mcp-scraper 0.95.1 → 0.96.0

package/dist/chunk-UIOSADPB.js

@@ -0,0 +1,1718 @@
+import{b as i,w as a}from"./chunk-NNOX3FYG.js";async function _(){let t=await i().connect();try{await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_schema_migrations (
+        version text PRIMARY KEY,
+        applied_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_sites (
+        id uuid PRIMARY KEY,
+        slug text NOT NULL,
+        name text NOT NULL,
+        owner_user_id bigint NOT NULL,
+        timezone text NOT NULL DEFAULT 'UTC',
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'disabled')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(owner_user_id, slug)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_grants (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        role text NOT NULL CHECK (role IN ('viewer', 'editor', 'owner')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, user_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_pixels (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        public_id text NOT NULL UNIQUE,
+        name text NOT NULL,
+        environment text NOT NULL DEFAULT 'production',
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'disabled')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        disabled_at timestamptz
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_pixel_domains (
+        id uuid PRIMARY KEY,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        state text NOT NULL DEFAULT 'observed_unverified'
+          CHECK (state IN ('observed_unverified', 'approved', 'rejected', 'revoked')),
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        accepted_count bigint NOT NULL DEFAULT 0,
+        rejected_count bigint NOT NULL DEFAULT 0,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(pixel_id, hostname)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_host_groups (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        auto_decorate boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(pixel_id, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_host_group_members (
+        group_id uuid NOT NULL REFERENCES analytics_host_groups(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(group_id, hostname)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_events (
+        id uuid PRIMARY KEY,
+        event_id text NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        visitor_id text,
+        session_id text,
+        visitor_hmac text,
+        session_hmac text,
+        event_name text NOT NULL,
+        occurred_at timestamptz NOT NULL,
+        received_at timestamptz NOT NULL DEFAULT now(),
+        path text NOT NULL DEFAULT '/',
+        canonical_url text,
+        title text,
+        referrer text,
+        source text,
+        medium text,
+        campaign text,
+        device_class text,
+        properties jsonb NOT NULL DEFAULT '{}'::jsonb,
+        bot_status text NOT NULL DEFAULT 'unknown',
+        UNIQUE(site_id, event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_conversions (
+        id uuid PRIMARY KEY,
+        source_event_id text NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        session_id text,
+        session_hmac text,
+        conversion_kind text NOT NULL,
+        value_minor bigint NOT NULL DEFAULT 0,
+        currency text NOT NULL DEFAULT 'USD',
+        occurred_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, source_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_ingestion_receipts (
+        id uuid PRIMARY KEY,
+        request_id text NOT NULL UNIQUE,
+        site_id uuid REFERENCES analytics_sites(id) ON DELETE SET NULL,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        hostname text,
+        accepted_count integer NOT NULL DEFAULT 0,
+        rejected_count integer NOT NULL DEFAULT 0,
+        reason_codes jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_rollups_daily (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        hostname text NOT NULL,
+        bucket date NOT NULL,
+        source text NOT NULL DEFAULT '(direct)',
+        medium text NOT NULL DEFAULT '(none)',
+        campaign text NOT NULL DEFAULT '(none)',
+        pageviews integer NOT NULL DEFAULT 0,
+        events integer NOT NULL DEFAULT 0,
+        visitors integer NOT NULL DEFAULT 0,
+        sessions integer NOT NULL DEFAULT 0,
+        refreshed_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, pixel_id, hostname, bucket, source, medium, campaign)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_rollup_runs (
+        id uuid PRIMARY KEY,
+        window_start timestamptz NOT NULL,
+        window_end timestamptz NOT NULL,
+        status text NOT NULL CHECK (status IN ('running', 'complete', 'failed')),
+        row_count integer NOT NULL DEFAULT 0,
+        started_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        error_code text
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_exports (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        requested_by_user_id bigint NOT NULL,
+        idempotency_key text,
+        report text NOT NULL,
+        format text NOT NULL CHECK (format IN ('csv', 'json', 'markdown')),
+        filters jsonb NOT NULL,
+        content text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_campaign_links (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        name text NOT NULL,
+        destination_url text NOT NULL,
+        short_code text NOT NULL UNIQUE,
+        utm_source text NOT NULL,
+        utm_medium text NOT NULL,
+        utm_campaign text NOT NULL,
+        utm_term text,
+        utm_content text,
+        ad_group text,
+        ad_name text,
+        creative_id text,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_campaign_clicks (
+        id uuid PRIMARY KEY,
+        link_id uuid NOT NULL REFERENCES analytics_campaign_links(id) ON DELETE CASCADE,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        referrer text
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_forms (
+        id uuid PRIMARY KEY,
+        public_id text NOT NULL UNIQUE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE RESTRICT,
+        name text NOT NULL,
+        slug text NOT NULL,
+        fields jsonb NOT NULL,
+        brand jsonb NOT NULL,
+        submit_label text NOT NULL DEFAULT 'Submit',
+        success_message text NOT NULL DEFAULT 'Thank you. Your response was received.',
+        redirect_url text,
+        consent_text text,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'published', 'archived')),
+        version integer NOT NULL DEFAULT 1,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, slug)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_form_submissions (
+        id uuid PRIMARY KEY,
+        form_id uuid NOT NULL REFERENCES analytics_forms(id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE RESTRICT,
+        visitor_id text,
+        session_id text,
+        crm_person_ref text,
+        source text,
+        medium text,
+        campaign text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS crm_delivery_status text NOT NULL DEFAULT 'pending'"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS crm_entity_id uuid"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS bridge_run_id uuid"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS idempotency_key text"),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_form_submissions_idempotency
+         ON analytics_form_submissions(form_id, idempotency_key)
+         WHERE idempotency_key IS NOT NULL`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_form_delivery_jobs (
+        id uuid PRIMARY KEY,
+        submission_id uuid NOT NULL UNIQUE REFERENCES analytics_form_submissions(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        payload_ciphertext text NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'delivered', 'failed', 'expired')),
+        attempts integer NOT NULL DEFAULT 0,
+        last_error_code text,
+        next_attempt_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL DEFAULT now() + interval '7 days',
+        created_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz
+      )
+    `),await t.query("ALTER TABLE analytics_form_delivery_jobs ADD COLUMN IF NOT EXISTS bridge_run_id uuid"),await t.query("ALTER TABLE analytics_form_delivery_jobs ADD COLUMN IF NOT EXISTS crm_entity_id uuid"),await t.query("ALTER TABLE analytics_form_delivery_jobs ADD COLUMN IF NOT EXISTS idempotency_key text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_form_bridge_receipts (
+        id uuid PRIMARY KEY,
+        bridge_run_id uuid NOT NULL,
+        submission_id uuid NOT NULL REFERENCES analytics_form_submissions(id) ON DELETE CASCADE,
+        system text NOT NULL CHECK (system IN ('analytics','crm')),
+        status text NOT NULL CHECK (status IN ('pending','delivered','failed','expired')),
+        opaque_entity_id uuid,
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(bridge_run_id, system)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_people (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        crm_person_ref text NOT NULL,
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, crm_person_ref)
+      )
+    `),await t.query("ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS crm_entity_id uuid"),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_crm_entity
+         ON analytics_people(site_id, crm_entity_id)
+         WHERE crm_entity_id IS NOT NULL`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_nodes (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        kind text NOT NULL CHECK (kind IN ('visitor_id','session_id','email','phone','customer_id','click_id','device_signal','network_signal')),
+        value_hmac text NOT NULL,
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, kind, value_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_edges (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        identity_node_id uuid NOT NULL REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        evidence_kind text NOT NULL,
+        confidence numeric(4,3) NOT NULL CHECK (confidence >= 0 AND confidence <= 1),
+        consent_scope text NOT NULL DEFAULT 'analytics',
+        first_seen_at timestamptz NOT NULL DEFAULT now(),
+        last_seen_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(person_id, identity_node_id, evidence_kind)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_assignments (
+        identity_node_id uuid PRIMARY KEY REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        crm_entity_id uuid,
+        evidence_kind text NOT NULL,
+        assigned_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK (crm_entity_id IS NULL OR crm_entity_id::text <> '')
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_assignment_conflicts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        identity_node_id uuid REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        active_person_id uuid REFERENCES analytics_people(id) ON DELETE CASCADE,
+        attempted_person_id uuid REFERENCES analytics_people(id) ON DELETE CASCADE,
+        active_crm_entity_id uuid,
