity_node_id, evidence_kind, confidence)
+       VALUES ($1,$2,$3,$4,'cross_domain_linker',0.980)
+       ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at=now()`,[y(),e.siteId,s,a.rows[0].id]),await J(t,{siteId:e.siteId,personId:s,identityNodeId:a.rows[0].id,evidenceKind:"cross_domain_linker"})==="conflict")throw new m("identity_assignment_conflict","The destination identity is already assigned and requires review.",409);await t.query("UPDATE analytics_events SET person_id=$1 WHERE site_id=$2 AND visitor_id=$3 AND person_id IS NULL",[s,e.siteId,e.visitorId]);let o=L("visitor_id",e.visitorId);return await t.query("UPDATE analytics_sessions SET person_id=$1 WHERE site_id=$2 AND visitor_hmac=$3 AND person_id IS NULL",[s,e.siteId,o]),await t.query("UPDATE analytics_attribution_touches SET person_id=$1 WHERE site_id=$2 AND visitor_hmac=$3 AND person_id IS NULL",[s,e.siteId,o]),await t.query("COMMIT"),{personId:s}}catch(i){throw await t.query("ROLLBACK"),i}finally{t.release()}}function Ze(e){return e.consent?.analytics==="granted"&&(e.consent.purposes?.enhanced_matching==="granted"||e.consent.adUserData==="granted")&&e.consent.globalPrivacyControl!==!0}function Zt(e){return!!(e.identity&&Ze(e))}async function ei(e,t){let i=t.event.visitorId?.trim().slice(0,240),n=t.event.consent;if(!i||!n)return null;let s=Date.parse(t.event.occurredAt),a=Date.now();if(!Number.isFinite(s)||s>a+5*6e4||s<a-1440*6e4)return null;let r=n.purposes,o={siteAnalytics:r?r.site_analytics==="granted":n.analytics==="granted",enhancedMatching:r?r.enhanced_matching==="granted":n.adUserData==="granted",advertisingMeasurement:r?r.advertising_measurement==="granted":n.adPersonalization==="granted"},d=n.globalPrivacyControl===!0;d&&(o.siteAnalytics=!1,o.enhancedMatching=!1,o.advertisingMeasurement=!1);let _=d?"gpc":Object.values(o).every(Boolean)?"accept_all":Object.values(o).every(A=>!A)?"reject_all":"save_choices",u=new Date(s).toISOString(),E=(await e.query(`SELECT s.latest_receipt_id::text,s.site_analytics,s.enhanced_matching,s.advertising_measurement,s.gpc,r.action
+       FROM analytics_consent_current_state s JOIN analytics_consent_receipts r ON r.id=s.latest_receipt_id
+      WHERE s.site_id=$1 AND s.subject_ref=$2 FOR UPDATE`,[t.siteId,i])).rows[0];if(E&&E.site_analytics===o.siteAnalytics&&E.enhanced_matching===o.enhancedMatching&&E.advertising_measurement===o.advertisingMeasurement&&E.gpc===d&&E.action===_)return E.latest_receipt_id;let N=y();return await e.query(`INSERT INTO analytics_consent_receipts(id,site_id,pixel_id,subject_ref,policy_version,jurisdiction_profile,
+      necessary,site_analytics,enhanced_matching,advertising_measurement,gpc,action,source,presented_at,occurred_at,supersedes_id)
+     VALUES($1,$2,$3,$4,1,'pixel',true,$5,$6,$7,$8,$9,'gateway',$10,$10,$11)`,[N,t.siteId,t.pixelId,i,o.siteAnalytics,o.enhancedMatching,o.advertisingMeasurement,d,_,u,E?.latest_receipt_id??null]),await e.query(`INSERT INTO analytics_consent_current_state(site_id,subject_ref,latest_receipt_id,policy_version,jurisdiction_profile,
+      necessary,site_analytics,enhanced_matching,advertising_measurement,gpc,effective_at)
+     VALUES($1,$2,$3,1,'pixel',true,$4,$5,$6,$7,$8)
+     ON CONFLICT(site_id,subject_ref) DO UPDATE SET latest_receipt_id=EXCLUDED.latest_receipt_id,
+      policy_version=EXCLUDED.policy_version,jurisdiction_profile=EXCLUDED.jurisdiction_profile,
+      site_analytics=EXCLUDED.site_analytics,enhanced_matching=EXCLUDED.enhanced_matching,
+      advertising_measurement=EXCLUDED.advertising_measurement,gpc=EXCLUDED.gpc,
+      effective_at=EXCLUDED.effective_at,updated_at=now()
+     WHERE EXCLUDED.effective_at>=analytics_consent_current_state.effective_at`,[t.siteId,i,N,o.siteAnalytics,o.enhancedMatching,o.advertisingMeasurement,d,u]),N}async function Nn(e,t){if(!t.subjectRef)return{personId:null,activationEligible:!1};let n=(await e.query(`SELECT p.id::text AS person_id,s.advertising_measurement
+       FROM analytics_people p
+       JOIN analytics_consent_current_state s ON s.site_id=p.site_id AND s.subject_ref=$2
+       JOIN analytics_consent_receipts r ON r.id=s.latest_receipt_id AND r.site_id=s.site_id
+      WHERE p.site_id=$1
+        AND (($3::uuid IS NOT NULL AND p.id=$3) OR ($4::text IS NOT NULL AND EXISTS (
+          SELECT 1 FROM analytics_events e WHERE e.site_id=p.site_id AND e.event_id=$4
+            AND e.person_id=p.id AND e.visitor_id=$2
+        )))
+        AND s.site_analytics=true AND s.gpc=false AND r.action NOT IN ('withdraw','gpc')
+        AND (s.expires_at IS NULL OR s.expires_at>now()) LIMIT 1`,[t.siteId,t.subjectRef,t.personId??null,t.eventId??null])).rows[0];return n?{personId:n.person_id,activationEligible:n.advertising_measurement===!0}:{personId:null,activationEligible:!1}}async function et(e,t,i,n){return!i?.trim()||!n?.trim()?!1:!!(await e.query(`SELECT 1 FROM analytics_consent_current_state s
+      JOIN analytics_consent_receipts r ON r.id=s.latest_receipt_id AND r.site_id=s.site_id
+      WHERE s.site_id=$1 AND s.subject_ref=$2
+        AND s.site_analytics=true AND s.enhanced_matching=true AND s.gpc=false
+        AND r.action NOT IN ('withdraw','gpc')
+        AND (s.expires_at IS NULL OR s.expires_at>now())
+        AND EXISTS (SELECT 1 FROM analytics_sessions x
+          WHERE x.site_id=s.site_id AND x.visitor_hmac=$3 AND x.session_hmac=$4)
+      ORDER BY s.effective_at DESC LIMIT 1`,[t,i,L("visitor_id",i),L("session_id",n)])).rowCount}async function ti(e,t,i){return!!(await e.query(`SELECT 1 FROM analytics_consent_current_state s
+      JOIN analytics_consent_receipts r ON r.id=s.latest_receipt_id AND r.site_id=s.site_id
+      WHERE s.site_id=$1 AND s.subject_ref=$2
+        AND s.site_analytics=true AND s.enhanced_matching=true AND s.gpc=false
+        AND r.action NOT IN ('withdraw','gpc')
+        AND (s.expires_at IS NULL OR s.expires_at>now()) LIMIT 1`,[t,i])).rowCount}var ii=1800*1e3,ni=1e4;function si(e){return typeof e=="number"&&Number.isFinite(e)&&e>=0?Math.min(Math.trunc(e),ii):null}function ai(e){return typeof e=="number"&&Number.isFinite(e)&&e>=0?Math.min(Math.trunc(e),100):null}var ri=/(email|phone|password|token|secret|authorization|cookie|name|address|form|body)/i;function tt(e){if(!e)return"/";try{return new URL(e,"https://analytics.invalid").pathname.slice(0,2e3)||"/"}catch{return"/"}}function V(e){if(!e)return null;try{let t=new URL(e);return t.protocol!=="http:"&&t.protocol!=="https:"?null:(t.search="",t.hash="",t.toString().slice(0,3e3))}catch{return null}}function oi(e){let t={};for(let[i,n]of Object.entries(e??{}).slice(0,24))!/^[a-z][a-z0-9_]{0,63}$/i.test(i)||ri.test(i)||(n===null||typeof n=="boolean"||typeof n=="number"?t[i]=n:typeof n=="string"&&(t[i]=n.slice(0,300)));return t}async function di(e){if(!e.event.visitorId||!e.event.sessionId)return;let t=L("visitor_id",e.event.visitorId),i=L("session_id",e.event.sessionId),n=new Date(e.event.occurredAt);if(!Number.isFinite(n.getTime()))return;let s=tt(e.event.path||e.event.canonicalUrl),a=await e.client.query(`INSERT INTO analytics_sessions(
+       id, site_id, pixel_id, visitor_hmac, session_hmac, person_id,
+       started_at, last_active_at, landing_path, exit_path, pageview_count, event_count
+     ) VALUES ($1,$2,$3,$4,$5,$6,$7,$7,$8,$8,$9,1)
+     ON CONFLICT(site_id, session_hmac) DO UPDATE SET
+       person_id = COALESCE(analytics_sessions.person_id, EXCLUDED.person_id),
+       last_active_at = GREATEST(analytics_sessions.last_active_at, EXCLUDED.last_active_at),
+       ended_at = GREATEST(COALESCE(analytics_sessions.ended_at, EXCLUDED.last_active_at), EXCLUDED.last_active_at),
+       duration_ms = GREATEST(
+         analytics_sessions.duration_ms,
+         LEAST(1800000, (EXTRACT(EPOCH FROM (GREATEST(analytics_sessions.last_active_at, EXCLUDED.last_active_at) - analytics_sessions.started_at)) * 1000)::bigint)
+       ),
+       exit_path = EXCLUDED.exit_path,
+       pageview_count = analytics_sessions.pageview_count + EXCLUDED.pageview_count,
+       event_count = analytics_sessions.event_count + 1,
+       updated_at = now()
+     RETURNING id`,[y(),e.siteId,e.pixelId,t,i,e.personId??null,e.event.occurredAt,s,e.event.eventName==="page_view"?1:0]),r=z(e.event.clickIds);if(!!!(e.event.source||e.event.medium||e.event.campaign||e.event.referrer||Object.keys(r).length))return;let d=pe("sha256").update(JSON.stringify({siteId:e.siteId,sessionHmac:i,source:e.event.source??null,medium:e.event.medium??null,campaign:e.event.campaign??null,referrer:V(e.event.referrer),clickIds:r,path:s})).digest("hex"),_=await e.client.query(`INSERT INTO analytics_attribution_touches(
+       id, site_id, session_id, person_id, visitor_hmac, occurred_at,
+       source, medium, campaign, referrer, click_ids, landing_path, touch_hash
+     ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11::jsonb,$12,$13)
+     ON CONFLICT(site_id, touch_hash) DO UPDATE SET
+       person_id = COALESCE(analytics_attribution_touches.person_id, EXCLUDED.person_id)
+     RETURNING id`,[y(),e.siteId,a.rows[0].id,e.personId??null,t,e.event.occurredAt,e.event.source?.slice(0,180)??null,e.event.medium?.slice(0,180)??null,e.event.campaign?.slice(0,240)??null,V(e.event.referrer),JSON.stringify(r),s,d]);await e.client.query(`UPDATE analytics_sessions
+        SET first_touch_id = COALESCE(first_touch_id, $2), last_touch_id = $2, updated_at = now()
+      WHERE id = $1`,[a.rows[0].id,_.rows[0].id])}async function mn(e){let t=l(),i=`air_${y()}`,n=G(e.origin),a=(await t.query(`SELECT p.id, p.site_id, p.status,
+            COALESCE(
+              (e.eligible AND e.access_expires_at > now()) OR e.trial_ends_at > now(),
+              false
+            ) AS entitled
+       FROM analytics_pixels p
+       JOIN analytics_sites s ON s.id = p.site_id
+       LEFT JOIN analytics_thorbit_entitlements e ON e.user_id = s.owner_user_id
+      WHERE p.public_id = $1`,[e.publicPixelId])).rows[0];if(!a||a.status!=="active"){let c=[a?"pixel_disabled":"pixel_unknown"];return await t.query(`INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
+       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,[y(),i,a?.site_id??null,a?.id??null,n,e.events.length,JSON.stringify(c)]),{requestId:i,accepted:0,rejected:e.events.length,reasonCodes:c,hostname:n,siteId:a?.site_id??null,pixelId:a?.id??null}}if(!a.entitled){let c=["thorbit_entitlement_required"];return await t.query(`INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
+       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,[y(),i,a.site_id,a.id,n,e.events.length,JSON.stringify(c)]),{requestId:i,accepted:0,rejected:e.events.length,reasonCodes:c,hostname:n,siteId:a.site_id,pixelId:a.id}}if(!n){let c=["origin_missing_or_invalid"];return await t.query(`INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, rejected_count, reason_codes)
+       VALUES ($1, $2, $3, $4, $5, $6::jsonb)`,[y(),i,a.site_id,a.id,e.events.length,JSON.stringify(c)]),{requestId:i,accepted:0,rejected:e.events.length,reasonCodes:c,hostname:n,siteId:a.site_id,pixelId:a.id}}if((await t.query(`INSERT INTO analytics_pixel_domains(id, pixel_id, hostname, state, rejected_count)
+     VALUES ($1, $2, $3, 'observed_unverified', 0)
+     ON CONFLICT(pixel_id, hostname) DO UPDATE
+       SET last_seen_at = now(), updated_at = now()
+     RETURNING state`,[y(),a.id,n])).rows[0]?.state!=="approved"){await t.query(`UPDATE analytics_pixel_domains
+          SET rejected_count = rejected_count + $3, last_seen_at = now(), updated_at = now()
+        WHERE pixel_id = $1 AND hostname = $2`,[a.id,n,e.events.length]);let c=["domain_unapproved"];return await t.query(`INSERT INTO analytics_ingestion_receipts(id, request_id, site_id, pixel_id, hostname, rejected_count, reason_codes)
+       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)`,[y(),i,a.site_id,a.id,n,e.events.length,JSON.stringify(c)]),{requestId:i,accepted:0,rejected:e.events.length,reasonCodes:c,hostname:n,siteId:a.site_id,pixelId:a.id}}let o=await t.connect(),d=0,_=0,u=new Set;try{await o.query("BEGIN");for(let c of e.events)try{await ei(o,{siteId:a.site_id,pixelId:a.id,event:c});let E=Re(c),N=c.identity,A=null,v=null;if(c.eventDefinitionId&&c.eventDefinitionVersion){let T=await o.query(`SELECT id, version FROM analytics_event_definitions
+              WHERE id=$1 AND site_id=$2 AND version=$3 AND event_name=$4 AND status='active'
+              LIMIT 1`,[c.eventDefinitionId,a.site_id,c.eventDefinitionVersion,c.eventName]);T.rows[0]&&(A=T.rows[0].id,v=T.rows[0].version)}let R=Ze(c)&&(c.visitorId||c.sessionId)?await o.query(`SELECT e.person_id FROM analytics_identity_nodes n JOIN analytics_identity_edges e ON e.identity_node_id = n.id
+              WHERE n.site_id = $1 AND ((n.kind = 'visitor_id' AND n.value_hmac = $2) OR (n.kind = 'session_id' AND n.value_hmac = $3))
+              ORDER BY e.confidence DESC, e.last_seen_at DESC LIMIT 1`,[a.site_id,c.visitorId?L("visitor_id",c.visitorId):"",c.sessionId?L("session_id",c.sessionId):""]):{rows:[]};if((await o.query(`INSERT INTO analytics_events(
+             id, event_id, site_id, pixel_id, hostname, visitor_id, session_id, event_name,
+             occurred_at, path, canonical_url, title, referrer, source, medium, campaign,
+             device_class, properties, country_code, region_code, click_ids, person_id,
+             channel_family, platform, campaign_id, ad_set_id, ad_id, creative_id, placement, utm_term, utm_content,
+             engaged_ms, scroll_depth, visitor_hmac, session_hmac, event_definition_id, event_definition_version
+           ) VALUES (
+             $1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14, $15, $16, $17, $18::jsonb, $19, $20, $21::jsonb, $22,
+             $23, $24, $25, $26, $27, $28, $29, $30, $31, $32, $33, $34, $35, $36, $37