+        attempted_crm_entity_id uuid,
+        evidence_kind text NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','resolved','dismissed')),
+        observed_at timestamptz NOT NULL DEFAULT now(),
+        resolved_at timestamptz,
+        CONSTRAINT analytics_identity_assignment_conflicts_pending_identity
+          CHECK (status <> 'pending' OR (
+            identity_node_id IS NOT NULL AND active_person_id IS NOT NULL
+            AND attempted_person_id IS NOT NULL AND active_person_id <> attempted_person_id
+          ))
+      )
+    `),await t.query("ALTER TABLE analytics_identity_assignment_conflicts ALTER COLUMN identity_node_id DROP NOT NULL"),await t.query("ALTER TABLE analytics_identity_assignment_conflicts ALTER COLUMN active_person_id DROP NOT NULL"),await t.query("ALTER TABLE analytics_identity_assignment_conflicts ALTER COLUMN attempted_person_id DROP NOT NULL"),await t.query(`ALTER TABLE analytics_identity_assignment_conflicts
+         DROP CONSTRAINT IF EXISTS analytics_identity_assignment_conflicts_check`),await t.query(`
+      DO $$ BEGIN
+        IF NOT EXISTS (
+          SELECT 1 FROM pg_constraint
+           WHERE conrelid='analytics_identity_assignment_conflicts'::regclass
+             AND conname='analytics_identity_assignment_conflicts_pending_identity'
+        ) THEN
+          ALTER TABLE analytics_identity_assignment_conflicts
+            ADD CONSTRAINT analytics_identity_assignment_conflicts_pending_identity
+            CHECK (status <> 'pending' OR (
+              identity_node_id IS NOT NULL AND active_person_id IS NOT NULL
+              AND attempted_person_id IS NOT NULL AND active_person_id <> attempted_person_id
+            ));
+        END IF;
+      END $$
+    `),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_identity_assignment_conflicts_pending
+         ON analytics_identity_assignment_conflicts(identity_node_id, active_person_id, attempted_person_id)
+         WHERE status='pending'`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_linker_tokens (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid NOT NULL REFERENCES analytics_pixels(id) ON DELETE CASCADE,
+        host_group_id uuid NOT NULL REFERENCES analytics_host_groups(id) ON DELETE CASCADE,
+        identity_node_id uuid NOT NULL REFERENCES analytics_identity_nodes(id) ON DELETE CASCADE,
+        source_hostname text NOT NULL,
+        audience_hostname text NOT NULL,
+        expires_at timestamptz NOT NULL,
+        consumed_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS click_ids jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS visitor_hmac text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS session_hmac text"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS session_hmac text"),await a(t),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS click_ids jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_form_submissions ADD COLUMN IF NOT EXISTS person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS channel_family text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS platform text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS campaign_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS ad_set_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS ad_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS creative_id text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS placement text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS utm_term text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS utm_content text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS engaged_ms integer"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS scroll_depth smallint"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_sites ADD COLUMN IF NOT EXISTS business_model text NOT NULL DEFAULT 'leadgen' CHECK (business_model IN ('leadgen','saas','ecommerce'))"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_ad_spend_daily (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        bucket date NOT NULL,
+        platform text NOT NULL,
+        campaign text NOT NULL DEFAULT '(all)',
+        spend_minor bigint NOT NULL CHECK (spend_minor >= 0),
+        currency text NOT NULL DEFAULT 'USD',
+        source_ref text,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, bucket, platform, campaign)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_imports (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        requested_by_user_id bigint NOT NULL,
+        source_system text NOT NULL,
+        filename text NOT NULL,
+        status text NOT NULL DEFAULT 'queued' CHECK (status IN ('queued','processing','complete','partial','failed')),
+        accepted_count integer NOT NULL DEFAULT 0,
+        rejected_count integer NOT NULL DEFAULT 0,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_import_rows (
+        id uuid PRIMARY KEY,
+        import_id uuid NOT NULL REFERENCES analytics_crm_imports(id) ON DELETE CASCADE,
+        crm_person_ref text NOT NULL,
+        payload_ciphertext text NOT NULL,
+        delivery_status text NOT NULL DEFAULT 'pending' CHECK (delivery_status IN ('pending','delivered','failed','expired')),
+        attempts integer NOT NULL DEFAULT 0,
+        last_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz,
+        UNIQUE(import_id, crm_person_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_destinations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        platform text NOT NULL CHECK (platform IN ('meta','google','tiktok','reddit')),
+        name text NOT NULL,
+        connection_ref text,
+        external_dataset_id text,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','paused','archived')),
+        automatic_delivery_enabled boolean NOT NULL DEFAULT false,
+        event_mapping jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_jobs (
+        id uuid PRIMARY KEY,
+        destination_id uuid NOT NULL REFERENCES analytics_activation_destinations(id) ON DELETE CASCADE,
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        payload_ciphertext text NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','delivered','failed','expired')),
+        attempts integer NOT NULL DEFAULT 0,
+        last_error_code text,
+        next_attempt_at timestamptz NOT NULL DEFAULT now(),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz,
+        UNIQUE(destination_id, conversion_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_thorbit_entitlements (
+        user_id bigint PRIMARY KEY,
+        thorbit_org_id text,
+        connection_source text NOT NULL DEFAULT 'trial' CHECK (connection_source IN ('trial','api_key','thorbit_session')),
+        eligible boolean NOT NULL DEFAULT false,
+        reason text NOT NULL,
+        plan_id text,
+        subscription_status text,
+        monthly_recurring_revenue_cents integer NOT NULL DEFAULT 0,
+        minimum_monthly_recurring_revenue_cents integer NOT NULL DEFAULT 0,
+        verified_at timestamptz NOT NULL,
+        refresh_after timestamptz NOT NULL,
+        access_expires_at timestamptz NOT NULL,
+        trial_started_at timestamptz NOT NULL DEFAULT now(),
+        trial_ends_at timestamptz NOT NULL DEFAULT (now() + interval '30 days'),
+        last_refresh_error text,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_thorbit_entitlements ALTER COLUMN thorbit_org_id DROP NOT NULL"),await t.query("ALTER TABLE analytics_thorbit_entitlements ADD COLUMN IF NOT EXISTS trial_started_at timestamptz NOT NULL DEFAULT now()"),await t.query("ALTER TABLE analytics_thorbit_entitlements ADD COLUMN IF NOT EXISTS trial_ends_at timestamptz NOT NULL DEFAULT (now() + interval '30 days')"),await t.query("ALTER TABLE analytics_thorbit_entitlements DROP CONSTRAINT IF EXISTS analytics_thorbit_entitlements_connection_source_check"),await t.query("ALTER TABLE analytics_thorbit_entitlements ADD CONSTRAINT analytics_thorbit_entitlements_connection_source_check CHECK (connection_source IN ('trial','api_key','thorbit_session'))"),await t.query("ALTER TABLE analytics_thorbit_entitlements ALTER COLUMN minimum_monthly_recurring_revenue_cents SET DEFAULT 0"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_thorbit_connect_states (
+        state_hash text PRIMARY KEY,
+        user_id bigint NOT NULL,
+        expires_at timestamptz NOT NULL,
+        consumed_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_exports ADD COLUMN IF NOT EXISTS idempotency_key text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS country_code text"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS region_code text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_sessions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        visitor_hmac text NOT NULL,
+        session_hmac text NOT NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        started_at timestamptz NOT NULL,
+        last_active_at timestamptz NOT NULL,
+        ended_at timestamptz,
+        duration_ms bigint NOT NULL DEFAULT 0 CHECK (duration_ms >= 0),
+        landing_path text,
+        exit_path text,
+        pageview_count integer NOT NULL DEFAULT 0,
+        event_count integer NOT NULL DEFAULT 0,
+        first_touch_id uuid,
+        last_touch_id uuid,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, session_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_attribution_touches (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        session_id uuid REFERENCES analytics_sessions(id) ON DELETE SET NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        visitor_hmac text,
+        occurred_at timestamptz NOT NULL,
+        source text,
+        medium text,
+        campaign text,
+        referrer text,
+        click_ids jsonb NOT NULL DEFAULT '{}'::jsonb,
+        landing_path text,
+        touch_hash text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, touch_hash)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_connections (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        name text NOT NULL,
+        source_account_ref text NOT NULL,
+        service_connection_ref text,
+        secret_ciphertext text,
+        config jsonb NOT NULL DEFAULT '{}'::jsonb,
+        readiness text NOT NULL DEFAULT 'configured_unverified'
+          CHECK (readiness IN ('not_configured','configured_unverified','verified','live','degraded','disabled')),
+        last_verified_at timestamptz,
+        last_event_at timestamptz,
+        last_reconciled_at timestamptz,
+        last_error_code text,
+        verification_evidence text CHECK (verification_evidence IN ('synthetic','provider')),
+        last_verified_receipt_id uuid,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, provider, source_account_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_webhook_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        source_event_id text NOT NULL,
+        signature_status text NOT NULL CHECK (signature_status IN ('verified','invalid','not_supported')),
+        normalization_status text NOT NULL DEFAULT 'pending'
+          CHECK (normalization_status IN ('pending','accepted','rejected','replayed')),
+        payload_ciphertext text,
+        payload_expires_at timestamptz,
+        error_code text,