+           ) ON CONFLICT(site_id, event_id) DO NOTHING`,[y(),c.eventId,a.site_id,a.id,n,c.visitorId??null,c.sessionId??null,c.eventName,c.occurredAt,tt(c.path||c.canonicalUrl),V(c.canonicalUrl),c.title?.slice(0,500)??null,V(c.referrer),c.source?.slice(0,180)??null,c.medium?.slice(0,180)??null,c.campaign?.slice(0,240)??null,c.deviceClass??null,JSON.stringify(oi(c.properties)),Ye(e.geography?.countryCode,2),Ye(e.geography?.regionCode,8),JSON.stringify(z(c.clickIds)),R.rows[0]?.person_id??null,E.channelFamily,E.platform,E.campaignId,E.adSetId,E.adId,E.creativeId,E.placement,E.term,E.content,si(c.engagedMs),ai(c.scrollDepth),c.visitorId?L("visitor_id",c.visitorId):null,c.sessionId?L("session_id",c.sessionId):null,A,v])).rowCount){d+=1;let T=R.rows[0]?.person_id;await di({client:o,siteId:a.site_id,pixelId:a.id,personId:T,event:c}),T&&c.eventName==="identify"&&await at(o,{siteId:a.site_id,personId:T,visitorId:c.visitorId,sessionId:c.sessionId}),N&&Zt(c)&&await Ii(o,{siteId:a.site_id,visitorId:c.visitorId,sessionId:c.sessionId,email:N.email,phone:N.phone,customerId:N.customerId,orderId:N.orderId,clickIds:c.clickIds,occurredAt:c.occurredAt})}else _+=1,u.add("duplicate_event")}catch{_+=1,u.add("event_insert_failed")}await o.query(`UPDATE analytics_pixel_domains
+          SET accepted_count = accepted_count + $3,
+              rejected_count = rejected_count + $4,
+              last_seen_at = now(), updated_at = now()
+        WHERE pixel_id = $1 AND hostname = $2`,[a.id,n,d,_]),await o.query(`INSERT INTO analytics_ingestion_receipts(
+         id, request_id, site_id, pixel_id, hostname, accepted_count, rejected_count, reason_codes
+       ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb)`,[y(),i,a.site_id,a.id,n,d,_,JSON.stringify([...u])]),await o.query("COMMIT")}catch(c){throw await o.query("ROLLBACK"),c}finally{o.release()}return{requestId:i,accepted:d,rejected:_,reasonCodes:[...u],hostname:n,siteId:a.site_id,pixelId:a.id}}function Ye(e,t){let i=e?.trim().toUpperCase();return i&&/^[A-Z0-9-]+$/.test(i)?i.slice(0,t):null}function F(e,t,i){return pe("sha256").update(JSON.stringify({scope:e,siteId:t,filters:i})).digest("base64url").slice(0,18)}function ci(e,t){if(!e)return 0;try{let i=JSON.parse(Buffer.from(e,"base64url").toString("utf8"));if(i.v!==1||i.f!==t||!Number.isInteger(i.o)||Number(i.o)<0)throw new Error("invalid");return Number(i.o)}catch{throw new m("invalid_cursor","The pagination cursor is invalid for these filters.")}}function $(e,t,i){if(!t)return{items:e,pageInfo:{hasNextPage:!1,nextCursor:null}};let n=Math.min(100,Math.max(1,Math.trunc(t?.limit??25))),s=ci(t?.cursor,i),a=e.slice(s,s+n),r=s+a.length<e.length;return{items:a,pageInfo:{hasNextPage:r,nextCursor:r?Buffer.from(JSON.stringify({v:1,f:i,o:s+a.length})).toString("base64url"):null}}}async function yn(e){let i=(await e.db.query(`SELECT revision FROM analytics_revenue_setup_revisions
+      WHERE setup_id=$1 ORDER BY revision DESC LIMIT 1 FOR UPDATE`,[e.setupId])).rows[0]?.revision??0;if(i!==e.expectedRevision)throw new m("analytics_revenue_setup_stale_revision",`Revenue setup revision ${e.expectedRevision} is stale; current revision is ${i}.`,409);let n=i+1;return await e.db.query(`INSERT INTO analytics_revenue_setup_revisions(
+       setup_id,site_id,revision,authority_id,state,plan,request_fingerprint,created_by_user_id
+     ) VALUES($1,$2,$3,$4,$5,$6::jsonb,$7,$8)`,[e.setupId,e.siteId,n,e.authorityId??null,e.state,JSON.stringify(e.plan),e.requestFingerprint,e.createdByUserId]),n}async function pn(e){let t=await e.db.query(`SELECT version_id,version,request_fingerprint FROM analytics_authoritative_outcome_versions
+      WHERE site_id=$1 AND transport_event_id=$2`,[e.siteId,e.transportEventId]);if(t.rows[0]){if(t.rows[0].request_fingerprint!==e.requestFingerprint)throw new m("analytics_authoritative_outcome_replay_conflict","The provider event was replayed with a different normalized body.",409);return{versionId:t.rows[0].version_id,version:t.rows[0].version,replay:!0}}let i=await e.db.query(`SELECT current_version FROM analytics_authoritative_outcomes
+      WHERE outcome_id=$1 AND site_id=$2 FOR UPDATE`,[e.outcomeId,e.siteId]);if(!i.rows[0])throw new m("analytics_authoritative_outcome_not_found","Authoritative outcome not found.",404);let n=i.rows[0].current_version+1,s=y();return await e.db.query(`INSERT INTO analytics_authoritative_outcome_versions(
+       version_id,outcome_id,site_id,version,transport_event_id,status,value_minor,currency,
+       occurred_at,observed_at,provenance,receipt_ref,request_fingerprint
+     ) VALUES($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11::jsonb,$12,$13)`,[s,e.outcomeId,e.siteId,n,e.transportEventId,e.status,e.valueMinor.toString(),e.currency.toUpperCase(),e.occurredAt,e.observedAt,JSON.stringify(e.provenance),e.receiptRef,e.requestFingerprint]),await e.db.query(`UPDATE analytics_authoritative_outcomes
+      SET current_version=$2,last_observed_at=$3 WHERE outcome_id=$1`,[e.outcomeId,n,e.observedAt]),{versionId:s,version:n,replay:!1}}async function Tn(e){let i=(await e.db.query(`SELECT outcome.conversion_id,authority.authority_role,
+            authority.state AS authority_state
+       FROM analytics_authoritative_outcomes outcome
+       JOIN analytics_revenue_authorities authority
+         ON authority.authority_id=outcome.authority_id
+        AND authority.site_id=outcome.site_id
+       JOIN analytics_authoritative_outcome_versions version
+         ON version.outcome_id=outcome.outcome_id
+        AND version.site_id=outcome.site_id
+       JOIN analytics_provider_customer_bindings binding
+         ON binding.authority_id=authority.authority_id
+        AND binding.site_id=authority.site_id
+        AND binding.person_id=outcome.person_id
+        AND binding.verification_status='verified'
+      WHERE outcome.site_id=$1 AND outcome.outcome_id=$2
+        AND outcome.authority_id=$3 AND outcome.authority_key=$4
+        AND version.version_id=$5 AND outcome.person_id=$6
+      FOR UPDATE OF outcome`,[e.siteId,e.outcomeId,e.authorityId,e.authorityKey,e.authorityVersionId,e.personId])).rows[0];if(!i)throw new m("analytics_revenue_projection_evidence_invalid","The authoritative outcome, version, and customer binding could not be verified.",409);if(i.authority_role!=="primary"||!["verified","live","degraded"].includes(i.authority_state))throw new m("analytics_revenue_projection_authority_ineligible","Only an active primary revenue authority may project conversions.",409);let s=(await e.db.query(`SELECT conversion.id
+       FROM analytics_conversions conversion
+       JOIN analytics_authoritative_outcomes outcome
+         ON outcome.conversion_id=conversion.id
+        AND outcome.site_id=conversion.site_id
+      WHERE conversion.site_id=$1 AND conversion.authority_key=$2
+        AND outcome.outcome_id=$3 AND outcome.authority_id=$4
+      FOR UPDATE OF conversion`,[e.siteId,e.authorityKey,e.outcomeId,e.authorityId])).rows[0]?.id,a=!1,r=!1;if(s)await e.db.query(`UPDATE analytics_conversions
+          SET value_minor=$2,currency=$3,occurred_at=$4,person_id=$5,
+              authority_version_id=$6,value_source='restatement',
+              value_provenance=$7::jsonb,restated_at=now()
+        WHERE id=$1 AND site_id=$8 AND authority_id=$9 AND authority_key=$10`,[s,e.valueMinor.toString(),e.currency.toUpperCase(),e.occurredAt,e.personId,e.authorityVersionId,JSON.stringify(e.valueProvenance),e.siteId,e.authorityId,e.authorityKey]),r=!0;else{let d=y();if(s=(await e.db.query(`INSERT INTO analytics_conversions(
+         id,source_event_id,site_id,conversion_kind,value_minor,currency,
+         occurred_at,person_id,authority_id,authority_key,authority_version_id,
+         value_source,value_provenance
+       ) VALUES($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,'verified_revenue',$12::jsonb)
+       ON CONFLICT(site_id,authority_key) WHERE authority_key IS NOT NULL
+       DO NOTHING RETURNING id`,[d,e.sourceEventId,e.siteId,e.conversionKind,e.valueMinor.toString(),e.currency.toUpperCase(),e.occurredAt,e.personId,e.authorityId,e.authorityKey,e.authorityVersionId,JSON.stringify(e.valueProvenance)])).rows[0]?.id,a=!!s,!s){let u=await e.db.query(`SELECT conversion.id
+           FROM analytics_conversions conversion
+           JOIN analytics_authoritative_outcomes outcome
+             ON outcome.conversion_id=conversion.id
+          WHERE conversion.site_id=$1 AND conversion.authority_key=$2
+            AND outcome.outcome_id=$3 AND outcome.authority_id=$4
+          FOR UPDATE OF conversion`,[e.siteId,e.authorityKey,e.outcomeId,e.authorityId]);if(!u.rows[0])throw new m("analytics_conversion_authority_conflict","The authority key is already projected from a different authoritative outcome.",409);s=u.rows[0].id}await e.db.query(`UPDATE analytics_authoritative_outcomes SET conversion_id=$2
+        WHERE outcome_id=$1 AND site_id=$3
+          AND (conversion_id IS NULL OR conversion_id=$2)`,[e.outcomeId,s,e.siteId])}let o=0;if(a&&e.activationPayloadCiphertext){let d=await e.db.query(`SELECT id,event_mapping FROM analytics_activation_destinations
+        WHERE site_id=$1 AND status='active'
+          AND automatic_delivery_enabled=true AND readiness IN ('verified','live')`,[e.siteId]);for(let _ of d.rows.filter(u=>Ae(u.event_mapping,e.conversionKind))){let u=await e.db.query(`INSERT INTO analytics_activation_jobs(
+           id,destination_id,conversion_id,person_id,payload_ciphertext
+         ) VALUES($1,$2,$3,$4,$5)
+         ON CONFLICT(destination_id,conversion_id) DO NOTHING`,[y(),_.id,s,e.personId,e.activationPayloadCiphertext]);o+=u.rowCount??0}}return{id:s,created:a,restated:r,queuedDestinations:o}}async function Ln(e){let i=(await e.db.query(`SELECT invite_id,survey_id,survey_revision,conversion_id,exchange_expires_at,exchanged_at
+       FROM analytics_post_purchase_survey_invites
+      WHERE site_id=$1 AND invitation_token_digest=$2 FOR UPDATE`,[e.siteId,e.invitationTokenDigest])).rows[0];if(!i)throw new m("analytics_survey_invite_not_found","Survey invitation not found.",404);if(i.exchanged_at)throw new m("analytics_survey_invite_consumed","Survey invitation has already been exchanged.",409);if(Date.parse(new Date(i.exchange_expires_at).toISOString())<=Date.parse(e.now))throw new m("analytics_survey_exchange_expired","Survey exchange code has expired.",410);return await e.db.query(`UPDATE analytics_post_purchase_survey_invites
+        SET exchanged_at=$2,session_token_digest=$3,session_expires_at=$4
+      WHERE invite_id=$1`,[i.invite_id,e.now,e.sessionTokenDigest,e.sessionExpiresAt]),{inviteId:i.invite_id,surveyId:i.survey_id,surveyRevision:i.survey_revision,conversionId:i.conversion_id}}async function An(e){let i=await l().connect();try{if(await i.query("BEGIN"),await D(i,e.siteId,e.userId),e.pixelId&&!(await i.query("SELECT 1 FROM analytics_pixels WHERE id = $1 AND site_id = $2",[e.pixelId,e.siteId])).rowCount)throw new m("analytics_pixel_not_found","Pixel not found.",404);let n=e.personId?{rows:[{person_id:e.personId}]}:e.sessionId?await i.query(`SELECT e.person_id FROM analytics_identity_nodes n JOIN analytics_identity_edges e ON e.identity_node_id = n.id
+             WHERE n.site_id = $1 AND n.kind = 'session_id' AND n.value_hmac = $2
+             ORDER BY e.confidence DESC LIMIT 1`,[e.siteId,L("session_id",e.sessionId)]):{rows:[]},s=e.authority?await i.query(`SELECT id FROM analytics_conversions
+            WHERE site_id=$1 AND authority_key=$2 FOR UPDATE`,[e.siteId,e.authority.authorityKey]):{rows:[],rowCount:0},a=!1,r=!1,o;if(s.rows[0])o=s.rows[0].id,await i.query(`UPDATE analytics_conversions
+            SET value_minor=$2, currency=$3, occurred_at=$4,
+                value_source='restatement', value_provenance=$5::jsonb,
+                authority_id=$6, authority_version_id=$7, restated_at=now()
+          WHERE id=$1`,[o,e.valueMinor??0,(e.currency||"USD").toUpperCase(),e.occurredAt,JSON.stringify(e.authority?.valueProvenance??{}),e.authority?.authorityId,e.authority?.authorityVersionId??null]),r=!0;else{let _=y(),u=await i.query(`INSERT INTO analytics_conversions(
+           id, source_event_id, site_id, pixel_id, session_id, conversion_kind,
+           value_minor, currency, occurred_at, person_id, order_id, session_hmac,
+           authority_id, authority_key, authority_version_id, value_source, value_provenance
+         ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17::jsonb)
+         ON CONFLICT(site_id, source_event_id) DO NOTHING RETURNING id`,[_,e.sourceEventId,e.siteId,e.pixelId??null,e.sessionId??null,e.conversionKind,e.valueMinor??0,(e.currency||"USD").toUpperCase(),e.occurredAt,n.rows[0]?.person_id??null,e.orderId??null,e.sessionId?L("session_id",e.sessionId):null,e.authority?.authorityId??null,e.authority?.authorityKey??null,e.authority?.authorityVersionId??null,e.authority?"verified_revenue":"default_zero",JSON.stringify(e.authority?.valueProvenance??{})]);if(a=!!u.rowCount,a)o=u.rows[0].id;else{let c=await i.query("SELECT id,authority_key FROM analytics_conversions WHERE site_id=$1 AND source_event_id=$2 FOR UPDATE",[e.siteId,e.sourceEventId]);if(!c.rows[0])throw new m("analytics_conversion_conflict","Conversion conflict could not be resolved.",409);if(e.authority&&c.rows[0].authority_key!==e.authority.authorityKey)throw new m("analytics_conversion_authority_conflict","The source event is already bound to a different revenue authority.",409);o=c.rows[0].id}}let d=0;if(a&&e.activationPayloadCiphertext){let _=await i.query(`SELECT id,event_mapping FROM analytics_activation_destinations
+          WHERE site_id = $1 AND status = 'active' AND automatic_delivery_enabled=true
+            AND readiness IN ('verified','live')`,[e.siteId]);for(let u of _.rows.filter(c=>Ae(c.event_mapping,e.conversionKind))){let c=await i.query(`INSERT INTO analytics_activation_jobs(
+             id, destination_id, conversion_id, person_id, payload_ciphertext
+           ) VALUES ($1,$2,$3,$4,$5)
+           ON CONFLICT(destination_id, conversion_id) DO NOTHING`,[y(),u.id,o,n.rows[0]?.person_id??null,e.activationPayloadCiphertext]);d+=c.rowCount??0}}return await i.query("COMMIT"),{id:o,created:a,restated:r,queuedDestinations:d}}catch(n){throw await i.query("ROLLBACK"),n}finally{i.release()}}function j(e,t){let i=[e,t.start,t.end],n=["e.site_id = $1","e.occurred_at >= $2::timestamptz","e.occurred_at < $3::timestamptz"],s=(a,r)=>{i.push(r),n.push(a.replace("?",`$${i.length}`))};return t.pixelIds?.length&&s("e.pixel_id = ANY(?::uuid[])",t.pixelIds),t.hostnames?.length&&s("e.hostname = ANY(?::text[])",t.hostnames),t.source&&s("COALESCE(e.source, '(direct)') = ?",t.source),t.medium&&s("COALESCE(e.medium, '(none)') = ?",t.medium),t.campaign&&s("COALESCE(e.campaign, '(none)') = ?",t.campaign),t.eventName&&s("e.event_name = ?",t.eventName),t.channelFamily&&s("COALESCE(e.channel_family, 'other') = ?",t.channelFamily),t.platform&&s("COALESCE(e.platform, e.source, '(direct)') = ?",t.platform),t.referrer&&s("COALESCE(e.referrer, '') ILIKE '%' || ? || '%'",t.referrer),t.path&&s("e.path = ?",t.path),t.deviceClass&&s("COALESCE(e.device_class, 'unknown') = ?",t.deviceClass),t.countryCode&&s("COALESCE(e.country_code, 'unknown') = ?",t.countryCode.toUpperCase()),t.regionCode&&s("COALESCE(e.region_code, 'unknown') = ?",t.regionCode.toUpperCase()),{where:n.join(" AND "),values:i}}function de(e,t){let i=[e,t.start,t.end],n=["c.site_id = $1","c.occurred_at >= $2::timestamptz","c.occurred_at < $3::timestamptz"],s=(a,r)=>{i.push(r),n.push(a.replaceAll("?",`$${i.length}`))};return t.pixelIds?.length&&s("c.pixel_id = ANY(?::uuid[])",t.pixelIds),t.hostnames?.length&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND ce.hostname = ANY(?::text[]))",t.hostnames),t.source&&s("COALESCE(first_event.source, '(direct)') = ?",t.source),t.medium&&s("COALESCE(first_event.medium, '(none)') = ?",t.medium),t.campaign&&s("COALESCE(first_event.campaign, '(none)') = ?",t.campaign),t.eventName&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND ce.event_name = ?)",t.eventName),t.channelFamily&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND COALESCE(ce.channel_family, 'other') = ?)",t.channelFamily),t.platform&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND COALESCE(ce.platform, ce.source, '(direct)') = ?)",t.platform),t.referrer&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND COALESCE(ce.referrer, '') ILIKE '%' || ? || '%')",t.referrer),t.path&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND ce.path = ?)",t.path),t.deviceClass&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND COALESCE(ce.device_class, 'unknown') = ?)",t.deviceClass),t.countryCode&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND COALESCE(ce.country_code, 'unknown') = ?)",t.countryCode.toUpperCase()),t.regionCode&&s("EXISTS (SELECT 1 FROM analytics_events ce WHERE ce.site_id = c.site_id AND ce.session_id = c.session_id AND COALESCE(ce.region_code, 'unknown') = ?)",t.regionCode.toUpperCase()),t.conversionKind&&s("c.conversion_kind = ?",t.conversionKind),{where:n.join(" AND "),values:i}}async function We(e,t,i){let n=l();await g(n,e,t);let s=j(e,i),a=await n.query(`SELECT count(DISTINCT visitor_id)::int AS visitors,
+            count(DISTINCT session_id)::int AS sessions,
+            count(*) FILTER (WHERE event_name = 'page_view')::int AS pageviews,
+            count(*)::int AS events,
+            min(occurred_at)::text AS first_event_at,
+            max(occurred_at)::text AS last_event_at
+       FROM analytics_events e WHERE ${s.where}`,s.values),r=de(e,i),o=await n.query(`SELECT count(*)::int AS conversions, COALESCE(sum(c.value_minor), 0)::int AS revenue_minor
+       FROM analytics_conversions c
+       LEFT JOIN LATERAL (
+         SELECT e.source, e.medium, e.campaign FROM analytics_events e
+          WHERE e.site_id = c.site_id AND e.session_id = c.session_id
+          ORDER BY e.occurred_at ASC LIMIT 1
+       ) first_event ON true
+      WHERE ${r.where}`,r.values),d=a.rows[0],_=o.rows[0];return{...d,conversions:_.conversions,revenueMinor:_.revenue_minor,conversionRate:d.sessions>0?_.conversions/d.sessions:0,dataFreshThrough:d.last_event_at}}async function In(e,t,i){let n=l();await g(n,e,t);let s=j(e,i),a=i.timezone||"UTC",r=`$${s.values.length+1}`,o=await n.query(`SELECT date_trunc('day', e.occurred_at AT TIME ZONE ${r})::date::text AS date,
+            count(DISTINCT e.visitor_id)::int AS visitors,
+            count(DISTINCT e.session_id)::int AS sessions,
+            count(*) FILTER (WHERE e.event_name = 'page_view')::int AS pageviews,
+            count(*)::int AS events
+       FROM analytics_events e
+      WHERE ${s.where}
+      GROUP BY 1 ORDER BY 1`,[...s.values,a]),d=de(e,i),_=`$${d.values.length+1}`,u=await n.query(`SELECT date_trunc('day', c.occurred_at AT TIME ZONE ${_})::date::text AS date,
+            count(*)::int AS conversions,
+            COALESCE(sum(c.value_minor), 0)::bigint AS revenue_minor
+       FROM analytics_conversions c
+       LEFT JOIN LATERAL (
+         SELECT e.source, e.medium, e.campaign FROM analytics_events e
+          WHERE e.site_id = c.site_id AND e.session_id = c.session_id
+          ORDER BY e.occurred_at ASC LIMIT 1
+       ) first_event ON true
+      WHERE ${d.where}
+      GROUP BY 1 ORDER BY 1`,[...d.values,a]),c=new Map;for(let N of o.rows)c.set(String(N.date),{...N,conversions:0,revenueMinor:0});for(let N of u.rows){let A=c.get(N.date)??{date:N.date,visitors:0,sessions:0,pageviews:0,events:0};c.set(N.date,{...A,conversions:N.conversions,revenueMinor:Number(N.revenue_minor)})}let E=[...c.values()].sort((N,A)=>String(N.date).localeCompare(String(A.date)));return{points:E,timezone:a,dataFreshThrough:E.at(-1)?.date??null}}async function _i(e,t,i,n){let s=l();await g(s,e,t);let a=j(e,i),r=i.journeyTier==="best_guess"?`${a.where} AND EXISTS (
+         SELECT 1 FROM analytics_sessions candidate_session
+         JOIN analytics_attribution_touches candidate_touch
+           ON candidate_touch.session_id=candidate_session.id AND candidate_touch.site_id=candidate_session.site_id
+         JOIN analytics_candidate_attribution_touches candidate_overlay
+           ON candidate_overlay.touch_id=candidate_touch.id AND candidate_overlay.site_id=candidate_touch.site_id
+         JOIN analytics_candidate_associations candidate_association
+           ON candidate_association.id=candidate_overlay.association_id
+          AND candidate_association.namespace_id=candidate_overlay.namespace_id
+        WHERE candidate_session.site_id=e.site_id AND candidate_session.session_hmac=e.session_hmac
+          AND candidate_overlay.eligibility='overlay_only' AND candidate_overlay.expires_at > now()
+          AND candidate_association.status='active' AND candidate_association.confidence_band='high'
+          AND candidate_association.expires_at > now()
+       )`:`${a.where} AND e.person_id IS NOT NULL`,o=await s.query(`SELECT COALESCE(e.source, '(direct)') AS source,
+            COALESCE(e.medium, '(none)') AS medium,
+            COALESCE(e.campaign, '(none)') AS campaign,
+            COALESCE(e.platform, e.source, '(direct)') AS platform,
+            e.campaign_id, e.ad_set_id, e.ad_id, e.creative_id,
+            count(DISTINCT e.visitor_id)::int AS visitors,
+            count(DISTINCT e.session_id)::int AS sessions,
+            count(*) FILTER (WHERE e.event_name = 'page_view')::int AS pageviews
+       FROM analytics_events e
+      WHERE ${r}
+      GROUP BY 1, 2, 3, 4, 5, 6, 7, 8
+      ORDER BY sessions DESC, visitors DESC
+      LIMIT 1000`,a.values),[d,_]=await Promise.all([Be({client:s,siteId:e,from:i.start,to:i.end}),i.journeyTier==="best_guess"||i.journeyTier==="all"?ze({client:s,siteId:e,from:i.start,to:i.end}):Promise.resolve({touches:[],conversions:[],spendFacts:[]})]),u=I=>(!i.source||(I.source??"(direct)")===i.source)&&(!i.medium||(I.medium??"(none)")===i.medium)&&(!i.campaign||(I.campaignName??"(none)")===i.campaign)&&(!i.platform||(I.platform??I.source??"(direct)")===i.platform);d.touches=d.touches.filter(u),_.touches=_.touches.filter(u),i.conversionKind&&(d.conversions=d.conversions.filter(I=>I.outcome===i.conversionKind),_.conversions=_.conversions.filter(I=>I.outcome===i.conversionKind));let c={model:i.attributionModel??"position_based",clickWindow:i.clickWindow??90,viewWindow:i.viewWindow??30,customWeights:i.customWeights},E={touches:[...d.touches,..._.touches],conversions:[...d.conversions,..._.conversions],spendFacts:d.spendFacts},N=me({...E,configuration:c,granularity:"campaign"}),A=i.journeyTier==="best_guess"?"candidate":"confirmed",v=A==="candidate"?N.candidateAssist.credits:N.confirmed.credits,R=A==="candidate"?N.candidateAssist.rows:N.confirmed.rows,C=Ge(v,E.touches),T=new Map(o.rows.map(I=>[`${I.source}\0${I.medium}\0${I.campaign}`,I])),O=new Map(R.map(I=>[`${I.platform??""}\0${I.campaignId??""}`,I])),k=[...new Set([...T.keys(),...C.keys()])].map(I=>{let b=T.get(I),h=C.get(I),ve=h?.platform??b?.platform??null,Oe=h?.campaignId??b?.campaign_id??null,M=O.get(`${ve??""}\0${Oe??""}`),ce=Number(b?.sessions??0);return{source:h?.source??b?.source??"(direct)",medium:h?.medium??b?.medium??"(none)",campaign:h?.campaign??b?.campaign??"(none)",platform:ve,campaignId:Oe,adSetGroupId:b?.ad_set_id??null,adId:b?.ad_id??null,creativeId:b?.creative_id??null,visitors:Number(b?.visitors??0),sessions:ce,pageviews:Number(b?.pageviews??0),leads:h?.leads??0,qualifiedLeads:h?.qualifiedLeads??0,conversions:h?.conversions??0,customers:h?.customers??0,conversionRate:ce>0?(h?.conversions??0)/ce:0,revenueMinor:h?.revenueMinor??0,spendMinor:M?.spendMinor==null?null:Number(M.spendMinor),cplMinor:M?.cplMinor??null,cpqlMinor:M?.cpqlMinor??null,cpaMinor:M?.cpaMinor??null,cacMinor:M?.cacMinor??null,roas:M?.roas??null,scoreEligible:null,propensityEligible:null,coveragePercent:h&&h.attributedCredit>0?1:0,currency:M?.currency??v.find(dt=>dt.currency)?.currency??null}});k.sort((I,b)=>Number(b.sessions)-Number(I.sessions)||Number(b.conversions)-Number(I.conversions));let ge=$(k,n,F("acquisition",e,i));return{channels:ge.items,candidateAssistChannels:i.journeyTier==="all"?[...Ge(N.candidateAssist.credits,E.touches).values()]:void 0,comparisons:ui(i.compareModels?.length?Xe({...E,configurations:[c,...i.compareModels.map(I=>({...c,model:I,id:I}))],granularity:"campaign"}).projections:[N],A),attribution:{model:N.configuration.model,clickWindow:N.configuration.clickWindow,viewWindow:N.configuration.viewWindow,journeyTier:i.journeyTier??"confirmed",confirmedAndCandidateTotalsSeparated:!0},pageInfo:ge.pageInfo,dataFreshThrough:new Date().toISOString()}}function Ge(e,t){let i=new Map(t.map(s=>[s.touchId,s])),n=new Map;for(let s of e){let a=s.touchId?i.get(s.touchId):void 0,r=a?.source??"(unattributed)",o=a?.medium??"(none)",d=a?.campaignName??"(none)",_=`${r}\0${o}\0${d}`,u=n.get(_)??{source:r,medium:o,campaign:d,platform:a?.platform??null,campaignId:a?.campaignId??null,leads:0,qualifiedLeads:0,conversions:0,customers:0,revenueMinor:0,attributedCredit:0},c=s.creditMicros/1e6;s.outcome==="lead"&&(u.leads+=c),s.outcome==="qualified"&&(u.qualifiedLeads+=c),s.outcome==="conversion"&&(u.conversions+=c),s.outcome==="customer"&&(u.customers+=c),u.attributedCredit+=c,u.revenueMinor+=Number(s.creditedValueMinor),n.set(_,u)}return n}function ui(e,t){return e.map(i=>{let n=t==="candidate"?i.candidateAssist:i.confirmed,s=new Set(n.credits.map(r=>r.conversionId)),a=new Set(n.credits.filter(r=>!r.unattributed).map(r=>r.conversionId));return{model:i.configuration.model,conversions:n.credits.reduce((r,o)=>r+o.creditMicros/1e6,0),revenueMinor:n.credits.reduce((r,o)=>r+Number(o.creditedValueMinor),0),coveragePercent:s.size>0?a.size/s.size:null}})}var Ei=`COALESCE(e.channel_family, CASE
+  WHEN lower(COALESCE(e.source,'') || ' ' || COALESCE(e.referrer,'')) ~ '(perplexity|chatgpt|openai|claude|anthropic|grok|xai|ai[_ -]?overview|google[_ -]?ai|gemini)' THEN 'llm'
+  WHEN lower(COALESCE(e.source,'') || ' ' || COALESCE(e.referrer,'')) ~ '(facebook|instagram|linkedin|tiktok|youtube|youtu\\.be|twitter|x\\.com)' THEN 'social'
+  WHEN lower(COALESCE(e.source,'') || ' ' || COALESCE(e.referrer,'')) ~ '(^|[^a-z])(g2|bbb)([^a-z]|$)|trustpilot|capterra|yelp|better business bureau' THEN 'review'
+  WHEN COALESCE(e.source,'') = '' THEN 'direct'
+  WHEN lower(COALESCE(e.medium,'')) ~ 'email|newsletter' THEN 'email'
+  ELSE 'other' END)`;async function gn(e,t,i){let n=l();await g(n,e,t);let s=j(e,i),a=await n.query(`
+    SELECT ${Ei} AS family,
+           COALESCE(e.platform, NULLIF(e.source,''), '(direct)') AS platform,
+           COALESCE(NULLIF(e.campaign,''), '(none)') AS campaign,
+           COALESCE(NULLIF(e.campaign_id,''), '(unknown)') AS campaign_id,
+           COALESCE(NULLIF(e.ad_set_id,''), '(unknown)') AS ad_set_id,
+           COALESCE(NULLIF(e.ad_id,''), '(unknown)') AS ad_id,
+           COALESCE(NULLIF(e.creative_id,''), '(unknown)') AS creative_id,
+           count(DISTINCT e.visitor_id)::int AS visitors,
+           count(DISTINCT e.session_id)::int AS sessions,
+           count(*) FILTER (WHERE e.event_name = 'page_view')::int AS pageviews,
+           count(*)::int AS events
+      FROM analytics_events e
+     WHERE ${s.where}
+     GROUP BY 1,2,3,4,5,6,7
+     ORDER BY sessions DESC, events DESC
+     LIMIT 2000`,s.values);return{sections:Object.fromEntries(["llm","social","review"].map(d=>[d,a.rows.filter(_=>_.family===d)])),rows:a.rows,dataFreshThrough:new Date().toISOString()}}var li=["path","visitors","sessions","pageviews","entrances","exits","engagement_events","conversions","avg_seconds_on_page","avg_scroll_depth","bounce_rate","exit_rate","engagement_rate","pageviews_per_session"];function Ni(e){return{sort:li.includes(e?.sort)?e.sort:"pageviews",direction:e?.direction==="asc"?"asc":"desc",search:e?.search?.trim().slice(0,300)||null}}async function mi(e,t,i,n,s){let a=l();await g(a,e,t);let r=j(e,i),o=Ni(s),d=`$${r.values.length+1}`,_=o.sort==="path"?`metrics.path ${o.direction==="asc"?"ASC":"DESC"}`:`${o.sort} ${o.direction==="asc"?"ASC":"DESC"} NULLS LAST, metrics.path ASC`,u=await a.query(`WITH filtered AS (
+       SELECT e.* FROM analytics_events e WHERE ${r.where}
+     ), page_metrics AS (
+       SELECT path, count(DISTINCT visitor_id)::int AS visitors,
+              count(DISTINCT session_id)::int AS sessions,
+              count(*) FILTER (WHERE event_name = 'page_view')::int AS pageviews,