+        received_at timestamptz NOT NULL DEFAULT now(),
+        normalized_at timestamptz,
+        UNIQUE(site_id, provider, source_account_ref, source_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_external_events (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        receipt_id uuid REFERENCES analytics_webhook_receipts(id) ON DELETE SET NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        source text NOT NULL,
+        source_account_ref text NOT NULL,
+        source_event_id text NOT NULL,
+        event_kind text NOT NULL CHECK (event_kind IN ('form','call','crm','transaction','custom_server','conversion','delivery')),
+        event_name text NOT NULL,
+        occurred_at timestamptz NOT NULL,
+        visitor_hmac text,
+        session_hmac text,
+        call_id text,
+        deal_id text,
+        order_id text,
+        value_minor bigint,
+        currency text,
+        click_ids jsonb NOT NULL DEFAULT '{}'::jsonb,
+        properties jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, source, source_account_ref, source_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_reconciliation_cursors (
+        connection_id uuid PRIMARY KEY REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        cursor jsonb,
+        health text NOT NULL DEFAULT 'webhook_only'
+          CHECK (health IN ('webhook_only','reconciled','degraded')),
+        records_replayed bigint NOT NULL DEFAULT 0,
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_source_event_id text,
+        last_error_code text,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_reconciliation_jobs (
+        id uuid PRIMARY KEY,
+        connection_id uuid NOT NULL UNIQUE REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','leased')),
+        attempts integer NOT NULL DEFAULT 0,
+        next_attempt_at timestamptz NOT NULL DEFAULT now(),
+        lease_until timestamptz,
+        last_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        event_name text NOT NULL,
+        trigger_kind text NOT NULL CHECK (trigger_kind IN ('page','click','form','semantic','custom_server','call','crm_stage','transaction')),
+        definition jsonb NOT NULL,
+        version integer NOT NULL DEFAULT 1,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name)
+      )
+    `),await t.query(`
+      DO $$
+      BEGIN
+        IF EXISTS (
+          SELECT 1
+            FROM pg_constraint
+           WHERE conrelid = 'analytics_event_definitions'::regclass
+             AND conname = 'analytics_event_definitions_trigger_kind_check'
+             AND pg_get_constraintdef(oid) NOT LIKE '%semantic%'
+        ) THEN
+          ALTER TABLE analytics_event_definitions
+            DROP CONSTRAINT analytics_event_definitions_trigger_kind_check;
+          ALTER TABLE analytics_event_definitions
+            ADD CONSTRAINT analytics_event_definitions_trigger_kind_check
+            CHECK (trigger_kind IN ('page','click','form','semantic','custom_server','call','crm_stage','transaction'));
+        END IF;
+      END $$
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_conversion_rules (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        conversion_kind text NOT NULL,
+        condition jsonb NOT NULL,
+        default_value_minor bigint,
+        default_currency text NOT NULL DEFAULT 'USD',
+        version integer NOT NULL DEFAULT 1,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_restricted_data (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE CASCADE,
+        purpose text NOT NULL,
+        subject_ref text NOT NULL,
+        payload_ciphertext text NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, purpose, subject_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_tombstones (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid,
+        kind text NOT NULL,
+        value_hmac text NOT NULL,
+        reason text NOT NULL CHECK (reason IN ('subject_deletion')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id,kind,value_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_profile_access_audits (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid,
+        actor_user_id bigint NOT NULL,
+        subject_ref_hmac text NOT NULL,
+        purpose text NOT NULL CHECK (purpose IN ('journey_identity_display')),
+        result text NOT NULL CHECK (result IN ('returned_masked','not_found','unavailable','rate_limited')),
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_identity_profile_access_rate ON analytics_identity_profile_access_audits(site_id,actor_user_id,created_at DESC)"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS readiness text NOT NULL DEFAULT 'configured_unverified' CHECK (readiness IN ('not_configured','configured_unverified','verified','live','degraded','disabled'))"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS last_tested_at timestamptz"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS last_receipt_id text"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS provider_config jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS mapping_version integer NOT NULL DEFAULT 1"),await t.query("ALTER TABLE analytics_activation_destinations ADD COLUMN IF NOT EXISTS automatic_delivery_enabled boolean NOT NULL DEFAULT false"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS lease_until timestamptz"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS mapping_version integer NOT NULL DEFAULT 1"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS external_receipt_id text"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS response_code integer"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS response_category text"),await t.query("ALTER TABLE analytics_activation_jobs ADD COLUMN IF NOT EXISTS dead_lettered_at timestamptz"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_destination_tests (
+        id uuid PRIMARY KEY,
+        destination_id uuid NOT NULL REFERENCES analytics_activation_destinations(id) ON DELETE CASCADE,
+        mapping_version integer NOT NULL,
+        provider_request_id text,
+        provider_event_id text,
+        warnings jsonb NOT NULL DEFAULT '[]'::jsonb,
+        safe_error_category text,
+        request_started_at timestamptz NOT NULL DEFAULT now(),
+        response_received_at timestamptz,
+        next_diagnostic_at timestamptz,
+        actor text NOT NULL,
+        accepted boolean NOT NULL DEFAULT false,
+        validation_only boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_activation_delivery_attempts (
+        id uuid PRIMARY KEY,
+        job_id uuid NOT NULL REFERENCES analytics_activation_jobs(id) ON DELETE CASCADE,
+        destination_id uuid NOT NULL REFERENCES analytics_activation_destinations(id) ON DELETE CASCADE,
+        mapping_version integer NOT NULL,
+        attempt_number integer NOT NULL,
+        provider_request_id text,
+        provider_event_id text,
+        warnings jsonb NOT NULL DEFAULT '[]'::jsonb,
+        safe_error_category text,
+        request_started_at timestamptz NOT NULL DEFAULT now(),
+        response_received_at timestamptz,
+        next_diagnostic_at timestamptz,
+        actor text NOT NULL,
+        accepted boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(job_id, attempt_number)
+      )
+    `),await t.query("ALTER TABLE analytics_crm_import_rows ADD COLUMN IF NOT EXISTS next_attempt_at timestamptz NOT NULL DEFAULT now()"),await t.query("ALTER TABLE analytics_crm_import_rows ADD COLUMN IF NOT EXISTS lease_until timestamptz"),await t.query("ALTER TABLE analytics_crm_import_rows ADD COLUMN IF NOT EXISTS expires_at timestamptz NOT NULL DEFAULT (now() + interval '7 days')"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS rule_id uuid REFERENCES analytics_conversion_rules(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS rule_version integer"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS order_id text"),await t.query("ALTER TABLE analytics_connections ADD COLUMN IF NOT EXISTS verification_evidence text CHECK (verification_evidence IN ('synthetic','provider'))"),await t.query("ALTER TABLE analytics_connections ADD COLUMN IF NOT EXISTS last_verified_receipt_id uuid"),await t.query("ALTER TABLE analytics_sessions ADD COLUMN IF NOT EXISTS public_ref text"),await t.query("ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS public_ref text"),await t.query(`UPDATE analytics_people
+          SET public_ref = 'xrp_' || substr(md5(random()::text || clock_timestamp()::text || id::text || site_id::text), 1, 24)
+        WHERE public_ref IS NULL`),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS event_definition_id uuid REFERENCES analytics_event_definitions(id) ON DELETE SET NULL"),await t.query("ALTER TABLE analytics_events ADD COLUMN IF NOT EXISTS event_definition_version integer"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS value_source text NOT NULL DEFAULT 'default_zero' CHECK (value_source IN ('absent','default_zero','fixed','dynamic','conditional_override','provider','verified_revenue','restatement'))"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS value_provenance jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS touch_kind text NOT NULL DEFAULT 'click' CHECK (touch_kind IN ('click','view','direct','organic','referral','email','sms','call','other'))"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS platform text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS account_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS campaign_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS ad_set_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS ad_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS creative_id text"),await t.query("ALTER TABLE analytics_attribution_touches ADD COLUMN IF NOT EXISTS placement text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_onboarding_presentations (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        preferences jsonb NOT NULL DEFAULT '{}'::jsonb,
+        last_presented_step text,
+        dismissed_help jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, user_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_funnel_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        stages jsonb NOT NULL CHECK (jsonb_typeof(stages) = 'array'),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        is_default boolean NOT NULL DEFAULT false,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_saved_views (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        name text NOT NULL,
+        report_type text NOT NULL,
+        schema_version integer NOT NULL DEFAULT 1 CHECK (schema_version > 0),
+        settings jsonb NOT NULL DEFAULT '{}'::jsonb,
+        is_default boolean NOT NULL DEFAULT false,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, owner_user_id, report_type, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_product_milestones (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        user_id bigint NOT NULL,
+        milestone text NOT NULL,
+        evidence_kind text NOT NULL,
+        evidence_ref text,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        safe_metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+        UNIQUE(site_id, user_id, milestone)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_scheduled_occurrences (
+        id uuid PRIMARY KEY,
+        lane_key text NOT NULL,
+        scheduled_for timestamptz NOT NULL,
+        status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending','running','retrying','succeeded','dead_letter')),
+        attempt_count integer NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+        max_attempts integer NOT NULL DEFAULT 5 CHECK (max_attempts BETWEEN 1 AND 20),
+        next_attempt_at timestamptz NOT NULL,
+        lease_owner text,
+        lease_until timestamptz,
+        started_at timestamptz,
+        completed_at timestamptz,
+        dead_lettered_at timestamptz,
+        last_error_code text,
+        result_summary jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(lane_key, scheduled_for)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_purpose_policies (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        purpose text NOT NULL CHECK (purpose IN ('necessary','site_analytics','enhanced_matching','advertising_measurement')),
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        retention_days integer CHECK (retention_days IS NULL OR retention_days > 0),
+        enabled boolean NOT NULL DEFAULT true,
+        policy jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        retired_at timestamptz,
+        UNIQUE(site_id, purpose, policy_version, jurisdiction_profile)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_consent_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        pixel_id uuid REFERENCES analytics_pixels(id) ON DELETE SET NULL,
+        subject_ref text NOT NULL,
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        necessary boolean NOT NULL DEFAULT true CHECK (necessary),
+        site_analytics boolean NOT NULL DEFAULT false,
+        enhanced_matching boolean NOT NULL DEFAULT false,
+        advertising_measurement boolean NOT NULL DEFAULT false,
+        gpc boolean NOT NULL DEFAULT false,
+        action text NOT NULL CHECK (action IN ('accept_all','reject_all','save_choices','withdraw','gpc')),
+        source text NOT NULL CHECK (source IN ('gateway','api','gpc','system')),
+        presented_at timestamptz,
+        occurred_at timestamptz NOT NULL,
+        expires_at timestamptz,
+        supersedes_id uuid REFERENCES analytics_consent_receipts(id) ON DELETE SET NULL,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_consent_receipts ADD COLUMN IF NOT EXISTS presented_at timestamptz"),await t.query(`
+      DO $$
+      BEGIN
+        IF NOT EXISTS (
+          SELECT 1 FROM pg_constraint
+           WHERE conrelid = 'analytics_consent_receipts'::regclass
+             AND conname = 'analytics_consent_receipts_presentation_order_check'
+        ) THEN
+          ALTER TABLE analytics_consent_receipts
+            ADD CONSTRAINT analytics_consent_receipts_presentation_order_check
+            CHECK (presented_at IS NULL OR presented_at <= occurred_at);
+        END IF;
+      END $$
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_consent_current_state (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        subject_ref text NOT NULL,
+        latest_receipt_id uuid NOT NULL REFERENCES analytics_consent_receipts(id) ON DELETE CASCADE,
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        jurisdiction_profile text NOT NULL,
+        necessary boolean NOT NULL DEFAULT true CHECK (necessary),
+        site_analytics boolean NOT NULL DEFAULT false,
+        enhanced_matching boolean NOT NULL DEFAULT false,
+        advertising_measurement boolean NOT NULL DEFAULT false,
+        gpc boolean NOT NULL DEFAULT false,
+        effective_at timestamptz NOT NULL,
+        expires_at timestamptz,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(site_id, subject_ref)
+      )
+    `),await t.query("ALTER TABLE analytics_restricted_data ADD COLUMN IF NOT EXISTS consent_receipt_id uuid REFERENCES analytics_consent_receipts(id) ON DELETE CASCADE"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_namespaces (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','approved','disabled','archived')),
+        approved_hosts jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(approved_hosts) = 'array'),
+        approved_sources jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(approved_sources) = 'array'),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version),
+        UNIQUE(id, site_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_sources (
+        id uuid PRIMARY KEY,
+        namespace_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        source_kind text NOT NULL CHECK (source_kind IN ('pixel','host','form','crm','call','server','import')),
+        source_ref text NOT NULL,
+        status text NOT NULL DEFAULT 'approved' CHECK (status IN ('pending','approved','revoked')),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        revoked_at timestamptz,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(namespace_id, source_kind, source_ref)
+      )
+    `),await t.query("ALTER TABLE analytics_people ADD COLUMN IF NOT EXISTS namespace_id uuid"),await t.query("ALTER TABLE analytics_identity_nodes ADD COLUMN IF NOT EXISTS namespace_id uuid"),await t.query("ALTER TABLE analytics_identity_edges ADD COLUMN IF NOT EXISTS namespace_id uuid"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_site_ref ON analytics_people(id, site_id)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_identity_nodes_site_ref ON analytics_identity_nodes(id, site_id)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_identity_nodes_namespace_ref ON analytics_identity_nodes(id, site_id, namespace_id)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_namespace_ref ON analytics_people(id, site_id, namespace_id)"),await t.query(`
+      DO $$
+      BEGIN
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_people_namespace_site_fkey') THEN
+          ALTER TABLE analytics_people ADD CONSTRAINT analytics_people_namespace_site_fkey
+            FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id)
+            ON DELETE RESTRICT NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_nodes_namespace_site_fkey') THEN
+          ALTER TABLE analytics_identity_nodes ADD CONSTRAINT analytics_identity_nodes_namespace_site_fkey
+            FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id)
+            ON DELETE RESTRICT NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_person_site_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_person_site_fkey
+            FOREIGN KEY(person_id, site_id) REFERENCES analytics_people(id, site_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_node_site_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_node_site_fkey
+            FOREIGN KEY(identity_node_id, site_id) REFERENCES analytics_identity_nodes(id, site_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_namespace_site_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_namespace_site_fkey
+            FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id)
+            ON DELETE RESTRICT NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_person_namespace_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_person_namespace_fkey
+            FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+        IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname='analytics_identity_edges_node_namespace_fkey') THEN
+          ALTER TABLE analytics_identity_edges ADD CONSTRAINT analytics_identity_edges_node_namespace_fkey
+            FOREIGN KEY(identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id)
+            ON DELETE CASCADE NOT VALID;
+        END IF;
+      END $$
+    `);for(let e of[["analytics_people","analytics_people_namespace_site_fkey"],["analytics_identity_nodes","analytics_identity_nodes_namespace_site_fkey"],["analytics_identity_edges","analytics_identity_edges_person_site_fkey"],["analytics_identity_edges","analytics_identity_edges_node_site_fkey"],["analytics_identity_edges","analytics_identity_edges_namespace_site_fkey"],["analytics_identity_edges","analytics_identity_edges_person_namespace_fkey"],["analytics_identity_edges","analytics_identity_edges_node_namespace_fkey"]])await t.query(`ALTER TABLE ${e[0]} VALIDATE CONSTRAINT ${e[1]}`);await t.query("ALTER TABLE analytics_people DROP CONSTRAINT IF EXISTS analytics_people_namespace_id_fkey"),await t.query("ALTER TABLE analytics_identity_nodes DROP CONSTRAINT IF EXISTS analytics_identity_nodes_namespace_id_fkey"),await t.query("ALTER TABLE analytics_identity_edges DROP CONSTRAINT IF EXISTS analytics_identity_edges_namespace_id_fkey"),await t.query("ALTER TABLE analytics_identity_edges DROP CONSTRAINT IF EXISTS analytics_identity_edges_person_id_fkey"),await t.query("ALTER TABLE analytics_identity_edges DROP CONSTRAINT IF EXISTS analytics_identity_edges_identity_node_id_fkey"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_associations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        left_identity_node_id uuid NOT NULL,
+        right_identity_node_id uuid NOT NULL,
+        confidence numeric(5,4) NOT NULL CHECK (confidence >= 0 AND confidence <= 1),
+        confidence_band text NOT NULL CHECK (confidence_band IN ('high','medium','low','ineligible')),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','expired','rejected','promoted','deleted')),
+        consent_receipt_id uuid NOT NULL REFERENCES analytics_consent_receipts(id) ON DELETE RESTRICT,
+        model_version text NOT NULL,
+        first_observed_at timestamptz NOT NULL,
+        last_observed_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL,
+        promoted_person_id uuid,
+        promoted_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK (left_identity_node_id <> right_identity_node_id),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(left_identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(right_identity_node_id, site_id, namespace_id) REFERENCES analytics_identity_nodes(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(promoted_person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE RESTRICT,
+        UNIQUE(namespace_id, left_identity_node_id, right_identity_node_id, model_version),
+        UNIQUE(id, namespace_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_evidence (
+        id uuid PRIMARY KEY,
+        association_id uuid NOT NULL,
+        namespace_id uuid NOT NULL,
+        feature_kind text NOT NULL CHECK (feature_kind IN ('device_bucket','browser_bucket','coarse_geo','network_bucket','temporal_pattern','journey_pattern')),
+        feature_hmac text NOT NULL,
+        contribution numeric(6,5) NOT NULL CHECK (contribution >= -1 AND contribution <= 1),
+        observed_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(association_id, feature_kind, feature_hmac)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_promotions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        association_id uuid NOT NULL,
+        person_id uuid NOT NULL,
+        evidence_kind text NOT NULL CHECK (evidence_kind IN ('verified_email','verified_phone','crm_contact','signed_linker','authenticated_user')),