+              count(*) FILTER (WHERE event_name NOT IN ('page_view', 'page_engagement'))::int AS engagement_events,
+              count(*)::int AS events
+         FROM filtered GROUP BY path
+     ), session_bounds AS (
+       SELECT session_id,
+              (array_agg(path ORDER BY occurred_at ASC, id ASC))[1] AS entrance_path,
+              (array_agg(path ORDER BY occurred_at DESC, id DESC))[1] AS exit_path
+         FROM filtered WHERE session_id IS NOT NULL GROUP BY session_id
+     ), session_pageviews AS (
+       SELECT session_id, count(*) FILTER (WHERE event_name = 'page_view')::int AS pageviews
+         FROM filtered WHERE session_id IS NOT NULL GROUP BY session_id
+     ), page_dwell AS (
+       SELECT session_id, path,
+              sum(engaged_ms)::bigint AS engaged_ms,
+              max(scroll_depth)::int AS scroll_depth
+         FROM filtered
+        WHERE event_name = 'page_engagement' AND session_id IS NOT NULL
+        GROUP BY session_id, path
+     ), dwell_metrics AS (
+       SELECT path,
+              avg(engaged_ms) FILTER (WHERE engaged_ms IS NOT NULL) AS avg_engaged_ms,
+              avg(scroll_depth) FILTER (WHERE scroll_depth IS NOT NULL) AS avg_scroll,
+              count(*) FILTER (WHERE engaged_ms IS NOT NULL)::int AS measured_pageviews
+         FROM page_dwell GROUP BY path
+     ), entrances AS (
+       SELECT entrance_path AS path, count(*)::int AS entrances FROM session_bounds GROUP BY entrance_path
+     ), exits AS (
+       SELECT exit_path AS path, count(*)::int AS exits FROM session_bounds GROUP BY exit_path
+     ), bounces AS (
+       SELECT b.entrance_path AS path, count(*)::int AS bounces
+         FROM session_bounds b JOIN session_pageviews p USING(session_id)
+        WHERE p.pageviews <= 1
+        GROUP BY b.entrance_path
+     ), converted_sessions AS (
+       SELECT DISTINCT c.session_id
+         FROM analytics_conversions c
+        WHERE c.site_id = $1 AND c.occurred_at >= $2::timestamptz AND c.occurred_at < $3::timestamptz
+          AND c.session_id IS NOT NULL
+     ), path_sessions AS (
+       SELECT DISTINCT path, session_id FROM filtered WHERE session_id IS NOT NULL
+     ), engaged AS (
+       SELECT ps.path,
+              count(*) FILTER (
+                WHERE sp.pageviews >= 2
+                   OR COALESCE(pd.engaged_ms, 0) >= ${ni}
+                   OR cs.session_id IS NOT NULL
+              )::int AS engaged_sessions
+         FROM path_sessions ps
+         JOIN session_pageviews sp USING(session_id)
+         LEFT JOIN page_dwell pd ON pd.session_id = ps.session_id AND pd.path = ps.path
+         LEFT JOIN converted_sessions cs ON cs.session_id = ps.session_id
+        GROUP BY ps.path
+     ), assisted AS (
+       SELECT f.path, count(DISTINCT c.id)::int AS conversions
+         FROM analytics_conversions c JOIN filtered f ON f.session_id = c.session_id
+        WHERE c.site_id = $1 AND c.occurred_at >= $2::timestamptz AND c.occurred_at < $3::timestamptz
+        GROUP BY f.path
+     )
+     SELECT metrics.*,
+            COALESCE(entrances.entrances, 0)::int AS entrances,
+            COALESCE(exits.exits, 0)::int AS exits,
+            COALESCE(assisted.conversions, 0)::int AS conversions,
+            COALESCE(dwell.measured_pageviews, 0)::int AS measured_pageviews,
+            CASE WHEN dwell.avg_engaged_ms IS NULL THEN NULL
+                 ELSE round((dwell.avg_engaged_ms / 1000.0)::numeric, 1) END AS avg_seconds_on_page,
+            CASE WHEN dwell.avg_scroll IS NULL THEN NULL
+                 ELSE round(dwell.avg_scroll::numeric, 1) END AS avg_scroll_depth,
+            CASE WHEN COALESCE(entrances.entrances, 0) = 0 THEN NULL
+                 ELSE round(COALESCE(bounces.bounces, 0)::numeric * 100 / entrances.entrances, 1) END AS bounce_rate,
+            CASE WHEN metrics.pageviews = 0 THEN NULL
+                 ELSE round(COALESCE(exits.exits, 0)::numeric * 100 / metrics.pageviews, 1) END AS exit_rate,
+            CASE WHEN metrics.sessions = 0 THEN NULL
+                 ELSE round(COALESCE(engaged.engaged_sessions, 0)::numeric * 100 / metrics.sessions, 1) END AS engagement_rate,
+            CASE WHEN metrics.sessions = 0 THEN NULL
+                 ELSE round(metrics.pageviews::numeric / metrics.sessions, 2) END AS pageviews_per_session
+       FROM page_metrics metrics
+       LEFT JOIN entrances USING(path)
+       LEFT JOIN exits USING(path)
+       LEFT JOIN assisted USING(path)
+       LEFT JOIN bounces USING(path)
+       LEFT JOIN engaged USING(path)
+       LEFT JOIN dwell_metrics dwell USING(path)
+      WHERE ${d}::text IS NULL OR metrics.path ILIKE '%' || ${d} || '%'
+      ORDER BY ${_}
+      LIMIT 1000`,[...r.values,o.search]),c=$(u.rows,n,F(`content:${o.sort}:${o.direction}:${o.search??""}`,e,i));return{content:c.items,pageInfo:c.pageInfo,table:o,dataFreshThrough:new Date().toISOString()}}async function vn(e,t,i,n){let s=l();await g(s,e,t);let a=j(e,i),[r,o]=await Promise.all([s.query(`SELECT e.event_name AS name, count(*)::int AS count, max(e.occurred_at)::text AS last_seen_at
+       FROM analytics_events e
+      WHERE ${a.where}
+      GROUP BY e.event_name ORDER BY count DESC, e.event_name ASC
+      LIMIT 1000`,a.values),s.query(`SELECT e.event_id, e.event_name, e.path, e.hostname,
+            COALESCE(e.source, '(direct)') AS source,
+            COALESCE(e.campaign, '(none)') AS campaign,
+            e.occurred_at::text
+       FROM analytics_events e WHERE ${a.where}
+       ORDER BY e.occurred_at DESC, e.id DESC LIMIT 25`,a.values)]),d=[e,i.start,i.end],_=["r.site_id = $1","r.created_at >= $2::timestamptz","r.created_at < $3::timestamptz"],u=(N,A)=>{d.push(A),_.push(N.replace("?",`$${d.length}`))};i.pixelIds?.length&&u("r.pixel_id = ANY(?::uuid[])",i.pixelIds),i.hostnames?.length&&u("r.hostname = ANY(?::text[])",i.hostnames);let c=await s.query(`SELECT reason.code, count(*)::int AS requests,
+            COALESCE(sum(r.rejected_count), 0)::int AS rejected_events,
+            max(r.created_at)::text AS last_seen_at
+       FROM analytics_ingestion_receipts r
+       CROSS JOIN LATERAL jsonb_array_elements_text(r.reason_codes) AS reason(code)
+      WHERE ${_.join(" AND ")} AND r.rejected_count > 0
+      GROUP BY reason.code ORDER BY rejected_events DESC, reason.code ASC`,d),E=$(r.rows,n,F("events",e,i));return{events:E.items,samples:o.rows,rejections:c.rows,pageInfo:E.pageInfo,dataFreshThrough:o.rows[0]?.occurred_at??null}}async function yi(e,t,i,n){let s=l();await g(s,e,t);let a=de(e,i),r=await s.query(`SELECT c.id, c.source_event_id, c.pixel_id, c.session_id, c.conversion_kind,
+            c.value_minor::int, c.currency, c.occurred_at::text,
+            COALESCE(first_event.source, '(direct)') AS source,
+            COALESCE(first_event.medium, '(none)') AS medium,
+            COALESCE(first_event.campaign, '(none)') AS campaign
+       FROM analytics_conversions c
+       LEFT JOIN LATERAL (
+         SELECT e.source, e.medium, e.campaign
+           FROM analytics_events e
+          WHERE e.site_id = c.site_id AND e.session_id = c.session_id
+          ORDER BY e.occurred_at ASC LIMIT 1
+       ) first_event ON true
+      WHERE ${a.where}
+      ORDER BY c.occurred_at DESC
+      LIMIT 1000`,a.values),o=r.rows.reduce((_,u)=>({count:_.count+1,valueMinor:_.valueMinor+Number(u.value_minor??0)}),{count:0,valueMinor:0}),d=$(r.rows,n,F("conversions",e,i));return{conversions:d.items,pageInfo:d.pageInfo,summary:o,dataFreshThrough:r.rows[0]?.occurred_at??null}}async function On(e,t,i,n){let s=l();await g(s,e,t);let a=de(e,i),r=await s.query(`SELECT c.session_id, c.person_id,
+            string_agg(COALESCE(path_event.platform, path_event.source, '(direct)') || ' / ' || COALESCE(path_event.medium, '(none)') ||
+              CASE WHEN path_event.campaign IS NOT NULL THEN ' / ' || path_event.campaign ELSE '' END ||
+              CASE WHEN path_event.ad_id IS NOT NULL THEN ' / ad:' || path_event.ad_id ELSE '' END,
+              ' \u2192 ' ORDER BY path_event.occurred_at) AS path,
+            count(path_event.id)::int AS touchpoints,
+            1::int AS conversions,
+            c.value_minor::int AS value_minor
+       FROM analytics_conversions c
+       LEFT JOIN LATERAL (
+         SELECT e.source, e.medium, e.campaign FROM analytics_events e
+          WHERE e.site_id = c.site_id AND e.session_id = c.session_id
+          ORDER BY e.occurred_at ASC LIMIT 1
+       ) first_event ON true
+       JOIN analytics_events path_event ON path_event.site_id = c.site_id AND
+         ((c.person_id IS NOT NULL AND path_event.person_id = c.person_id) OR (c.person_id IS NULL AND path_event.session_id = c.session_id))
+      WHERE ${a.where}
+      GROUP BY c.id
+      ORDER BY conversions DESC, value_minor DESC
+      LIMIT 1000`,a.values),o=$(r.rows,n,F("paths",e,i));return{paths:o.items,pageInfo:o.pageInfo,dataFreshThrough:new Date().toISOString()}}async function Sn(e,t,i,n,s){let a=l();await g(a,e,t);let r=j(e,i),o=n==="device"?"COALESCE(NULLIF(e.device_class, ''), 'unknown') AS key, COALESCE(NULLIF(e.device_class, ''), 'Unknown') AS label":n==="source"?"COALESCE(NULLIF(e.source, ''), '(direct)') AS key, COALESCE(NULLIF(e.source, ''), '(direct)') AS label":n==="country"?"COALESCE(NULLIF(e.country_code, ''), 'unknown') AS key, COALESCE(NULLIF(e.country_code, ''), 'Unknown') AS label":n==="region"?"COALESCE(NULLIF(e.region_code, ''), 'unknown') AS key, COALESCE(NULLIF(e.region_code, ''), 'Unknown') AS label":`extract(dow from e.occurred_at)::int::text || '-' || extract(hour from e.occurred_at)::int::text AS key,
+             to_char(e.occurred_at, 'Dy') || ' ' || lpad(extract(hour from e.occurred_at)::int::text, 2, '0') || ':00' AS label`,d=await a.query(`SELECT ${o},
+            count(DISTINCT e.visitor_id)::int AS visitors,
+            count(DISTINCT e.session_id)::int AS sessions,
+            count(*) FILTER (WHERE e.event_name = 'page_view')::int AS pageviews,
+            count(*)::int AS events,
+            count(*)::int AS value
+       FROM analytics_events e
+      WHERE ${r.where}
+      GROUP BY 1, 2
+      ORDER BY value DESC, key ASC
+      LIMIT 1000`,r.values),_=$(d.rows,s,F(`dimension:${n}`,e,i));return{dimension:n,unit:"events",chartRecommendation:n==="device"?"donut":n==="weekday_hour"?"heatmap":n==="country"||n==="region"?"choropleth_or_bar":"horizontal_bar",rows:_.items,pageInfo:_.pageInfo,dataFreshThrough:new Date().toISOString()}}function it(e){let t=new URL(e.destination_url);for(let[i,n]of[["utm_source",e.utm_source],["utm_medium",e.utm_medium],["utm_campaign",e.utm_campaign],["utm_term",e.utm_term],["utm_content",e.utm_content],["ad_group",e.ad_group],["ad_name",e.ad_name],["creative_id",e.creative_id]])n&&t.searchParams.set(i,n);return t.toString()}function nt(e){return{...e,tagged_url:it(e)}}async function Cn(e){let t=l();await D(t,e.siteId,e.userId);let i;try{i=new URL(e.destinationUrl)}catch{throw new m("invalid_destination_url","Enter a valid destination URL.")}if(!["http:","https:"].includes(i.protocol))throw new m("invalid_destination_url","Destination URL must use HTTP or HTTPS.");if(e.pixelId&&!(await t.query("SELECT 1 FROM analytics_pixels WHERE id = $1 AND site_id = $2",[e.pixelId,e.siteId])).rowCount)throw new m("analytics_pixel_not_found","Pixel not found.",404);let n=(e.shortCode?.trim().toLowerCase().replace(/[^a-z0-9_-]/g,"-")||P(5).toString("base64url").toLowerCase()).slice(0,48);try{let s=await t.query(`INSERT INTO analytics_campaign_links(
+         id, site_id, pixel_id, name, destination_url, short_code, utm_source, utm_medium,
+         utm_campaign, utm_term, utm_content, ad_group, ad_name, creative_id, created_by_user_id
+       ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)
+       RETURNING *, 0::int AS click_count`,[y(),e.siteId,e.pixelId??null,e.name.trim(),i.toString(),n,e.source.trim(),e.medium.trim(),e.campaign.trim(),e.term?.trim()||null,e.content?.trim()||null,e.adGroup?.trim()||null,e.adName?.trim()||null,e.creativeId?.trim()||null,e.userId]);return nt(s.rows[0])}catch(s){throw s.code==="23505"?new m("campaign_short_code_taken","That short code is already in use.",409):s}}async function Rn(e,t,i){let n=l();await g(n,e,t);let a=(await n.query(`SELECT l.*, count(c.id)::int AS click_count
+       FROM analytics_campaign_links l LEFT JOIN analytics_campaign_clicks c ON c.link_id = l.id
+      WHERE l.site_id = $1
+      GROUP BY l.id ORDER BY l.created_at DESC, l.id DESC LIMIT 1000`,[e])).rows.map(nt),o=$(a,i,F("campaign-links",e,{start:"all",end:"all"}));return{links:o.items,pageInfo:o.pageInfo}}async function fn(e){let t=l();if(await D(t,e.siteId,e.userId),!(await t.query("UPDATE analytics_campaign_links SET status = 'archived', updated_at = now() WHERE id = $1 AND site_id = $2",[e.linkId,e.siteId])).rowCount)throw new m("campaign_link_not_found","Campaign link not found.",404)}async function Dn(e,t){let i=l(),s=(await i.query("SELECT l.*, 0::int AS click_count FROM analytics_campaign_links l WHERE l.short_code = $1 AND l.status = 'active'",[e])).rows[0];return s?(await i.query("INSERT INTO analytics_campaign_clicks(id, link_id, referrer) VALUES ($1, $2, $3)",[y(),s.id,V(t||void 0)]),it(s)):null}async function Un(e){let t=l();if(await D(t,e.siteId,e.userId),!(await t.query("SELECT 1 FROM analytics_pixels WHERE id = $1 AND site_id = $2",[e.pixelId,e.siteId])).rowCount)throw new m("analytics_pixel_not_found","Pixel not found.",404);let s=`${Qe(e.name)}-${P(3).toString("hex")}`,a=`form_${P(18).toString("base64url")}`;return(await t.query(`INSERT INTO analytics_forms(id, public_id, site_id, pixel_id, name, slug, fields, brand, submit_label, success_message, redirect_url, consent_text, status, created_by_user_id)
+     VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8::jsonb,$9,$10,$11,$12,$13,$14)
+     RETURNING *, 0::int AS submission_count`,[y(),a,e.siteId,e.pixelId,e.name.trim(),s,JSON.stringify(e.fields),JSON.stringify(e.brand),e.submitLabel?.trim()||"Submit",e.successMessage?.trim()||"Thank you. Your response was received.",e.redirectUrl?.trim()||null,e.consentText?.trim()||null,e.publish?"published":"draft",e.userId])).rows[0]}async function wn(e,t,i){let n=l();await g(n,e,t);let s=await n.query(`SELECT f.*, count(s.id)::int AS submission_count FROM analytics_forms f