+        evidence_ref_hmac text NOT NULL,
+        promoted_by text NOT NULL CHECK (promoted_by IN ('system','user')),
+        promoted_by_user_id bigint,
+        promoted_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(association_id, person_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_identity_promotion_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        canonical_person_id uuid NOT NULL,
+        canonical_person_ref_hmac text NOT NULL,
+        evidence_kind text NOT NULL,
+        evidence_ref_hmac text NOT NULL,
+        prior_person_ids uuid[] NOT NULL DEFAULT '{}',
+        prior_identity_node_ids uuid[] NOT NULL DEFAULT '{}',
+        candidate_association_ids uuid[] NOT NULL DEFAULT '{}',
+        affected_history_counts jsonb NOT NULL DEFAULT '{}'::jsonb CHECK (jsonb_typeof(affected_history_counts)='object'),
+        schema_version text NOT NULL DEFAULT 'xray.identity-promotion.v1',
+        idempotency_key text NOT NULL,
+        promoted_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_touches_site_ref ON analytics_attribution_touches(id, site_id)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_candidate_attribution_touches (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        association_id uuid NOT NULL,
+        touch_id uuid NOT NULL,
+        eligibility text NOT NULL DEFAULT 'overlay_only' CHECK (eligibility IN ('overlay_only','review','ineligible','expired')),
+        association_confidence numeric(5,4) NOT NULL CHECK (association_confidence >= 0 AND association_confidence <= 1),
+        model_version text NOT NULL,
+        linked_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(touch_id, site_id) REFERENCES analytics_attribution_touches(id, site_id) ON DELETE CASCADE,
+        UNIQUE(association_id, touch_id, model_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_value_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        event_definition_id uuid NOT NULL REFERENCES analytics_event_definitions(id) ON DELETE CASCADE,
+        version integer NOT NULL CHECK (version > 0),
+        base_mode text NOT NULL DEFAULT 'none' CHECK (base_mode IN ('none','fixed','dynamic')),
+        fixed_value_minor bigint,
+        currency text NOT NULL DEFAULT 'USD',
+        dynamic_source jsonb,
+        conditional_event_definition_id uuid REFERENCES analytics_event_definitions(id) ON DELETE SET NULL,
+        conditional_window_days integer CHECK (conditional_window_days IS NULL OR conditional_window_days > 0),
+        conditional_value_minor bigint,
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CHECK ((base_mode = 'fixed') = (fixed_value_minor IS NOT NULL)),
+        CHECK ((conditional_event_definition_id IS NULL) = (conditional_value_minor IS NULL)),
+        UNIQUE(site_id, event_definition_id, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_event_value_evaluations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        source_event_id uuid NOT NULL REFERENCES analytics_events(id) ON DELETE CASCADE,
+        definition_id uuid REFERENCES analytics_event_value_definitions(id) ON DELETE SET NULL,
+        definition_version integer,
+        value_minor bigint,
+        currency text,
+        value_source text NOT NULL CHECK (value_source IN ('absent','default_zero','fixed','dynamic','conditional_override','provider','verified_revenue','restatement')),
+        matched_event_id uuid REFERENCES analytics_events(id) ON DELETE SET NULL,
+        provenance jsonb NOT NULL DEFAULT '{}'::jsonb,
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, source_event_id, definition_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_data_class_policies (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        data_class text NOT NULL,
+        purpose text NOT NULL,
+        jurisdiction_profile text NOT NULL,
+        retention_days integer CHECK (retention_days IS NULL OR retention_days > 0),
+        storage_kind text NOT NULL CHECK (storage_kind IN ('ordinary','pseudonymous','encrypted_restricted','ephemeral')),
+        withdrawal_action text NOT NULL CHECK (withdrawal_action IN ('stop_future','expire','delete','retain_necessary')),
+        deletion_action text NOT NULL CHECK (deletion_action IN ('delete','anonymize','retain_legal')),
+        read_surface text NOT NULL,
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, data_class, jurisdiction_profile, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_privacy_audits (
+        id uuid PRIMARY KEY,
+        site_id uuid REFERENCES analytics_sites(id) ON DELETE SET NULL,
+        namespace_ref text,
+        subject_ref text,
+        action text NOT NULL CHECK (action IN ('export_requested','export_completed','deletion_requested','deletion_completed','withdrawal_applied','retention_expired','candidate_promoted')),
+        idempotency_key text NOT NULL,
+        actor_user_id bigint,
+        result_code text NOT NULL,
+        affected_counts jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query("ALTER TABLE analytics_privacy_audits ADD COLUMN IF NOT EXISTS request_fingerprint text"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provider_capabilities (
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL CHECK (contract_version > 0),
+        capabilities jsonb NOT NULL DEFAULT '{}'::jsonb,
+        documentation_refs jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        retired_at timestamptz,
+        PRIMARY KEY(provider, contract_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provisioning_plans (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL CHECK (contract_version > 0),
+        tenant_schema_version text,
+        plan jsonb NOT NULL,
+        status text NOT NULL DEFAULT 'preview' CHECK (status IN ('preview','approved','applying','verified','failed','reverted')),
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_provisioning_receipts (
+        id uuid PRIMARY KEY,
+        plan_id uuid NOT NULL REFERENCES analytics_crm_provisioning_plans(id) ON DELETE CASCADE,
+        operation text NOT NULL CHECK (operation IN ('describe','discover','create_field','test_write','revert_test','verify')),
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','reverted')),
+        external_object_ref text,
+        safe_error_code text,
+        warnings jsonb NOT NULL DEFAULT '[]'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_person_mappings (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL,
+        provider_person_ref text NOT NULL,
+        mapping_version integer NOT NULL DEFAULT 1 CHECK (mapping_version > 0),
+        last_synced_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(connection_id, person_id),
+        UNIQUE(connection_id, provider_person_ref)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_pipeline_mappings (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        funnel_definition_id uuid REFERENCES analytics_funnel_definitions(id) ON DELETE SET NULL,
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        mapping jsonb NOT NULL,
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(connection_id, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_state (
+        connection_id uuid PRIMARY KEY REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provisioning_plan_id uuid REFERENCES analytics_crm_provisioning_plans(id) ON DELETE SET NULL,
+        cursor jsonb,
+        direction text NOT NULL DEFAULT 'bidirectional' CHECK (direction IN ('inbound','outbound','bidirectional','webhook_only')),
+        status text NOT NULL DEFAULT 'idle' CHECK (status IN ('idle','pending','running','healthy','degraded','disabled')),
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_success_at timestamptz,
+        last_error_code text,
+        next_sync_at timestamptz,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_receipts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        direction text NOT NULL CHECK (direction IN ('inbound','outbound')),
+        operation text NOT NULL CHECK (operation IN ('person_upsert','activity_append','pipeline_update','schema_read','historical_pull')),
+        subject_ref text,
+        external_receipt_id text,
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','retrying')),
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS public_plan_id text"),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS schema_fingerprint text"),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS request_fingerprint text"),await t.query("ALTER TABLE analytics_crm_provisioning_plans ADD COLUMN IF NOT EXISTS approved_field_ids jsonb NOT NULL DEFAULT '[]'::jsonb"),await t.query("ALTER TABLE analytics_crm_provisioning_receipts ADD COLUMN IF NOT EXISTS public_receipt_id text"),await t.query("ALTER TABLE analytics_crm_provisioning_receipts ADD COLUMN IF NOT EXISTS receipt jsonb NOT NULL DEFAULT '{}'::jsonb"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_crm_plan_public_scope ON analytics_crm_provisioning_plans(site_id, public_plan_id) WHERE public_plan_id IS NOT NULL"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_crm_receipt_public_id ON analytics_crm_provisioning_receipts(public_receipt_id) WHERE public_receipt_id IS NOT NULL"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_connection_capabilities (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        contract_version integer NOT NULL DEFAULT 1 CHECK (contract_version > 0),
+        mode text NOT NULL CHECK (mode IN ('incremental_and_webhook','incremental_only','webhook_only','manual_backfill','unavailable')),
+        schema_fingerprint text,
+        allowed_operations jsonb NOT NULL DEFAULT '[]'::jsonb,
+        evidence jsonb NOT NULL,
+        verified_at timestamptz NOT NULL,
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(connection_id, contract_version),
+        UNIQUE(site_id, connection_id, provider, contract_version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_sync_runs (
+        sync_id text PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        mode text NOT NULL CHECK (mode IN ('initial','incremental','webhook')),
+        state text NOT NULL DEFAULT 'queued' CHECK (state IN ('queued','running','completed','degraded','cancelled','webhook_only')),
+        mapping jsonb NOT NULL,
+        mapping_version integer NOT NULL DEFAULT 1 CHECK (mapping_version > 0),
+        capability_evidence jsonb NOT NULL DEFAULT '{}'::jsonb,
+        cursor jsonb,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL,
+        last_started_at timestamptz,
+        last_success_at timestamptz,
+        next_run_at timestamptz,
+        interval_seconds integer CHECK (interval_seconds IS NULL OR (interval_seconds >= 900 AND interval_seconds <= 604800)),
+        imported integer NOT NULL DEFAULT 0 CHECK (imported >= 0),
+        deduplicated integer NOT NULL DEFAULT 0 CHECK (deduplicated >= 0),
+        rejected integer NOT NULL DEFAULT 0 CHECK (rejected >= 0),
+        last_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query("ALTER TABLE analytics_crm_sync_runs ADD COLUMN IF NOT EXISTS interval_seconds integer CHECK (interval_seconds IS NULL OR (interval_seconds >= 900 AND interval_seconds <= 604800))"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_sync_runs_due ON analytics_crm_sync_runs(state, next_run_at) WHERE next_run_at IS NOT NULL"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_policies (
+        policy_id text PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid NOT NULL REFERENCES analytics_connections(id) ON DELETE CASCADE,
+        provider text NOT NULL CHECK (provider IN ('hubspot','salesforce','highlevel','zoho','pipedrive','keap')),
+        kind text NOT NULL CHECK (kind IN ('person_summary','pipeline_event')),
+        enabled boolean NOT NULL DEFAULT false,
+        version integer NOT NULL CHECK (version > 0),
+        provisioning_receipt_id text NOT NULL,
+        schema_fingerprint text NOT NULL,
+        mapping_version integer CHECK (mapping_version > 0),
+        mapping jsonb,
+        allowed_fields jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(allowed_fields) = 'array'),
+        selected_events jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(selected_events) = 'array'),
+        purpose text NOT NULL CHECK (purpose IN ('necessary_form_fulfillment','site_analytics','advertising_measurement')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, connection_id, kind, version),
+        CHECK ((kind='person_summary' AND mapping_version IS NULL AND mapping IS NULL) OR
+               (kind='pipeline_event' AND mapping_version IS NOT NULL AND mapping IS NOT NULL))
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_jobs (
+        job_id text PRIMARY KEY,
+        policy_id text NOT NULL REFERENCES analytics_crm_outbound_policies(policy_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        kind text NOT NULL CHECK (kind IN ('person_summary','pipeline_event')),
+        state text NOT NULL DEFAULT 'pending' CHECK (state IN ('pending','running','retrying','delivered','dead_letter','cancelled')),
+        policy_version integer NOT NULL CHECK (policy_version > 0),
+        mapping_version integer CHECK (mapping_version > 0),
+        source_event_id text,
+        payload_ciphertext text NOT NULL,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL,
+        attempts integer NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+        max_attempts integer NOT NULL DEFAULT 5 CHECK (max_attempts BETWEEN 1 AND 20),
+        next_attempt_at timestamptz,
+        lease_expires_at timestamptz,
+        safe_error_code text,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        delivered_at timestamptz,
+        cancelled_at timestamptz,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_attempts (
+        id uuid PRIMARY KEY,
+        job_id text NOT NULL REFERENCES analytics_crm_outbound_jobs(job_id) ON DELETE CASCADE,
+        attempt integer NOT NULL CHECK (attempt > 0),
+        status text NOT NULL CHECK (status IN ('started','accepted','retrying','failed','cancelled')),
+        safe_error_code text,
+        started_at timestamptz NOT NULL DEFAULT now(),
+        completed_at timestamptz,
+        UNIQUE(job_id, attempt)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_receipts (
+        receipt_id text PRIMARY KEY,
+        job_id text NOT NULL REFERENCES analytics_crm_outbound_jobs(job_id) ON DELETE CASCADE,
+        status text NOT NULL CHECK (status IN ('accepted','rejected','failed','retrying')),
+        external_receipt_id text,
+        safe_error_code text,
+        occurred_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_crm_outbound_worker_state (
+        worker_key text PRIMARY KEY,
+        last_started_at timestamptz,
+        last_completed_at timestamptz,
+        last_success_at timestamptz,
+        last_error_code text,
+        last_claimed integer NOT NULL DEFAULT 0,
+        last_remaining_due integer NOT NULL DEFAULT 0,
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_jobs_due ON analytics_crm_outbound_jobs(state,next_attempt_at) WHERE state IN ('pending','retrying')"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_jobs_person ON analytics_crm_outbound_jobs(site_id,person_id,created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_outbound_receipts_job ON analytics_crm_outbound_receipts(job_id,occurred_at DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_score_definitions (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        name text NOT NULL,
+        score_kind text NOT NULL CHECK (score_kind IN ('fit','engagement','combined')),
+        rules jsonb NOT NULL CHECK (jsonb_typeof(rules) = 'array'),
+        thresholds jsonb NOT NULL DEFAULT '[]'::jsonb CHECK (jsonb_typeof(thresholds) = 'array'),
+        minimum_score integer NOT NULL DEFAULT 0,
+        maximum_score integer NOT NULL DEFAULT 100 CHECK (maximum_score >= minimum_score),
+        version integer NOT NULL DEFAULT 1 CHECK (version > 0),
+        status text NOT NULL DEFAULT 'active' CHECK (status IN ('active','disabled','archived')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, name, version)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_score_evaluations (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        definition_id uuid NOT NULL REFERENCES analytics_score_definitions(id) ON DELETE CASCADE,
+        definition_version integer NOT NULL CHECK (definition_version > 0),
+        person_id uuid,
+        candidate_association_id uuid,
+        score integer NOT NULL,
+        band text,
+        contributions jsonb NOT NULL DEFAULT '[]'::jsonb,
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(candidate_association_id, namespace_id) REFERENCES analytics_candidate_associations(id, namespace_id) ON DELETE CASCADE,
+        CHECK ((person_id IS NOT NULL)::integer + (candidate_association_id IS NOT NULL)::integer = 1)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_targets (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        name text NOT NULL,
+        target_event_definition_id uuid NOT NULL REFERENCES analytics_event_definitions(id) ON DELETE RESTRICT,
+        horizon_days integer NOT NULL CHECK (horizon_days > 0),
+        minimum_confirmed_people integer NOT NULL CHECK (minimum_confirmed_people > 0),
+        minimum_positive_outcomes integer NOT NULL CHECK (minimum_positive_outcomes > 0),
+        status text NOT NULL DEFAULT 'draft' CHECK (status IN ('draft','eligible','training','active','degraded','disabled')),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        UNIQUE(id, site_id, namespace_id),
+        UNIQUE(namespace_id, name)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_manifests (
+        id uuid PRIMARY KEY,
+        target_id uuid NOT NULL REFERENCES analytics_prediction_targets(id) ON DELETE CASCADE,
+        model_version text NOT NULL,
+        training_window_start timestamptz NOT NULL,
+        training_window_end timestamptz NOT NULL,
+        confirmed_people_count integer NOT NULL CHECK (confirmed_people_count >= 0),
+        positive_outcome_count integer NOT NULL CHECK (positive_outcome_count >= 0),
+        calibration jsonb NOT NULL DEFAULT '{}'::jsonb,
+        feature_manifest jsonb NOT NULL DEFAULT '{}'::jsonb,
+        status text NOT NULL CHECK (status IN ('ineligible','training','validated','active','degraded','retired')),
+        trained_at timestamptz,
+        activated_at timestamptz,
+        retired_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(target_id, model_version),
+        UNIQUE(id, target_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_prediction_results (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        namespace_id uuid NOT NULL,
+        target_id uuid NOT NULL,
+        manifest_id uuid NOT NULL,
+        person_id uuid NOT NULL,
+        probability numeric(7,6) NOT NULL CHECK (probability >= 0 AND probability <= 1),
+        expected_value_minor bigint,
+        currency text,
+        status text NOT NULL DEFAULT 'available' CHECK (status IN ('available','stale','superseded','deleted')),
+        evaluated_at timestamptz NOT NULL DEFAULT now(),
+        expires_at timestamptz NOT NULL,
+        FOREIGN KEY(namespace_id, site_id) REFERENCES analytics_identity_namespaces(id, site_id) ON DELETE CASCADE,
+        FOREIGN KEY(target_id, site_id, namespace_id) REFERENCES analytics_prediction_targets(id, site_id, namespace_id) ON DELETE CASCADE,
+        FOREIGN KEY(manifest_id, target_id) REFERENCES analytics_prediction_manifests(id, target_id) ON DELETE CASCADE,
+        FOREIGN KEY(person_id, site_id, namespace_id) REFERENCES analytics_people(id, site_id, namespace_id) ON DELETE CASCADE,
+        UNIQUE(manifest_id, person_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_ad_spend_facts (
+        id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        bucket date NOT NULL,
+        platform text NOT NULL,
+        account_id text,
+        campaign_id text,
+        campaign_name text,
+        ad_set_id text,
+        ad_set_name text,
+        ad_id text,
+        ad_name text,
+        creative_id text,
+        placement text,
+        spend_minor bigint NOT NULL CHECK (spend_minor >= 0),
+        currency text NOT NULL,
+        source_ref text NOT NULL,
+        source_updated_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, platform, bucket, source_ref)
+      )
+    `),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_exports_owner_idempotency
+      ON analytics_exports(requested_by_user_id, idempotency_key) WHERE idempotency_key IS NOT NULL`),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_time ON analytics_events(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_session_hmac_time ON analytics_events(site_id, session_hmac, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_visitor_hmac_time ON analytics_events(site_id, visitor_hmac, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_conversions_site_session_hmac_time ON analytics_conversions(site_id, session_hmac, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_pixel_time ON analytics_events(pixel_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_site_hostname_time ON analytics_events(site_id, hostname, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_acquisition ON analytics_events(site_id, source, medium, campaign, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_conversions_site_time ON analytics_conversions(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_sessions_site_visitor_time ON analytics_sessions(site_id, visitor_hmac, started_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_touches_site_person_time ON analytics_attribution_touches(site_id, person_id, occurred_at)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_external_events_site_time ON analytics_external_events(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_webhook_receipts_reconcile ON analytics_webhook_receipts(connection_id, received_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_reconciliation_jobs_due ON analytics_reconciliation_jobs(status, next_attempt_at, lease_until)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_jobs_due ON analytics_activation_jobs(status, next_attempt_at) WHERE status = 'pending'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_tests_destination_time ON analytics_activation_destination_tests(destination_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_attempts_destination_time