+     LEFT JOIN analytics_form_submissions s ON s.form_id = f.id
+     WHERE f.site_id = $1 GROUP BY f.id ORDER BY f.created_at DESC, f.id DESC LIMIT 1000`,[e]),a=$(s.rows,i,F("forms",e,{start:"all",end:"all"}));return{forms:a.items,pageInfo:a.pageInfo}}async function bn(e){return(await l().query(`SELECT f.*, s.owner_user_id, p.public_id AS pixel_public_id,
+            (SELECT count(*)::int FROM analytics_form_submissions fs WHERE fs.form_id = f.id) AS submission_count
+       FROM analytics_forms f JOIN analytics_sites s ON s.id = f.site_id JOIN analytics_pixels p ON p.id = f.pixel_id
+      WHERE f.public_id = $1 AND f.status = 'published'`,[e])).rows[0]??null}async function hn(e){let t=y();return await l().query(`INSERT INTO analytics_form_submissions(id, form_id, site_id, pixel_id, visitor_id, session_id, crm_person_ref, source, medium, campaign, crm_delivery_status, click_ids)
+     VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12::jsonb)`,[t,e.form.id,e.form.site_id,e.form.pixel_id,e.visitorId??null,e.sessionId??null,e.crmPersonRef??null,e.source?.slice(0,180)??null,e.medium?.slice(0,180)??null,e.campaign?.slice(0,240)??null,e.crmDeliveryStatus??"pending",JSON.stringify(z(e.clickIds))]),{submissionId:t}}var pi=new Set(["fbclid","gclid","gbraid","wbraid","ttclid","rdt_cid","msclkid","fbp","fbc","li_fat_id","snapclid"]);function z(e){let t={};for(let[i,n]of Object.entries(e??{})){if(!pi.has(i)||typeof n!="string")continue;let s=n.trim();s&&(t[i]=s.slice(0,500))}return t}function L(e,t){return Yt("sha256",Q()).update(`${e}:${t.trim().toLowerCase()}`).digest("hex")}async function Ti(e){for(;;){let i=await e.query(`SELECT id, visitor_id, session_id
+         FROM analytics_events
+        WHERE (visitor_id IS NOT NULL AND visitor_hmac IS NULL)
+           OR (session_id IS NOT NULL AND session_hmac IS NULL)
+        ORDER BY id
+        LIMIT $1`,[500]);if(!i.rowCount)break;await e.query(`UPDATE analytics_events e
+          SET visitor_hmac = COALESCE(e.visitor_hmac, patch.visitor_hmac),
+              session_hmac = COALESCE(e.session_hmac, patch.session_hmac)
+         FROM unnest($1::uuid[], $2::text[], $3::text[]) AS patch(id, visitor_hmac, session_hmac)
+        WHERE e.id = patch.id`,[i.rows.map(n=>n.id),i.rows.map(n=>n.visitor_id?L("visitor_id",n.visitor_id):null),i.rows.map(n=>n.session_id?L("session_id",n.session_id):null)])}for(;;){let i=await e.query(`SELECT id, session_id
+         FROM analytics_conversions
+        WHERE session_id IS NOT NULL AND session_hmac IS NULL
+        ORDER BY id
+        LIMIT $1`,[500]);if(!i.rowCount)break;await e.query(`UPDATE analytics_conversions c
+          SET session_hmac = patch.session_hmac
+         FROM unnest($1::uuid[], $2::text[]) AS patch(id, session_hmac)
+        WHERE c.id = patch.id AND c.session_hmac IS NULL`,[i.rows.map(n=>n.id),i.rows.map(n=>L("session_id",n.session_id))])}}function ye(){return`xrp_${P(18).toString("base64url")}`}function xn(e,t){let i=L("crm_entity_id",`${e}:${t}`).slice(0,32).split("");return i[12]="5",i[16]=["8","9","a","b"][Number.parseInt(i[16],16)%4],`${i.slice(0,8).join("")}-${i.slice(8,12).join("")}-${i.slice(12,16).join("")}-${i.slice(16,20).join("")}-${i.slice(20).join("")}`}async function st(e,t,i){let n=await e.query("SELECT id FROM analytics_identity_namespaces WHERE site_id=$1 AND status='approved' ORDER BY version DESC LIMIT 1",[t]);n.rows[0]||(await e.query(`INSERT INTO analytics_identity_namespaces(
+         id,site_id,name,status,approved_hosts,approved_sources,version,approved_by_user_id,approved_at
+       )
+       SELECT $1,s.id,'X-Ray primary','approved',
+         COALESCE((SELECT jsonb_agg(d.hostname ORDER BY d.hostname)
+                     FROM analytics_pixels p
+                     JOIN analytics_pixel_domains d ON d.pixel_id=p.id AND d.state='approved'
+                    WHERE p.site_id=s.id),'[]'::jsonb),
+         $3::jsonb,1,s.owner_user_id,now()
+         FROM analytics_sites s WHERE s.id=$2
+       ON CONFLICT(site_id,name,version) DO NOTHING`,[y(),t,JSON.stringify([i])]),n=await e.query("SELECT id FROM analytics_identity_namespaces WHERE site_id=$1 AND status='approved' ORDER BY version DESC LIMIT 1",[t]));let s=n.rows[0]?.id;if(!s)throw new m("identity_namespace_unavailable","The Site identity graph could not be initialized.",409);return await e.query(`UPDATE analytics_identity_namespaces
+        SET approved_sources=(SELECT jsonb_agg(value ORDER BY value)
+                                FROM (SELECT DISTINCT value
+                                        FROM jsonb_array_elements_text(approved_sources || $3::jsonb)) merged_sources),
+            approved_hosts=(SELECT COALESCE(jsonb_agg(hostname ORDER BY hostname),'[]'::jsonb)
+                              FROM (SELECT DISTINCT hostname
+                                      FROM (SELECT jsonb_array_elements_text(approved_hosts) AS hostname
+                                            UNION ALL
+                                            SELECT d.hostname
+                                              FROM analytics_pixels p
+                                              JOIN analytics_pixel_domains d ON d.pixel_id=p.id AND d.state='approved'
+                                             WHERE p.site_id=$2) hosts) distinct_hosts),
+            updated_at=now()
+      WHERE id=$1 AND site_id=$2`,[s,t,JSON.stringify([i])]),s}async function at(e,t){if(!t.visitorId&&!t.sessionId)return{events:0,sessions:0,touches:0,conversions:0};let i=t.visitorId?L("visitor_id",t.visitorId):null,n=t.sessionId?L("session_id",t.sessionId):null,s=await e.query(`UPDATE analytics_events SET person_id = $1 WHERE site_id = $2 AND person_id IS NULL
+      AND (($3::text IS NOT NULL AND visitor_id = $3) OR ($4::text IS NOT NULL AND session_id = $4))`,[t.personId,t.siteId,t.visitorId??null,t.sessionId??null]),a=await e.query(`UPDATE analytics_conversions SET person_id = $1 WHERE site_id = $2 AND person_id IS NULL
+      AND $3::text IS NOT NULL AND session_id = $3`,[t.personId,t.siteId,t.sessionId??null]),r=await e.query(`UPDATE analytics_sessions SET person_id = $1
+      WHERE site_id = $2 AND person_id IS NULL
+        AND (($3::text IS NOT NULL AND visitor_hmac = $3)
+          OR ($4::text IS NOT NULL AND session_hmac = $4))`,[t.personId,t.siteId,i,n]),o=await e.query(`UPDATE analytics_attribution_touches SET person_id = $1
+      WHERE site_id = $2 AND person_id IS NULL
+        AND (($3::text IS NOT NULL AND visitor_hmac = $3)
+          OR ($4::text IS NOT NULL AND session_id IN (
+            SELECT id FROM analytics_sessions
+             WHERE site_id = $2 AND session_hmac = $4
+          )))`,[t.personId,t.siteId,i,n]);return{events:s.rowCount??0,sessions:r.rowCount??0,touches:o.rowCount??0,conversions:a.rowCount??0}}async function Te(e,t){let n=(await e.query(`SELECT id FROM analytics_people
+      WHERE site_id=$1 AND (namespace_id=$2 OR namespace_id IS NULL)
+        AND (($3::uuid IS NOT NULL AND crm_entity_id=$3::uuid)
+          OR ($3::uuid IS NULL AND $4::text IS NOT NULL AND crm_person_ref=$4))
+      ORDER BY first_seen_at,id LIMIT 1 FOR UPDATE`,[t.siteId,t.namespaceId,t.crmEntityId??null,t.crmPersonRef??null])).rows[0]?.id;if(!n&&!t.crmEntityId&&!t.crmPersonRef&&t.signals.length&&(n=(await e.query(`SELECT assignment.person_id
+         FROM analytics_identity_nodes node
+         JOIN analytics_identity_assignments assignment
+           ON assignment.identity_node_id=node.id AND assignment.site_id=node.site_id
+        WHERE node.site_id=$1 AND EXISTS (
+          SELECT 1 FROM jsonb_to_recordset($2::jsonb) signal(kind text,value_hmac text)
+           WHERE signal.kind=node.kind AND signal.value_hmac=node.value_hmac
+        )
+        ORDER BY assignment.assigned_at,assignment.person_id LIMIT 1`,[t.siteId,JSON.stringify(t.signals.map(a=>({kind:a.kind,value_hmac:a.valueHmac})))])).rows[0]?.person_id),n)await e.query(`UPDATE analytics_people SET last_seen_at=now(),
+         namespace_id=COALESCE(namespace_id,$2),
+         crm_entity_id=COALESCE(crm_entity_id,$3::uuid),
+         public_ref=COALESCE(public_ref,$4)
+       WHERE id=$1 AND site_id=$5`,[n,t.namespaceId,t.crmEntityId??null,ye(),t.siteId]);else{let s=t.crmEntityId??null,a=t.crmPersonRef??(s?`XRay::entity::${s}`:`XRay::anonymous::${y()}`);n=(await e.query(`INSERT INTO analytics_people(id,site_id,namespace_id,crm_person_ref,crm_entity_id,public_ref)
+       VALUES($1,$2,$3,$4,$5::uuid,$6)
+       ON CONFLICT(site_id,crm_person_ref) DO UPDATE SET last_seen_at=now(),
+         namespace_id=COALESCE(analytics_people.namespace_id,EXCLUDED.namespace_id),
+         crm_entity_id=COALESCE(analytics_people.crm_entity_id,EXCLUDED.crm_entity_id),
+         public_ref=COALESCE(analytics_people.public_ref,EXCLUDED.public_ref)
+       RETURNING id`,[y(),t.siteId,t.namespaceId,a,s,ye()])).rows[0].id}return{personId:n,mergedPersonIds:[]}}async function J(e,t){let n=(await e.query(`SELECT person_id,crm_entity_id::text FROM analytics_identity_assignments
+      WHERE identity_node_id=$1 AND site_id=$2 FOR UPDATE`,[t.identityNodeId,t.siteId])).rows[0];if(!n){await e.query(`INSERT INTO analytics_identity_assignments(
+         identity_node_id,site_id,person_id,crm_entity_id,evidence_kind
+       ) VALUES($1,$2,$3,$4::uuid,$5)
+       ON CONFLICT(identity_node_id) DO NOTHING`,[t.identityNodeId,t.siteId,t.personId,t.crmEntityId??null,t.evidenceKind]);let s=await e.query("SELECT person_id FROM analytics_identity_assignments WHERE identity_node_id=$1 AND site_id=$2",[t.identityNodeId,t.siteId]);if(s.rows[0]?.person_id===t.personId)return"assigned";if(!s.rows[0])throw new m("identity_assignment_unavailable","Identity assignment could not be recorded.",409);n={person_id:s.rows[0].person_id,crm_entity_id:null}}return n.person_id===t.personId?(await e.query(`UPDATE analytics_identity_assignments SET updated_at=now(),
+         crm_entity_id=COALESCE(crm_entity_id,$3::uuid),evidence_kind=$4
+       WHERE identity_node_id=$1 AND site_id=$2`,[t.identityNodeId,t.siteId,t.crmEntityId??null,t.evidenceKind]),"existing"):(await e.query(`INSERT INTO analytics_identity_assignment_conflicts(
+       id,site_id,identity_node_id,active_person_id,attempted_person_id,
+       active_crm_entity_id,attempted_crm_entity_id,evidence_kind
+     ) VALUES($1,$2,$3,$4,$5,$6::uuid,$7::uuid,$8)
+     ON CONFLICT(identity_node_id,active_person_id,attempted_person_id)
+       WHERE status='pending' DO UPDATE SET observed_at=now(),evidence_kind=EXCLUDED.evidence_kind`,[y(),t.siteId,t.identityNodeId,n.person_id,t.personId,n.crm_entity_id,t.crmEntityId??null,t.evidenceKind]),"conflict")}async function Li(e,t){let n=(await e.query(`WITH person_nodes AS (
+       SELECT DISTINCT identity_node_id
+         FROM analytics_identity_edges
+        WHERE site_id=$1 AND namespace_id=$2 AND person_id=$3
+     )
+     UPDATE analytics_candidate_associations a
+        SET status='promoted',promoted_person_id=$3,promoted_at=$4::timestamptz,updated_at=now()
+      WHERE a.site_id=$1 AND a.namespace_id=$2
+        AND (a.left_identity_node_id IN (SELECT identity_node_id FROM person_nodes)
+          OR a.right_identity_node_id IN (SELECT identity_node_id FROM person_nodes))
+        AND (a.status IN ('active','expired') OR (a.status='promoted' AND a.promoted_person_id=$3))
+     RETURNING a.id`,[t.siteId,t.namespaceId,t.personId,t.occurredAt])).rows.map(a=>a.id);if(!n.length)return{associationIds:[],touches:0};for(let a of n)await e.query(`INSERT INTO analytics_candidate_promotions(
+         id,site_id,namespace_id,association_id,person_id,evidence_kind,
+         evidence_ref_hmac,promoted_by,promoted_at
+       ) VALUES($1,$2,$3,$4,$5,$6,$7,'system',$8::timestamptz)
+       ON CONFLICT(association_id,person_id) DO NOTHING`,[y(),t.siteId,t.namespaceId,a,t.personId,t.candidateEvidenceKind,t.evidenceRefHmac,t.occurredAt]);let s=await e.query(`UPDATE analytics_attribution_touches touch SET person_id=$3
+       FROM analytics_candidate_attribution_touches candidate_touch
+      WHERE candidate_touch.site_id=$1 AND candidate_touch.namespace_id=$2
+        AND candidate_touch.association_id=ANY($4::uuid[])
+        AND candidate_touch.touch_id=touch.id AND touch.site_id=$1 AND touch.person_id IS NULL`,[t.siteId,t.namespaceId,t.personId,n]);return{associationIds:n,touches:s.rowCount??0}}async function Ai(e,t){let i=L("promotion_evidence",`${t.evidenceKind}:${t.evidenceRef}`),n=L("promotion_person",t.personId),s=L("promotion_receipt",`${t.siteId}:${t.personId}:${t.evidenceKind}:${t.evidenceRef}`);await e.query(`INSERT INTO analytics_identity_promotion_receipts(
+       id,site_id,namespace_id,canonical_person_id,canonical_person_ref_hmac,
+       evidence_kind,evidence_ref_hmac,prior_person_ids,prior_identity_node_ids,
+       candidate_association_ids,affected_history_counts,schema_version,idempotency_key,promoted_at
+     ) VALUES($1,$2,$3,$4,$5,$6,$7,$8::uuid[],$9::uuid[],$10::uuid[],$11::jsonb,
+       'xray.identity-promotion.v1',$12,$13::timestamptz)