ON analytics_activation_delivery_attempts(destination_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_activation_tests_diagnostics_due ON analytics_activation_destination_tests(next_diagnostic_at) WHERE next_diagnostic_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_restricted_data_expiry ON analytics_restricted_data(expires_at)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_linker_tokens_expiry ON analytics_linker_tokens(expires_at) WHERE consumed_at IS NULL"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_sessions_site_public_ref ON analytics_sessions(site_id, public_ref) WHERE public_ref IS NOT NULL"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_people_site_public_ref ON analytics_people(site_id, public_ref) WHERE public_ref IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_sessions_keyset ON analytics_sessions(site_id, started_at DESC, id DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_events_keyset ON analytics_events(site_id, occurred_at DESC, id DESC)"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_funnels_one_default ON analytics_funnel_definitions(site_id) WHERE is_default AND status = 'active'"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_saved_views_one_default ON analytics_saved_views(site_id, owner_user_id, report_type) WHERE is_default"),await t.query("CREATE INDEX IF NOT EXISTS analytics_product_milestones_site_time ON analytics_product_milestones(site_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scheduled_occurrences_due ON analytics_scheduled_occurrences(status,next_attempt_at,scheduled_for) WHERE status IN ('pending','retrying')"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scheduled_occurrences_lease ON analytics_scheduled_occurrences(lease_until) WHERE status='running'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_consent_receipts_subject_time ON analytics_consent_receipts(site_id, subject_ref, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_consent_receipts_expiry ON analytics_consent_receipts(expires_at) WHERE expires_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_consent_current_expiry ON analytics_consent_current_state(expires_at) WHERE expires_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_identity_sources_site ON analytics_identity_sources(site_id, namespace_id, status)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidates_active_expiry ON analytics_candidate_associations(namespace_id, expires_at) WHERE status = 'active'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidates_review ON analytics_candidate_associations(namespace_id, confidence_band, updated_at DESC) WHERE status = 'active'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_evidence_expiry ON analytics_candidate_evidence(expires_at)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_promotions_person_time ON analytics_candidate_promotions(site_id, person_id, promoted_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_identity_promotion_receipts_person_time ON analytics_identity_promotion_receipts(site_id, canonical_person_id, promoted_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_touches_overlay ON analytics_candidate_attribution_touches(site_id, namespace_id, linked_at DESC) WHERE eligibility = 'overlay_only'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_candidate_touches_expiry ON analytics_candidate_attribution_touches(expires_at) WHERE eligibility IN ('overlay_only','review')"),await t.query("CREATE INDEX IF NOT EXISTS analytics_value_evaluations_event ON analytics_event_value_evaluations(site_id, source_event_id)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_privacy_audits_site_time ON analytics_privacy_audits(site_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_provisioning_connection_time ON analytics_crm_provisioning_plans(connection_id, created_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_sync_due ON analytics_crm_sync_state(status, next_sync_at) WHERE next_sync_at IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_crm_sync_receipts_connection_time ON analytics_crm_sync_receipts(connection_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scores_person_time ON analytics_score_evaluations(site_id, person_id, evaluated_at DESC) WHERE person_id IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_scores_candidate_time ON analytics_score_evaluations(site_id, candidate_association_id, evaluated_at DESC) WHERE candidate_association_id IS NOT NULL"),await t.query("CREATE INDEX IF NOT EXISTS analytics_prediction_results_person_time ON analytics_prediction_results(site_id, person_id, evaluated_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_prediction_results_expiry ON analytics_prediction_results(expires_at) WHERE status = 'available'"),await t.query("CREATE INDEX IF NOT EXISTS analytics_touches_hierarchy ON analytics_attribution_touches(site_id, platform, account_id, campaign_id, ad_set_id, ad_id, occurred_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_spend_facts_hierarchy ON analytics_ad_spend_facts(site_id, platform, account_id, campaign_id, ad_set_id, ad_id, bucket DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_runtime_manifests (
+        manifest_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        digest text NOT NULL CHECK (digest ~ '^[a-f0-9]{64}$'),
+        manifest jsonb NOT NULL,
+        is_current boolean NOT NULL DEFAULT false,
+        created_by_user_id bigint NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, revision)
+      )
+    `),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_runtime_manifests_one_current ON analytics_runtime_manifests(site_id) WHERE is_current"),await t.query("CREATE INDEX IF NOT EXISTS analytics_runtime_manifests_site_created ON analytics_runtime_manifests(site_id, created_at DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_runtime_manifest_publications (
+        publication_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        manifest_id uuid NOT NULL REFERENCES analytics_runtime_manifests(manifest_id) ON DELETE CASCADE,
+        setup_id uuid,
+        setup_revision integer,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        manifest jsonb NOT NULL,
+        published_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_runtime_rule_health (
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        manifest_id uuid NOT NULL REFERENCES analytics_runtime_manifests(manifest_id) ON DELETE CASCADE,
+        rule_id uuid NOT NULL,
+        rule_version integer NOT NULL,
+        route_path text NOT NULL,
+        selector_quality text NOT NULL CHECK (selector_quality IN ('portable','stable','fragile')),
+        match_count integer NOT NULL CHECK (match_count BETWEEN 0 AND 100),
+        structural_fingerprint text NOT NULL CHECK (structural_fingerprint ~ '^[a-f0-9]{64}$'),
+        observed_at timestamptz NOT NULL,
+        PRIMARY KEY(manifest_id, rule_id, route_path)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_experiments (
+        experiment_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        current_revision integer NOT NULL CHECK (current_revision > 0),
+        state text NOT NULL CHECK (state IN ('draft','approved','canary','active','paused','killed','archived')),
+        created_by_user_id bigint NOT NULL,
+        create_idempotency_key text,
+        create_request_fingerprint text,
+        started_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `),await t.query("ALTER TABLE analytics_experiments ADD COLUMN IF NOT EXISTS create_idempotency_key text"),await t.query("ALTER TABLE analytics_experiments ADD COLUMN IF NOT EXISTS create_request_fingerprint text"),await t.query("ALTER TABLE analytics_experiments ADD COLUMN IF NOT EXISTS started_at timestamptz"),await t.query("CREATE UNIQUE INDEX IF NOT EXISTS analytics_experiments_site_create_idempotency ON analytics_experiments(site_id, create_idempotency_key) WHERE create_idempotency_key IS NOT NULL"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_experiment_revisions (
+        experiment_id uuid NOT NULL REFERENCES analytics_experiments(experiment_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        plan jsonb NOT NULL,
+        approved_by_user_id bigint,
+        approved_at timestamptz,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(experiment_id, revision)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_experiment_receipts (
+        receipt_id uuid PRIMARY KEY,
+        experiment_id uuid NOT NULL REFERENCES analytics_experiments(experiment_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL,
+        operation text NOT NULL,
+        idempotency_key text,
+        receipt jsonb NOT NULL,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(experiment_id, idempotency_key)
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_experiments_site_updated ON analytics_experiments(site_id, updated_at DESC)"),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_setups (
+        setup_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        revision integer NOT NULL CHECK (revision > 0),
+        status text NOT NULL,
+        start_url text NOT NULL,
+        state jsonb NOT NULL,
+        expires_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL,
+        updated_at timestamptz NOT NULL
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_setup_revisions (
+        setup_id uuid NOT NULL REFERENCES analytics_site_setups(setup_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        revision integer NOT NULL CHECK (revision > 0),
+        status text NOT NULL,
+        state jsonb NOT NULL,
+        created_at timestamptz NOT NULL,
+        PRIMARY KEY(setup_id, revision)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_site_setup_receipts (
+        receipt_id uuid PRIMARY KEY,
+        setup_id uuid NOT NULL REFERENCES analytics_site_setups(setup_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        owner_user_id bigint NOT NULL,
+        revision integer NOT NULL,
+        operation text NOT NULL,
+        status text NOT NULL,
+        receipt jsonb NOT NULL,
+        occurred_at timestamptz NOT NULL
+      )
+    `),await t.query("CREATE INDEX IF NOT EXISTS analytics_site_setups_owner_updated ON analytics_site_setups(owner_user_id, updated_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_site_setups_site_updated ON analytics_site_setups(site_id, updated_at DESC)"),await t.query("CREATE INDEX IF NOT EXISTS analytics_site_setup_receipts_setup_revision ON analytics_site_setup_receipts(setup_id, revision, occurred_at)"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_key text"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_id uuid"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS authority_version_id uuid"),await t.query("ALTER TABLE analytics_conversions ADD COLUMN IF NOT EXISTS restated_at timestamptz"),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_conversions_site_authority_key
+      ON analytics_conversions(site_id, authority_key) WHERE authority_key IS NOT NULL`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_authorities (
+        authority_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        connection_id uuid REFERENCES analytics_connections(id) ON DELETE SET NULL,
+        outcome_family text NOT NULL,
+        authority_role text NOT NULL CHECK (authority_role IN ('primary','observation')),
+        state text NOT NULL CHECK (state IN ('configured_unverified','verified','live','degraded','disabled','blocked')),
+        current_revision integer NOT NULL DEFAULT 1 CHECK (current_revision > 0),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        disabled_at timestamptz,
+        UNIQUE(site_id, provider, source_account_ref, outcome_family)
+      )
+    `),await t.query(`CREATE UNIQUE INDEX IF NOT EXISTS analytics_revenue_authorities_one_primary
+      ON analytics_revenue_authorities(site_id, outcome_family)
+      WHERE authority_role='primary' AND state <> 'disabled'`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_provider_customer_bindings (
+        binding_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        authority_id uuid NOT NULL REFERENCES analytics_revenue_authorities(authority_id) ON DELETE CASCADE,
+        provider_customer_ref_hmac text NOT NULL CHECK (provider_customer_ref_hmac ~ '^[a-f0-9]{64}$'),
+        person_id uuid NOT NULL REFERENCES analytics_people(id) ON DELETE CASCADE,
+        verification_status text NOT NULL CHECK (verification_status IN ('verified','revoked')),
+        evidence_ref text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        revoked_at timestamptz,
+        UNIQUE(authority_id, provider_customer_ref_hmac),
+        UNIQUE(authority_id, person_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_authoritative_outcomes (
+        outcome_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        authority_id uuid NOT NULL REFERENCES analytics_revenue_authorities(authority_id) ON DELETE RESTRICT,
+        authority_key text NOT NULL,
+        provider_object_kind text NOT NULL,
+        provider_object_ref_hmac text NOT NULL,
+        provider_customer_ref_hmac text,
+        outcome_kind text NOT NULL,
+        current_version integer NOT NULL DEFAULT 0 CHECK (current_version >= 0),
+        conversion_id uuid REFERENCES analytics_conversions(id) ON DELETE SET NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        first_observed_at timestamptz NOT NULL,
+        last_observed_at timestamptz NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, authority_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_authoritative_outcome_versions (
+        version_id uuid NOT NULL UNIQUE,
+        outcome_id uuid NOT NULL REFERENCES analytics_authoritative_outcomes(outcome_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        version integer NOT NULL CHECK (version > 0),
+        transport_event_id text NOT NULL,
+        status text NOT NULL,
+        value_minor bigint NOT NULL,
+        currency text NOT NULL CHECK (currency ~ '^[A-Z]{3}$'),
+        occurred_at timestamptz NOT NULL,
+        observed_at timestamptz NOT NULL,
+        provenance jsonb NOT NULL DEFAULT '{}'::jsonb,
+        receipt_ref text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(outcome_id, version),
+        UNIQUE(site_id, transport_event_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_setup_revisions (
+        setup_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        authority_id uuid REFERENCES analytics_revenue_authorities(authority_id) ON DELETE SET NULL,
+        state text NOT NULL,
+        plan jsonb NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(setup_id, revision)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_revenue_setup_receipts (
+        receipt_id uuid PRIMARY KEY,
+        setup_id uuid NOT NULL,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL,
+        operation text NOT NULL,
+        status text NOT NULL,
+        idempotency_key text NOT NULL,
+        request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[a-f0-9]{64}$'),
+        receipt jsonb NOT NULL,
+        occurred_at timestamptz NOT NULL DEFAULT now(),
+        FOREIGN KEY(setup_id, revision) REFERENCES analytics_revenue_setup_revisions(setup_id, revision) ON DELETE CASCADE,
+        UNIQUE(site_id, idempotency_key)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_surveys (
+        survey_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        current_revision integer NOT NULL DEFAULT 1 CHECK (current_revision > 0),
+        state text NOT NULL CHECK (state IN ('draft','published','paused','archived')),
+        name text NOT NULL,
+        question text NOT NULL,
+        selection_mode text NOT NULL CHECK (selection_mode IN ('single','multiple')),
+        eligible_outcome_families text[] NOT NULL,
+        exchange_ttl_seconds integer NOT NULL CHECK (exchange_ttl_seconds BETWEEN 60 AND 86400),
+        session_ttl_seconds integer NOT NULL CHECK (session_ttl_seconds BETWEEN 60 AND 86400),
+        approved_copy_id text,
+        create_idempotency_key text,
+        create_request_fingerprint text,
+        state_transition_receipts jsonb NOT NULL DEFAULT '{}'::jsonb CHECK (jsonb_typeof(state_transition_receipts)='object'),
+        created_by_user_id bigint NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        archived_at timestamptz,
+        UNIQUE(site_id, create_idempotency_key)
+      )
+    `),await t.query(`ALTER TABLE analytics_post_purchase_surveys
+      ADD COLUMN IF NOT EXISTS state_transition_receipts jsonb NOT NULL DEFAULT '{}'::jsonb`),await t.query(`ALTER TABLE analytics_post_purchase_surveys
+      DROP CONSTRAINT IF EXISTS analytics_post_purchase_surveys_state_transition_receipts_check`),await t.query(`ALTER TABLE analytics_post_purchase_surveys
+      ADD CONSTRAINT analytics_post_purchase_surveys_state_transition_receipts_check
+      CHECK (jsonb_typeof(state_transition_receipts)='object')`),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_options (
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        revision integer NOT NULL CHECK (revision > 0),
+        option_id text NOT NULL,
+        label text NOT NULL,
+        position integer NOT NULL CHECK (position >= 0),
+        active boolean NOT NULL DEFAULT true,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY(survey_id, revision, option_id),
+        UNIQUE(survey_id, revision, position)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_invites (
+        invite_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        invitation_token_digest text NOT NULL CHECK (invitation_token_digest ~ '^[a-f0-9]{64}$'),
+        purpose text NOT NULL DEFAULT 'customer_reported_measurement' CHECK (purpose='customer_reported_measurement'),
+        approved_copy_id text NOT NULL,
+        exchange_expires_at timestamptz NOT NULL,
+        exchanged_at timestamptz,
+        session_token_digest text CHECK (session_token_digest IS NULL OR session_token_digest ~ '^[a-f0-9]{64}$'),
+        session_expires_at timestamptz,
+        response_id uuid,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, invitation_token_digest),
+        UNIQUE(site_id, session_token_digest),
+        UNIQUE(survey_id, conversion_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_post_purchase_survey_responses (
+        response_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        invite_id uuid NOT NULL REFERENCES analytics_post_purchase_survey_invites(invite_id) ON DELETE RESTRICT,
+        body_fingerprint text NOT NULL CHECK (body_fingerprint ~ '^[a-f0-9]{64}$'),
+        submitted_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(survey_id, conversion_id),
+        UNIQUE(invite_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_reported_influences (
+        evidence_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        response_id uuid NOT NULL REFERENCES analytics_post_purchase_survey_responses(response_id) ON DELETE CASCADE,
+        conversion_id uuid NOT NULL REFERENCES analytics_conversions(id) ON DELETE CASCADE,
+        survey_id uuid NOT NULL REFERENCES analytics_post_purchase_surveys(survey_id) ON DELETE CASCADE,
+        survey_revision integer NOT NULL CHECK (survey_revision > 0),
+        option_id text NOT NULL,
+        option_label text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(response_id, option_id)
+      )
+    `),await t.query(`
+      CREATE TABLE IF NOT EXISTS analytics_view_evidence_receipts (
+        receipt_id uuid PRIMARY KEY,
+        site_id uuid NOT NULL REFERENCES analytics_sites(id) ON DELETE CASCADE,
+        provider text NOT NULL,
+        source_account_ref text NOT NULL,
+        provider_event_id text NOT NULL,
+        evidence_granularity text NOT NULL CHECK (evidence_granularity='event_level'),
+        verification_status text NOT NULL CHECK (verification_status='verified'),
+        subject_kind text NOT NULL CHECK (subject_kind IN ('person','session','visitor')),
+        subject_ref_hmac text NOT NULL,
+        person_id uuid REFERENCES analytics_people(id) ON DELETE SET NULL,
+        session_id uuid REFERENCES analytics_sessions(id) ON DELETE SET NULL,
+        provider_receipt_ref text NOT NULL,
+        occurred_at timestamptz NOT NULL,
+        retention_expires_at timestamptz NOT NULL,
+        touch_id uuid REFERENCES analytics_attribution_touches(id) ON DELETE SET NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE(site_id, provider, source_account_ref, provider_event_id)
+      )
+    `),await t.query("ALTER TABLE analytics_conversions DROP CONSTRAINT IF EXISTS analytics_conversions_authority_id_fkey"),await t.query(`ALTER TABLE analytics_conversions ADD CONSTRAINT analytics_conversions_authority_id_fkey
+      FOREIGN KEY(authority_id) REFERENCES analytics_revenue_authorities(authority_id) ON DELETE SET NULL`),await t.query("ALTER TABLE analytics_conversions DROP CONSTRAINT IF EXISTS analytics_conversions_authority_version_id_fkey"),await t.query(`ALTER TABLE analytics_conversions ADD CONSTRAINT analytics_conversions_authority_version_id_fkey
+      FOREIGN KEY(authority_version_id) REFERENCES analytics_authoritative_outcome_versions(version_id) ON DELETE SET NULL`),await t.query(`CREATE INDEX IF NOT EXISTS analytics_authoritative_outcomes_person
+      ON analytics_authoritative_outcomes(site_id, person_id, last_observed_at DESC)`),await t.query(`CREATE INDEX IF NOT EXISTS analytics_reported_influences_conversion
+      ON analytics_reported_influences(site_id, conversion_id, created_at)`),await t.query(`CREATE INDEX IF NOT EXISTS analytics_view_evidence_subject
+      ON analytics_view_evidence_receipts(site_id, subject_ref_hmac, occurred_at DESC)`),await t.query(`
+      INSERT INTO analytics_schema_migrations(version)
+      VALUES ('2026-08-05.1'), ('2026-08-05.2'), ('2026-08-05.3'), ('2026-08-05.4'), ('2026-08-05.5'), ('2026-08-05.6'), ('2026-08-05.7'), ('2026-08-05.8'), ('2026-08-05.9'), ('2026-08-05.10'), ('2026-08-05.11'), ('2026-08-05.12'), ('2026-08-05.13'), ('2026-08-05.14'), ('2026-08-26.1'), ('2026-08-26.2'), ('2026-08-26.3'), ('2026-08-26.4'), ('2026-08-27.1'), ('2026-08-28.1'), ('2026-08-28.2'), ('2026-08-28.3'), ('2026-08-28.4'), ('2026-08-31.1'), ('2026-09-01.1'), ('2026-09-01.2')
+      ON CONFLICT (version) DO NOTHING
+    `)}catch(e){throw e}finally{t.release()}}export{_ as a};