+     ON CONFLICT(site_id,idempotency_key) DO NOTHING`,[y(),t.siteId,t.namespaceId,t.personId,n,t.evidenceKind,i,t.priorPersonIds,t.priorIdentityNodeIds,t.candidateAssociationIds,JSON.stringify({...t.history,candidateTouches:t.candidateTouches}),s,t.occurredAt])}async function Le(e,t){let i=t.occurredAt??new Date().toISOString(),n=await at(e,t),s=L("promotion_evidence",`${t.evidenceKind}:${t.evidenceRef}`),a=await Li(e,{siteId:t.siteId,namespaceId:t.namespaceId,personId:t.personId,candidateEvidenceKind:t.candidateEvidenceKind,evidenceRefHmac:s,occurredAt:i});await Ai(e,{...t,history:n,candidateAssociationIds:a.associationIds,candidateTouches:a.touches,occurredAt:i})}async function Ii(e,t){let i=t.customerId||t.orderId||t.email||t.phone;if(!i||!await et(e,t.siteId,t.visitorId,t.sessionId))return null;let n=await st(e,t.siteId,"pixel"),s=[...t.email?[{kind:"email",valueHmac:L("email",t.email)}]:[],...t.phone?[{kind:"phone",valueHmac:L("phone",t.phone)}]:[],...t.customerId?[{kind:"customer_id",valueHmac:L("customer_id",t.customerId)}]:[],...t.orderId?[{kind:"customer_id",valueHmac:L("customer_id",`order:${t.orderId}`)}]:[]];await ie(e,{siteId:t.siteId,signals:s});let a=`XRay::${L("person_ref",i).slice(0,24)}`,r=[...s,...t.visitorId?[{kind:"visitor_id",valueHmac:L("visitor_id",t.visitorId)}]:[],...t.sessionId?[{kind:"session_id",valueHmac:L("session_id",t.sessionId)}]:[]],o=await Te(e,{siteId:t.siteId,namespaceId:n,crmPersonRef:a,signals:r}),d=o.personId,_=[];t.visitorId&&_.push({kind:"visitor_id",value:t.visitorId,evidence:"pixel_identify",confidence:.98}),t.sessionId&&_.push({kind:"session_id",value:t.sessionId,evidence:"pixel_identify",confidence:.98}),t.email&&_.push({kind:"email",value:t.email,evidence:"pixel_identify",confidence:1}),t.phone&&_.push({kind:"phone",value:t.phone,evidence:"pixel_identify",confidence:.99}),t.customerId&&_.push({kind:"customer_id",value:t.customerId,evidence:"customer_id",confidence:1}),t.orderId&&_.push({kind:"customer_id",value:`order:${t.orderId}`,evidence:"order_id",confidence:1});for(let[E,N]of Object.entries(z(t.clickIds)))_.push({kind:"click_id",value:`${E}:${N}`,evidence:E,confidence:.9});let u=[],c=!1;for(let E of _){let N=await e.query(`INSERT INTO analytics_identity_nodes(id, site_id, namespace_id, kind, value_hmac) VALUES ($1,$2,$3,$4,$5)
+       ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at = now(),
+         namespace_id=COALESCE(analytics_identity_nodes.namespace_id,EXCLUDED.namespace_id) RETURNING id`,[y(),t.siteId,n,E.kind,L(E.kind,E.value)]);u.push(N.rows[0].id),await e.query(`INSERT INTO analytics_identity_edges(id, site_id, namespace_id, person_id, identity_node_id, evidence_kind, confidence)
+       VALUES ($1,$2,$3,$4,$5,$6,$7)
+       ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE
+       SET last_seen_at = now(), confidence = greatest(analytics_identity_edges.confidence, EXCLUDED.confidence),
+         namespace_id=COALESCE(analytics_identity_edges.namespace_id,EXCLUDED.namespace_id)`,[y(),t.siteId,n,d,N.rows[0].id,E.evidence,E.confidence]);let A=await J(e,{siteId:t.siteId,personId:d,identityNodeId:N.rows[0].id,evidenceKind:E.evidence});c||=A==="conflict"}return c||await Le(e,{siteId:t.siteId,namespaceId:n,personId:d,evidenceKind:t.customerId?"authenticated_login":"browser_identify",candidateEvidenceKind:t.email?"verified_email":t.phone?"verified_phone":"authenticated_user",evidenceRef:i,priorPersonIds:o.mergedPersonIds,priorIdentityNodeIds:u,visitorId:t.visitorId,sessionId:t.sessionId,occurredAt:t.occurredAt}),t.customerId&&!c&&await ne(e,{siteId:t.siteId,personId:d,consentSubjectRefs:[t.visitorId??"",t.sessionId??""],evidenceType:"authenticated_user",email:t.email,phone:t.phone}),d}async function Fn(e){let t=await l().connect();try{if(await t.query("BEGIN"),!await et(t,e.siteId,e.visitorId,e.sessionId))return await t.query("COMMIT"),{personId:null,linkedSignals:0,conflicts:0};let i=await st(t,e.siteId,"form"),n=[...e.email?[{kind:"email",valueHmac:L("email",e.email)}]:[],...e.phone?[{kind:"phone",valueHmac:L("phone",e.phone)}]:[]];await ie(t,{siteId:e.siteId,signals:n});let s=[...n,...e.visitorId?[{kind:"visitor_id",valueHmac:L("visitor_id",e.visitorId)}]:[],...e.sessionId?[{kind:"session_id",valueHmac:L("session_id",e.sessionId)}]:[]],a=await Te(t,{siteId:e.siteId,namespaceId:i,crmPersonRef:e.crmPersonRef,crmEntityId:e.crmEntityId,signals:s}),r=a.personId,o=[];e.visitorId&&o.push({kind:"visitor_id",value:e.visitorId,evidence:"first_party_form",confidence:.98}),e.sessionId&&o.push({kind:"session_id",value:e.sessionId,evidence:"first_party_form",confidence:.95}),e.email&&o.push({kind:"email",value:e.email,evidence:"submitted_email",confidence:1}),e.phone&&o.push({kind:"phone",value:e.phone,evidence:"submitted_phone",confidence:.99});for(let[u,c]of Object.entries(z(e.clickIds)))o.push({kind:"click_id",value:`${u}:${c}`,evidence:u,confidence:.9});let d=[],_=0;for(let u of o){let c=await t.query(`INSERT INTO analytics_identity_nodes(id, site_id, namespace_id, kind, value_hmac) VALUES ($1,$2,$3,$4,$5)
+         ON CONFLICT(site_id, kind, value_hmac) DO UPDATE SET last_seen_at = now(),
+           namespace_id=COALESCE(analytics_identity_nodes.namespace_id,EXCLUDED.namespace_id) RETURNING id`,[y(),e.siteId,i,u.kind,L(u.kind,u.value)]);d.push(c.rows[0].id),await t.query(`INSERT INTO analytics_identity_edges(id, site_id, namespace_id, person_id, identity_node_id, evidence_kind, confidence)
+         VALUES ($1,$2,$3,$4,$5,$6,$7)
+         ON CONFLICT(person_id, identity_node_id, evidence_kind) DO UPDATE SET last_seen_at = now(),
+           confidence = greatest(analytics_identity_edges.confidence, EXCLUDED.confidence),
+           namespace_id=COALESCE(analytics_identity_edges.namespace_id,EXCLUDED.namespace_id)`,[y(),e.siteId,i,r,c.rows[0].id,u.evidence,u.confidence]),await J(t,{siteId:e.siteId,personId:r,crmEntityId:e.crmEntityId,identityNodeId:c.rows[0].id,evidenceKind:u.evidence})==="conflict"&&(_+=1)}return e.submissionId&&await t.query("UPDATE analytics_form_submissions SET person_id = $1 WHERE id = $2 AND site_id = $3",[r,e.submissionId,e.siteId]),_===0&&await Le(t,{siteId:e.siteId,namespaceId:i,personId:r,evidenceKind:"form_fill",candidateEvidenceKind:e.email?"verified_email":e.phone?"verified_phone":"authenticated_user",evidenceRef:e.submissionId??e.crmEntityId??e.crmPersonRef??r,priorPersonIds:a.mergedPersonIds,priorIdentityNodeIds:d,visitorId:e.visitorId,sessionId:e.sessionId}),_===0&&await ne(t,{siteId:e.siteId,personId:r,consentSubjectRefs:[e.visitorId??""],evidenceType:e.evidenceType??"first_party_form",displayName:e.displayName,email:e.email,phone:e.phone}),await t.query("COMMIT"),{personId:r,linkedSignals:o.length,conflicts:_}}catch(i){throw await t.query("ROLLBACK"),i}finally{t.release()}}async function $n(e){let t=await l().connect();try{await t.query("BEGIN");let n=(await t.query(`SELECT p.id,p.public_ref,p.namespace_id FROM analytics_people p
+        JOIN analytics_identity_namespaces n ON n.id=p.namespace_id AND n.site_id=p.site_id AND n.status='approved'
+        WHERE p.site_id=$1 AND p.crm_person_ref=$2 LIMIT 1 FOR UPDATE OF p`,[e.siteId,e.crmPersonRef])).rows[0];if(!n||!await ti(t,e.siteId,n.public_ref))return await t.query("COMMIT"),{personId:null,linkedSignals:0,conflicts:0};let s=[...e.email?[{kind:"email",value:e.email,confidence:1}]:[],...e.phone?[{kind:"phone",value:e.phone,confidence:.99}]:[]];await ie(t,{siteId:e.siteId,signals:s.map(c=>({kind:c.kind,valueHmac:L(c.kind,c.value)}))});let a=await Te(t,{siteId:e.siteId,namespaceId:n.namespace_id,crmPersonRef:e.crmPersonRef,crmEntityId:e.crmEntityId,signals:s.map(c=>({kind:c.kind,valueHmac:L(c.kind,c.value)}))}),r=a.personId,d=(await t.query("SELECT public_ref FROM analytics_people WHERE id=$1 AND site_id=$2",[r,e.siteId])).rows[0]?.public_ref??n.public_ref,_=[],u=0;for(let c of s){let E=await t.query(`INSERT INTO analytics_identity_nodes(id,site_id,namespace_id,kind,value_hmac) VALUES($1,$2,$3,$4,$5)
+         ON CONFLICT(site_id,kind,value_hmac) DO UPDATE SET last_seen_at=now(),
+           namespace_id=COALESCE(analytics_identity_nodes.namespace_id,EXCLUDED.namespace_id) RETURNING id`,[y(),e.siteId,n.namespace_id,c.kind,L(c.kind,c.value)]);_.push(E.rows[0].id),await t.query(`INSERT INTO analytics_identity_edges(id,site_id,namespace_id,person_id,identity_node_id,evidence_kind,confidence)
+         VALUES($1,$2,$3,$4,$5,'crm_contact',$6)
+         ON CONFLICT(person_id,identity_node_id,evidence_kind) DO UPDATE SET last_seen_at=now(),
+           confidence=greatest(analytics_identity_edges.confidence,EXCLUDED.confidence)`,[y(),e.siteId,n.namespace_id,r,E.rows[0].id,c.confidence]),await J(t,{siteId:e.siteId,personId:r,crmEntityId:e.crmEntityId,identityNodeId:E.rows[0].id,evidenceKind:"crm_contact"})==="conflict"&&(u+=1)}return u===0&&await Le(t,{siteId:e.siteId,namespaceId:n.namespace_id,personId:r,evidenceKind:"crm_identity",candidateEvidenceKind:"crm_contact",evidenceRef:e.crmPersonRef,priorPersonIds:a.mergedPersonIds,priorIdentityNodeIds:_}),u===0&&await ne(t,{siteId:e.siteId,personId:r,consentSubjectRefs:[d],evidenceType:"crm_contact",displayName:e.displayName,email:e.email,phone:e.phone}),await t.query("COMMIT"),{personId:r,linkedSignals:s.length,conflicts:u}}catch(i){throw await t.query("ROLLBACK"),i}finally{t.release()}}async function qn(e,t,i){let n=l();await g(n,e,t);let s=await n.query(`SELECT p.id, p.first_seen_at, p.last_seen_at, true AS crm_linked,
+            (SELECT count(*)::int FROM analytics_identity_edges e WHERE e.person_id = p.id) AS signal_count,
+            (SELECT count(*)::int FROM analytics_form_submissions f WHERE f.person_id = p.id) AS form_submission_count,
+            (SELECT count(*)::int FROM analytics_conversions c WHERE c.person_id = p.id) AS conversion_count,
+            (SELECT COALESCE(sum(c.value_minor), 0)::bigint FROM analytics_conversions c WHERE c.person_id = p.id) AS revenue_minor
+       FROM analytics_people p WHERE p.site_id = $1 ORDER BY p.last_seen_at DESC, p.id DESC LIMIT 1000`,[e]),a=$(s.rows,i,F("people",e,{start:"all",end:"all"}));return{people:a.items,pageInfo:a.pageInfo}}async function Mn(e,t,i,n){let s=l();if(await g(s,e,i),!(await s.query("SELECT 1 FROM analytics_people WHERE id = $1 AND site_id = $2",[t,e])).rowCount)throw new m("analytics_person_not_found","Attributed person not found.",404);let r=await s.query(`SELECT * FROM (
+       SELECT e.occurred_at, 'event'::text AS kind, e.event_name AS label, e.source, e.medium, e.campaign, e.path, 0::bigint AS value_minor, NULL::text AS currency
+         FROM analytics_events e WHERE e.site_id = $1 AND e.person_id = $2
+       UNION ALL
+       SELECT f.occurred_at, 'form_submission', af.name, f.source, f.medium, f.campaign, NULL, 0, NULL
+         FROM analytics_form_submissions f JOIN analytics_forms af ON af.id = f.form_id WHERE f.site_id = $1 AND f.person_id = $2
+       UNION ALL
+       SELECT c.occurred_at, 'conversion', c.conversion_kind, NULL, NULL, NULL, NULL, c.value_minor, c.currency
+         FROM analytics_conversions c WHERE c.site_id = $1 AND c.person_id = $2
+     ) journey ORDER BY occurred_at DESC LIMIT 1000`,[e,t]),o=$(r.rows,n,F("person_journey",e,{start:t,end:t}));return{personId:t,touchpoints:o.items,pageInfo:o.pageInfo}}async function kn(e){let t=l();await D(t,e.siteId,e.userId);let i=await t.connect(),n=e.id??y();try{if(await i.query("BEGIN"),!(await i.query(`INSERT INTO analytics_crm_imports(id, site_id, requested_by_user_id, source_system, filename, accepted_count, rejected_count)
+       VALUES ($1,$2,$3,$4,$5,$6,$7)
+       ON CONFLICT(id) DO NOTHING
+       RETURNING id,status,accepted_count,rejected_count`,[n,e.siteId,e.userId,e.sourceSystem.slice(0,80),e.filename.slice(0,240),e.rows.length,e.rejectedCount])).rowCount){let r=(await i.query(`SELECT id,status,accepted_count,rejected_count
+           FROM analytics_crm_imports
+          WHERE id=$1 AND site_id=$2 AND requested_by_user_id=$3`,[n,e.siteId,e.userId])).rows[0];if(!r)throw new m("analytics_crm_import_idempotency_conflict","Import idempotency receipt belongs to another request.",409);return await i.query("COMMIT"),{id:r.id,status:r.status,acceptedCount:Number(r.accepted_count),rejectedCount:Number(r.rejected_count)}}for(let a of e.rows)await i.query(`INSERT INTO analytics_crm_import_rows(id, import_id, crm_person_ref, payload_ciphertext)
+         VALUES ($1,$2,$3,$4) ON CONFLICT(import_id, crm_person_ref) DO NOTHING`,[y(),n,a.crmPersonRef,a.payloadCiphertext]);return await i.query("COMMIT"),{id:n,status:"queued",acceptedCount:e.rows.length,rejectedCount:e.rejectedCount}}catch(s){throw await i.query("ROLLBACK"),s}finally{i.release()}}async function Hn(e,t,i){let n=l();await g(n,e,t);let s=await n.query(`SELECT id, source_system, filename, status, accepted_count, rejected_count, created_at, completed_at
+       FROM analytics_crm_imports WHERE site_id = $1 ORDER BY created_at DESC, id DESC LIMIT 1000`,[e]),a=$(s.rows,i,F("crm_imports",e,{start:"all",end:"all"}));return{imports:a.items,pageInfo:a.pageInfo}}async function Pn(e=10){return(await l().query(`WITH due AS (
+       SELECT r.id FROM analytics_crm_import_rows r
+       WHERE r.delivery_status='pending' AND r.next_attempt_at <= now()
+         AND r.expires_at > now() AND (r.lease_until IS NULL OR r.lease_until < now())
+       ORDER BY r.next_attempt_at, r.created_at FOR UPDATE SKIP LOCKED LIMIT $1
+     )
+     UPDATE analytics_crm_import_rows r SET attempts=r.attempts+1,
+       lease_until=now()+interval '5 minutes'
+     FROM due, analytics_crm_imports i WHERE r.id=due.id AND i.id=r.import_id
+     RETURNING r.id, r.import_id, i.requested_by_user_id, r.payload_ciphertext, r.attempts`,[Math.min(Math.max(e,1),50)])).rows.map(i=>({id:i.id,importId:i.import_id,ownerUserId:Number(i.requested_by_user_id),payloadCiphertext:i.payload_ciphertext,attempts:i.attempts}))}async function jn(e,t){let n=await l().connect();try{await n.query("BEGIN"),await n.query(`UPDATE analytics_crm_import_rows SET delivery_status='delivered', delivered_at=now(),
+       lease_until=NULL, last_error_code=NULL WHERE id=$1`,[e]),await n.query(`UPDATE analytics_crm_imports i SET status=CASE
+         WHEN EXISTS(SELECT 1 FROM analytics_crm_import_rows r WHERE r.import_id=i.id AND r.delivery_status='pending') THEN 'processing'
+         WHEN EXISTS(SELECT 1 FROM analytics_crm_import_rows r WHERE r.import_id=i.id AND r.delivery_status IN ('failed','expired')) THEN 'partial'
+         ELSE 'complete' END,
+       completed_at=CASE WHEN EXISTS(SELECT 1 FROM analytics_crm_import_rows r WHERE r.import_id=i.id AND r.delivery_status='pending') THEN NULL ELSE now() END
+       WHERE i.id=$1`,[t]),await n.query("COMMIT")}catch(s){throw await n.query("ROLLBACK"),s}finally{n.release()}}async function Kn(e,t,i,n){let s=i>=8,a=Math.min(5*2**Math.max(0,i-1),360);await l().query(`UPDATE analytics_crm_import_rows SET
+       delivery_status=CASE WHEN expires_at<=now() THEN 'expired' WHEN $2 THEN 'failed' ELSE 'pending' END,
+       lease_until=NULL, last_error_code=$3,
+       next_attempt_at=now()+($4::text || ' minutes')::interval WHERE id=$1`,[e,s,n.slice(0,80),String(a)]),s&&await l().query("UPDATE analytics_crm_imports SET status='partial' WHERE id=$1",[t])}async function Xn(e){le(e.eventMapping);let t=X(e.eventMapping),i=Ee(e.platform,e.externalDatasetId),n=e.operatingAccountId?.trim();if(e.platform==="google"&&!n)throw new m("analytics_provider_destination_required","A Google Ads operating account ID is required for Data Manager activation.",400);if(oe(e.validatedConnection,e.platform),e.validatedConnection.id!==e.connectionRef)throw new m("analytics_provider_action_unavailable","The selected connection cannot send conversions for this provider.",409);let s=l();return await D(s,e.siteId,e.userId),(await s.query(`INSERT INTO analytics_activation_destinations(id, site_id, platform, name, connection_ref, external_dataset_id, event_mapping, provider_config, mapping_version, automatic_delivery_enabled, created_by_user_id)
+     VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8::jsonb,$9,false,$10) RETURNING *`,[y(),e.siteId,e.platform,e.name.trim(),e.connectionRef.trim(),i,JSON.stringify(t),JSON.stringify(n?{operatingAccountId:n}:{}),t.schemaVersion,e.userId])).rows[0]}async function Bn(e,t){let i=l();return await g(i,e,t),(await i.query(`SELECT d.*, count(j.id)::int AS delivery_count,
+            count(j.id) FILTER (WHERE j.status = 'pending')::int AS pending_count,
+            count(j.id) FILTER (WHERE j.status = 'delivered')::int AS delivered_count,
+            count(j.id) FILTER (WHERE j.status = 'failed')::int AS failed_count
+       FROM analytics_activation_destinations d LEFT JOIN analytics_activation_jobs j ON j.destination_id = d.id
+      WHERE d.site_id = $1 AND d.status <> 'archived' GROUP BY d.id ORDER BY d.created_at DESC`,[e])).rows}async function zn(e){let t=l();if(await D(t,e.siteId,e.userId),!(await t.query("UPDATE analytics_activation_destinations SET status = 'archived', updated_at = now() WHERE id = $1 AND site_id = $2",[e.destinationId,e.siteId])).rowCount)throw new m("analytics_activation_destination_not_found","Activation destination not found.",404)}function Ae(e,t){try{return Fe(e,t)}catch{return!1}}function gi(e){let t=e instanceof Error?e.message.toLowerCase():"";return/401|403|authori[sz]/.test(t)?"activation_authorization_failed":/429|rate.?limit/.test(t)?"activation_rate_limited":/invalid|required|schema|validation/.test(t)?"activation_payload_invalid":/timeout|timed out|temporar|unavailable|\b5\d\d\b/.test(t)?"activation_provider_unavailable":"activation_provider_test_failed"}function Ve(e){return e.warnings.slice(0,50).map(t=>t.slice(0,500))}async function Ie(e){let t=l();await D(t,e.siteId,e.userId);let n=(await t.query(`SELECT id, site_id, platform, connection_ref, external_dataset_id,
+            event_mapping, provider_config, mapping_version, readiness, automatic_delivery_enabled
+       FROM analytics_activation_destinations
+      WHERE id=$1 AND site_id=$2 AND status='active'`,[e.destinationId,e.siteId])).rows[0];if(!n)throw new m("analytics_activation_destination_not_found","Activation destination not found.",404);return n}async function Yn(e){let t=await Ie(e);if(!t.connection_ref)throw new m("analytics_provider_action_unavailable","This destination has no connected provider account.",409);return t.connection_ref}async function rt(e){if(!(e.evidenceKind==="provider_test"&&e.nextReadiness==="verified"||e.evidenceKind==="real_delivery"&&e.nextReadiness==="live"||e.evidenceKind==="provider_diagnostic"&&e.nextReadiness==="degraded")||e.expectedReadiness.length===0)throw new m("analytics_activation_readiness_evidence_required","Provider evidence is required for this activation readiness transition.",409);let i=e.evidenceKind==="provider_test"?`EXISTS (SELECT 1 FROM analytics_activation_destination_tests t
+                WHERE t.id=$5::uuid AND t.destination_id=d.id AND t.accepted=true)`:e.evidenceKind==="real_delivery"?`EXISTS (SELECT 1 FROM analytics_activation_delivery_attempts a
+                  WHERE a.id=$5::uuid AND a.destination_id=d.id AND a.accepted=true)`:`EXISTS (SELECT 1 FROM analytics_activation_destination_tests t
+                  WHERE t.id=$5::uuid AND t.destination_id=d.id AND t.safe_error_category IS NOT NULL)`,s=(await l().query(`UPDATE analytics_activation_destinations d
+        SET readiness=$3, updated_at=now(),
+            last_tested_at=CASE WHEN $3='verified' THEN now() ELSE last_tested_at END,
+            last_receipt_id=CASE WHEN $3 IN ('verified','live') THEN $5::text ELSE last_receipt_id END
+      WHERE d.id=$1 AND d.site_id=$2 AND d.readiness = ANY($4::text[])
+        AND ${i}
+      RETURNING d.readiness`,[e.destinationId,e.siteId,e.nextReadiness,[...e.expectedReadiness],e.evidenceId])).rows[0]?.readiness;if(!s)throw new m("analytics_activation_readiness_conflict","Activation readiness changed or the required provider evidence is unavailable.",409);return s}async function Wn(e){let t=await Ie(e);if(!t.connection_ref||!t.external_dataset_id)throw new m("analytics_provider_destination_required","This destination is missing its provider connection or destination identifier.",409);if(t.connection_ref!==e.validatedConnection.id)throw new m("analytics_provider_action_unavailable","The selected connection cannot test this destination.",409);let i=oe(e.validatedConnection,t.platform);if((t.platform==="meta"||t.platform==="tiktok")&&!e.testEventCode)throw new m("analytics_activation_provider_test_code_required",`A ${t.platform} provider test event code is required; X-Ray will not send a synthetic test as a live event.`,400);if(t.platform==="reddit"&&!e.testId)throw new m("analytics_activation_provider_test_code_required","A Reddit CAPI test ID is required; X-Ray will not send a synthetic test as a live event.",400);let n=y(),s=pe("sha256").update(`xray-provider-test:${n}`).digest("hex"),a=t.provider_config??{},r={eventId:`xray-test:${n}`,eventName:"xray_destination_test",eventTime:new Date().toISOString(),actionSource:"system_generated",match:{emailSha256:s},operatingAccountId:a.operatingAccountId,...e.testEventCode?{testEventCode:e.testEventCode}:{},...e.testId?{testId:e.testId}:{}},o=$e({platform:t.platform,destinationId:t.external_dataset_id,eventMapping:t.event_mapping,payload:r});await l().query(`INSERT INTO analytics_activation_destination_tests(
+       id,destination_id,mapping_version,actor
+     ) VALUES ($1,$2,$3,$4)`,[n,t.id,t.mapping_version,e.actor.slice(0,240)]);try{let d=await e.runAction({connectionRef:t.connection_ref,actionName:i.actionName,idempotencyKey:`xray-destination-test:${n}`,payload:o}),_=qe(t.platform,d,r.eventId),u=d&&typeof d=="object"?d:{},c=u.validationOnly===!0||u.schemaValidationOnly===!0,E=_.accepted||t.platform==="google"&&c;await l().query(`UPDATE analytics_activation_destination_tests
+          SET provider_request_id=$2, provider_event_id=$3, warnings=$4::jsonb,
+              response_received_at=now(), accepted=$5, validation_only=$6,
+              next_diagnostic_at=CASE WHEN $7 THEN now()+interval '2 minutes' ELSE NULL END
+        WHERE id=$1 AND response_received_at IS NULL`,[n,_.requestId??null,_.eventId??null,JSON.stringify(Ve(_)),E,c,!!(i.supportsDiagnostics&&_.requestId&&!c)]);let N=t.readiness;return E&&t.readiness!=="live"&&(N=await rt({siteId:e.siteId,destinationId:t.id,expectedReadiness:["configured_unverified","degraded","verified"],nextReadiness:"verified",evidenceKind:"provider_test",evidenceId:n})),{testId:n,accepted:E,validationOnly:c,readiness:N,providerRequestId:_.requestId,providerEventId:_.eventId,warnings:Ve(_)}}catch(d){if(d instanceof m&&d.code.startsWith("analytics_activation_readiness_"))throw d;let _=gi(d);throw await l().query(`UPDATE analytics_activation_destination_tests
+          SET safe_error_category=$2, response_received_at=now()
+        WHERE id=$1 AND response_received_at IS NULL`,[n,_]),new m(_,"The provider did not accept the destination test.",409)}}async function Gn(e){let t=l();await g(t,e.siteId,e.userId);let i=Math.min(Math.max(e.limit??50,1),100);return(await t.query(`SELECT * FROM (
+       SELECT t.id, 'test'::text AS kind, t.mapping_version, t.provider_request_id,
+              t.provider_event_id, t.warnings, t.safe_error_category,
+              t.request_started_at, t.response_received_at, t.next_diagnostic_at,
+              t.actor, t.accepted, t.validation_only, t.created_at,
+              NULL::uuid AS job_id, false AS retryable
+         FROM analytics_activation_destination_tests t
+         JOIN analytics_activation_destinations d ON d.id=t.destination_id
+        WHERE t.destination_id=$1 AND d.site_id=$2
+       UNION ALL
+       SELECT a.id, 'delivery'::text AS kind, a.mapping_version, a.provider_request_id,
+              a.provider_event_id, a.warnings, a.safe_error_category,
+              a.request_started_at, a.response_received_at, a.next_diagnostic_at,
+              a.actor, a.accepted, false AS validation_only, a.created_at,
+              CASE WHEN j.status IN ('failed','expired')
+                         AND d.status='active'
+                         AND d.readiness IN ('verified','live','degraded')
+                   THEN j.id ELSE NULL END AS job_id,
+              (j.status IN ('failed','expired')
+                AND d.status='active'
+                AND d.readiness IN ('verified','live','degraded')) AS retryable
+         FROM analytics_activation_delivery_attempts a
+         JOIN analytics_activation_destinations d ON d.id=a.destination_id
+         JOIN analytics_activation_jobs j ON j.id=a.job_id
+        WHERE a.destination_id=$1 AND d.site_id=$2
+     ) receipts ORDER BY created_at DESC LIMIT $3`,[e.destinationId,e.siteId,i])).rows.map(s=>{let a=s;if(a.kind==="delivery"&&a.retryable===!0&&typeof a.job_id=="string")return a;let r={...a};return delete r.job_id,{...r,retryable:!1}})}async function Vn(e){let t=l();await D(t,e.siteId,e.userId);let n=(await t.query(`UPDATE analytics_activation_jobs j
+        SET status='pending', next_attempt_at=now(), lease_until=NULL,
+            dead_lettered_at=NULL, last_error_code=NULL, response_category=NULL
+       FROM analytics_activation_destinations d
+      WHERE j.id=$1 AND d.id=j.destination_id AND d.site_id=$2
+        AND d.status='active' AND d.automatic_delivery_enabled=true
+        AND d.readiness IN ('verified','live','degraded')
+        AND j.status IN ('failed','expired')
+      RETURNING j.id, j.status, j.attempts, j.next_attempt_at`,[e.jobId,e.siteId])).rows[0];if(!n)throw new m("analytics_activation_retry_conflict","Only a failed delivery for an active verified destination can be retried.",409);return n}function vi(e){let t=e&&typeof e=="object"?e:{},i=Array.isArray(t.destinations)?t.destinations.filter(r=>!!(r&&typeof r=="object")):[],n=i.flatMap(r=>(Array.isArray(r.warnings)?r.warnings:[]).map(d=>{let _=d&&typeof d=="object"?d:{};return`${String(_.reason??"provider_warning").slice(0,200)}: ${String(_.count??0).slice(0,20)}`})).slice(0,50),s=i.some(r=>Array.isArray(r.errors)&&r.errors.length>0),a=i.some(r=>/pending|processing|received/i.test(String(r.status??"")));return{warnings:n,...s?{errorCategory:"activation_provider_diagnostic_rejected"}:{},pending:a}}async function Jn(e){let t=await Ie(e),i=oe(e.validatedConnection,t.platform);if(!i.supportsDiagnostics||!i.diagnosticsActionName||!t.connection_ref)throw new m("analytics_activation_diagnostics_unavailable","Diagnostics are not available for this activation provider.",409);if(t.connection_ref!==e.validatedConnection.id)throw new m("analytics_provider_action_unavailable","The selected connection cannot read diagnostics for this destination.",409);let s=(await l().query(`SELECT id, provider_request_id FROM analytics_activation_destination_tests
+      WHERE destination_id=$1 AND provider_request_id IS NOT NULL
+      ORDER BY created_at DESC LIMIT 1`,[t.id])).rows[0];if(!s)throw new m("analytics_activation_diagnostics_unavailable","No provider request is available for diagnostics.",409);let a=await e.runAction({connectionRef:t.connection_ref,actionName:i.diagnosticsActionName,idempotencyKey:`xray-diagnostics:${s.id}`,payload:{requestId:s.provider_request_id}}),r=vi(a);await l().query(`UPDATE analytics_activation_destination_tests
+        SET warnings=$2::jsonb, safe_error_category=$3,
+            next_diagnostic_at=CASE WHEN $4 THEN now()+interval '5 minutes' ELSE NULL END
+      WHERE id=$1`,[s.id,JSON.stringify(r.warnings),r.errorCategory??null,r.pending]);let o=t.readiness;return r.errorCategory&&["verified","live"].includes(t.readiness)&&(o=await rt({siteId:e.siteId,destinationId:t.id,expectedReadiness:[t.readiness],nextReadiness:"degraded",evidenceKind:"provider_diagnostic",evidenceId:s.id})),{testId:s.id,readiness:o,...r}}async function Qn(e){let t=l(),i=await t.query(`SELECT id,event_mapping FROM analytics_activation_destinations
+      WHERE site_id = $1 AND status = 'active' AND automatic_delivery_enabled=true
+        AND readiness IN ('verified','live')`,[e.siteId]),n=0;for(let s of i.rows){if(!Ae(s.event_mapping,e.conversionKind))continue;let a=await t.query(`INSERT INTO analytics_activation_jobs(id, destination_id, conversion_id, person_id, payload_ciphertext)
+       VALUES ($1,$2,$3,$4,$5) ON CONFLICT(destination_id, conversion_id) DO NOTHING`,[y(),s.id,e.conversionId,e.personId??null,e.payloadCiphertext]);n+=a.rowCount??0}return n}async function Zn(e){let t=y();return await l().query(`INSERT INTO analytics_form_delivery_jobs(id, submission_id, owner_user_id, payload_ciphertext, last_error_code)
+     VALUES ($1,$2,$3,$4,$5)`,[t,e.submissionId,e.ownerUserId,e.payloadCiphertext,e.errorCode??null]),t}async function es(e){let t=await l().connect(),i=y(),n=y(),s=e.crmEntityId??y(),a=e.occurredAt??new Date().toISOString();try{await t.query("BEGIN");let r=await t.query(`INSERT INTO analytics_form_submissions(
+         id,form_id,site_id,pixel_id,visitor_id,session_id,crm_person_ref,
+         crm_entity_id,bridge_run_id,idempotency_key,source,medium,campaign,
+         crm_delivery_status,click_ids,occurred_at
+       ) VALUES($1,$2,$3,$4,$5,$6,$7,$8::uuid,$9,$10,$11,$12,$13,'pending',$14::jsonb,$15)
+       ON CONFLICT(form_id,idempotency_key) WHERE idempotency_key IS NOT NULL DO NOTHING
+       RETURNING id,bridge_run_id,crm_entity_id::text`,[i,e.form.id,e.form.site_id,e.form.pixel_id,e.visitorId??null,e.sessionId??null,e.legacyCrmPersonRef??null,s,n,e.idempotencyKey,e.source?.slice(0,180)??null,e.medium?.slice(0,180)??null,e.campaign?.slice(0,240)??null,JSON.stringify(z(e.clickIds)),a]),o=!!r.rows[0],d=r.rows[0]??(await t.query(`SELECT id,bridge_run_id::text,crm_entity_id::text
+         FROM analytics_form_submissions
+        WHERE form_id=$1 AND idempotency_key=$2 FOR UPDATE`,[e.form.id,e.idempotencyKey])).rows[0];if(!d?.bridge_run_id||!d.crm_entity_id)throw new m("form_bridge_idempotency_conflict","The form idempotency receipt belongs to a legacy submission.",409);let _=y(),u=await t.query(`INSERT INTO analytics_conversions(
+         id,source_event_id,site_id,pixel_id,session_id,session_hmac,
+         conversion_kind,value_minor,currency,occurred_at
+       ) VALUES($1,$2,$3,$4,$5,$6,'form_submitted',0,'USD',$7)
+       ON CONFLICT(site_id,source_event_id) DO UPDATE SET source_event_id=EXCLUDED.source_event_id
+       RETURNING id`,[_,`form:${d.id}`,e.form.site_id,e.form.pixel_id,e.sessionId??null,e.sessionId?L("session_id",e.sessionId):null,a]);return await t.query(`INSERT INTO analytics_form_delivery_jobs(
+         id,submission_id,owner_user_id,payload_ciphertext,bridge_run_id,
+         crm_entity_id,idempotency_key
+       ) VALUES($1,$2,$3,$4,$5,$6::uuid,$7)
+       ON CONFLICT(submission_id) DO NOTHING`,[y(),d.id,e.ownerUserId,e.payloadCiphertext,d.bridge_run_id,d.crm_entity_id,e.idempotencyKey]),await t.query(`INSERT INTO analytics_form_bridge_receipts(
+         id,bridge_run_id,submission_id,system,status,opaque_entity_id
+       ) VALUES
+         ($1,$2,$3,'analytics','delivered',NULL),
+         ($4,$2,$3,'crm','pending',$5::uuid)
+       ON CONFLICT(bridge_run_id,system) DO NOTHING`,[y(),d.bridge_run_id,d.id,y(),d.crm_entity_id]),await t.query("COMMIT"),{submissionId:d.id,bridgeRunId:d.bridge_run_id,crmEntityId:d.crm_entity_id,conversionId:u.rows[0].id,created:o}}catch(r){throw await t.query("ROLLBACK"),r}finally{t.release()}}async function ts(){let t=await l().connect();try{await t.query("BEGIN");let i=await t.query("DELETE FROM analytics_restricted_data WHERE expires_at <= now()"),n=await t.query(`UPDATE analytics_webhook_receipts SET payload_ciphertext=NULL
+       WHERE payload_ciphertext IS NOT NULL AND payload_expires_at <= now()`),s=await t.query(`UPDATE analytics_crm_import_rows SET delivery_status='expired', lease_until=NULL,
+       last_error_code='retention_expired'
+       WHERE delivery_status='pending' AND expires_at <= now()`);return await t.query("COMMIT"),{restrictedDeleted:i.rowCount??0,webhookPayloadsCleared:n.rowCount??0,expiredImportRows:s.rowCount??0}}catch(i){throw await t.query("ROLLBACK"),i}finally{t.release()}}async function is(e=10){return(await l().query(`WITH due AS (
+       SELECT id FROM analytics_form_delivery_jobs
+        WHERE status = 'pending' AND next_attempt_at <= now() AND expires_at > now()
+        ORDER BY next_attempt_at, created_at
+        FOR UPDATE SKIP LOCKED LIMIT $1
+     )
+     UPDATE analytics_form_delivery_jobs j
+        SET attempts = j.attempts + 1,
+            next_attempt_at = now() + interval '5 minutes'
+       FROM due WHERE j.id = due.id
+     RETURNING j.id, j.submission_id, j.owner_user_id, j.payload_ciphertext, j.attempts,
+       j.bridge_run_id::text,j.crm_entity_id::text,j.idempotency_key`,[Math.min(Math.max(e,1),50)])).rows.map(i=>({id:i.id,submissionId:i.submission_id,ownerUserId:Number(i.owner_user_id),payloadCiphertext:i.payload_ciphertext,attempts:i.attempts,bridgeRunId:i.bridge_run_id,crmEntityId:i.crm_entity_id,idempotencyKey:i.idempotency_key}))}async function ns(e,t){await Oi({jobId:e,submissionId:t})}async function Oi(e){let i=await l().connect();try{await i.query("BEGIN"),await i.query("UPDATE analytics_form_delivery_jobs SET status='delivered', delivered_at=now(), last_error_code=NULL WHERE id=$1",[e.jobId]),await i.query(`UPDATE analytics_form_submissions SET crm_delivery_status='delivered',
+         crm_entity_id=COALESCE(crm_entity_id,$2::uuid) WHERE id=$1`,[e.submissionId,e.crmEntityId??null]),await i.query(`UPDATE analytics_form_bridge_receipts receipt
+          SET status='delivered',opaque_entity_id=COALESCE(opaque_entity_id,$3::uuid),
+              safe_error_code=NULL,updated_at=now()
+         FROM analytics_form_delivery_jobs job
+        WHERE job.id=$1 AND receipt.bridge_run_id=job.bridge_run_id
+          AND receipt.submission_id=$2 AND receipt.system='crm'`,[e.jobId,e.submissionId,e.crmEntityId??null]),await i.query("COMMIT")}catch(n){throw await i.query("ROLLBACK"),n}finally{i.release()}}async function ss(e,t,i){let n=t>=8,s=Math.min(5*2**Math.max(0,t-1),360),a=await l().connect();try{await a.query("BEGIN");let o=(await a.query(`UPDATE analytics_form_delivery_jobs
+          SET status = CASE WHEN expires_at <= now() THEN 'expired' WHEN $2 THEN 'failed' ELSE 'pending' END,
+              last_error_code = $3,
+              next_attempt_at = now() + ($4::text || ' minutes')::interval
+        WHERE id = $1
+        RETURNING bridge_run_id::text,submission_id::text,status`,[e,n,i.slice(0,80),String(s)])).rows[0];o?.bridge_run_id&&await a.query(`UPDATE analytics_form_bridge_receipts SET status=$3,
+           safe_error_code=$4,updated_at=now()
+         WHERE bridge_run_id=$1 AND submission_id=$2 AND system='crm'`,[o.bridge_run_id,o.submission_id,o.status,i.slice(0,80)]),await a.query("COMMIT")}catch(r){throw await a.query("ROLLBACK"),r}finally{a.release()}}async function as(e,t){if(!t)return!1;let i=null;try{i=new URL(t).hostname.toLowerCase()}catch{return!1}return!!(await l().query("SELECT 1 FROM analytics_pixel_domains WHERE pixel_id = $1 AND hostname = $2 AND state = 'approved'",[e,i])).rowCount}async function rs(e,t){let i=l(),n=await Qt(e,t),s=n.map(N=>N.last_event_at).filter(Boolean).sort().at(-1)??null,[a,r,o]=await Promise.all([i.query("SELECT max(occurred_at)::text AS last_conversion_at FROM analytics_conversions WHERE site_id = $1",[e]),i.query("SELECT max(refreshed_at)::text AS last_rollup_at FROM analytics_rollups_daily WHERE site_id = $1",[e]),i.query(`SELECT COALESCE(sum(accepted_count), 0)::int AS accepted,
+              COALESCE(sum(rejected_count), 0)::int AS rejected
+         FROM analytics_ingestion_receipts WHERE site_id = $1 AND created_at >= now() - interval '24 hours'`,[e])]),d=o.rows[0],_=d.accepted+d.rejected,u=_?d.rejected/_:0,c=!!(s&&Date.now()-Date.parse(s)>2880*60*1e3),E=n.some(N=>N.domains.some(A=>A.state==="observed_unverified"));return{status:n.length===0?"not_installed":E&&!s?"domain_mismatch":u>.25?"rejecting":c?"stale":s?"healthy":"waiting",pixels:n,lastEventAt:s,lastConversionAt:a.rows[0]?.last_conversion_at??null,lastRollupAt:r.rows[0]?.last_rollup_at??null,acceptedLast24Hours:d.accepted,rejectedLast24Hours:d.rejected,rejectionRate:u,checkedAt:new Date().toISOString()}}async function Si(e){let t=l(),i=y();await t.query("INSERT INTO analytics_rollup_runs(id, window_start, window_end, status) VALUES ($1, $2, $3, 'running')",[i,e.start,e.end]);let n=await t.connect();try{await n.query("BEGIN"),await n.query("DELETE FROM analytics_rollups_daily WHERE bucket >= $1::date AND bucket <= $2::date",[e.start,e.end]);let s=await n.query(`INSERT INTO analytics_rollups_daily(
+         site_id, pixel_id, hostname, bucket, source, medium, campaign,
+         pageviews, events, visitors, sessions, refreshed_at
+       )
+       SELECT site_id, pixel_id, hostname, occurred_at::date,
+              COALESCE(source, '(direct)'), COALESCE(medium, '(none)'), COALESCE(campaign, '(none)'),
+              count(*) FILTER (WHERE event_name = 'page_view')::int,
+              count(*)::int,
+              count(DISTINCT visitor_id)::int,
+              count(DISTINCT session_id)::int,
+              now()
+         FROM analytics_events
+        WHERE occurred_at >= $1::timestamptz AND occurred_at < $2::timestamptz
+        GROUP BY 1, 2, 3, 4, 5, 6, 7
+       ON CONFLICT (site_id, pixel_id, hostname, bucket, source, medium, campaign)
+       DO UPDATE SET
+         pageviews = EXCLUDED.pageviews,
+         events = EXCLUDED.events,
+         visitors = EXCLUDED.visitors,
+         sessions = EXCLUDED.sessions,
+         refreshed_at = EXCLUDED.refreshed_at`,[e.start,e.end]);await n.query("COMMIT");let a=s.rowCount??0;return await t.query("UPDATE analytics_rollup_runs SET status = 'complete', row_count = $2, completed_at = now() WHERE id = $1",[i,a]),{runId:i,rows:a}}catch(s){await n.query("ROLLBACK");let a=s?.code,r=s instanceof Error?s.message:String(s);throw console.error(JSON.stringify({event:"analytics_rollup_failed",runId:i,pgCode:a??null,message:r.slice(0,400)})),await t.query("UPDATE analytics_rollup_runs SET status = 'failed', completed_at = now(), error_code = $2 WHERE id = $1",[i,(a?`pg_${a}`:"rollup_failed").slice(0,60)]),s}finally{n.release()}}async function os(e=new Date){let i=await l().connect(),n=2026080501,s=!1;try{if(s=!!(await i.query("SELECT pg_try_advisory_lock($1) AS acquired",[n])).rows[0]?.acquired,!s)return{status:"already_running",rows:0};if((await i.query(`SELECT completed_at FROM analytics_rollup_runs
+       WHERE status = 'complete' AND completed_at > $1::timestamptz
+       ORDER BY completed_at DESC LIMIT 1`,[new Date(e.getTime()-55*6e4).toISOString()])).rows[0])return{status:"not_due",rows:0};let o=new Date(e),d=new Date(o.getTime()-4320*60*1e3);return{status:"complete",...await Si({start:d.toISOString(),end:o.toISOString()})}}finally{s&&await i.query("SELECT pg_advisory_unlock($1)",[n]).catch(()=>{}),i.release()}}function Je(e){let t=e==null?"":String(e),i=/^[=+\-@\t\r]/.test(t)?`'${t}`:t;return/[\n\r,\"]/.test(i)?`"${i.replaceAll('"','""')}"`:i}function Ci(e){let t=[...new Set(e.flatMap(i=>Object.keys(i)))];return t.length?[t.map(i=>Je(i)).join(","),...e.map(i=>t.map(n=>Je(i[n])).join(","))].join(`
+`):""}function ot(e){return e.split("_").map((t,i)=>i?t:t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function Ri(e){return e==null?"\u2014":String(e).replaceAll("|","\\|").replaceAll(`
+`," ")}function fi(e){let t=[...new Set(e.flatMap(i=>Object.keys(i)))];return t.length?[`| ${t.map(ot).join(" | ")} |`,`| ${t.map(()=>"---").join(" | ")} |`,...e.map(i=>`| ${t.map(n=>Ri(i[n])).join(" | ")} |`)]:["No rows matched this window and filter set."]}async function ds(e){let t=(await Jt(e.userId)).find(u=>u.id===e.siteId);if(!t)throw new m("analytics_site_not_found","Site not found.",404);let i=u=>{let c=u.format==="markdown"?"md":u.format;return{...u,mediaType:u.format==="csv"?"text/csv":u.format==="json"?"application/json":"text/markdown",filename:`${t.slug}-${u.report}.${c}`}};if(e.idempotencyKey){let c=(await l().query(`SELECT id, report, format, content FROM analytics_exports
+        WHERE requested_by_user_id = $1 AND idempotency_key = $2`,[e.userId,e.idempotencyKey])).rows[0];if(c)return i(c)}let n=e.report==="overview"?await We(e.siteId,e.userId,e.filters):e.report==="acquisition"?await _i(e.siteId,e.userId,e.filters):e.report==="content"?await mi(e.siteId,e.userId,e.filters):await yi(e.siteId,e.userId,e.filters),s=e.report==="overview"?[n]:e.report==="acquisition"?n.channels:e.report==="content"?n.content:n.conversions,a;if(e.format==="json")a=JSON.stringify({version:1,site:{id:t.id,name:t.name},report:e.report,filters:e.filters,data:n},null,2);else if(e.format==="csv")a=Ci(s);else{let u=await We(e.siteId,e.userId,e.filters);a=[`# ${t.name} Site Analytics`,"",`Report: ${e.report}`,`Window: ${e.filters.start} to ${e.filters.end}`,`Fresh through: ${u.dataFreshThrough??"No accepted events"}`,"",`- Visitors: ${u.visitors}`,`- Sessions: ${u.sessions}`,`- Pageviews: ${u.pageviews}`,`- Verified conversions: ${u.conversions}`,`- Verified revenue: ${(u.revenueMinor/100).toFixed(2)}`,"",...e.report==="overview"?[]:[`## ${ot(e.report)} rows`,"",...fi(s),""],`Generated ${new Date().toISOString()} from the governed ${e.report} report contract.`].join(`
+`)}let r=y(),d=(await l().query(`INSERT INTO analytics_exports(id, site_id, requested_by_user_id, idempotency_key, report, format, filters, content)
+     VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8)
+     ON CONFLICT (requested_by_user_id, idempotency_key) WHERE idempotency_key IS NOT NULL DO NOTHING
+     RETURNING id, report, format, content`,[r,e.siteId,e.userId,e.idempotencyKey??null,e.report,e.format,JSON.stringify(e.filters),a])).rows[0];if(d)return i(d);let _=await l().query(`SELECT id, report, format, content FROM analytics_exports
+      WHERE requested_by_user_id = $1 AND idempotency_key = $2`,[e.userId,e.idempotencyKey]);if(!_.rows[0])throw new m("analytics_export_conflict","The export could not be created or replayed.",409);return i(_.rows[0])}export{De as a,Ue as b,bi as c,hi as d,xi as e,H as f,Mi as g,S as h,re as i,X as j,oe as k,Ft as l,qe as m,qt as n,me as o,Be as p,m as q,l as r,Vi as s,Ji as t,G as u,Qi as v,Zi as w,en as x,Jt as y,tn as z,nn as A,sn as B,an as C,rn as D,on as E,Qt as F,dn as G,cn as H,_n as I,un as J,En as K,ln as L,Ze as M,Zt as N,ei as O,Nn as P,ii as Q,ni as R,tt as S,V as T,oi as U,mn as V,yn as W,pn as X,Tn as Y,Ln as Z,An as _,We as $,In as aa,_i as ba,gn as ca,li as da,Ni as ea,mi as fa,vn as ga,yi as ha,On as ia,Sn as ja,Cn as ka,Rn as la,fn as ma,Dn as na,Un as oa,wn as pa,bn as qa,hn as ra,z as sa,L as ta,xn as ua,at as va,J as wa,Ii as xa,Fn as ya,$n as za,qn as Aa,Mn as Ba,kn as Ca,Hn as Da,Pn as Ea,jn as Fa,Kn as Ga,Xn as Ha,Bn as Ia,zn as Ja,Yn as Ka,rt as La,Wn as Ma,Gn as Na,Vn as Oa,Jn as Pa,Qn as Qa,Zn as Ra,es as Sa,ts as Ta,is as Ua,ns as Va,Oi as Wa,ss as Xa,as as Ya,rs as Za,Si as _a,os as $a,Je as ab,ds as bb};