mcp-scraper 0.95.2 → 0.96.1

package/dist/chunk-7YOXSMHG.js

@@ -1,1565 +0,0 @@
-import{createClient as Ve}from"@libsql/client/http";import{createHash as v,randomBytes as j,randomUUID as N,scryptSync as Ne,timingSafeEqual as ze}from"crypto";import{z as p}from"zod";var k="2026-06-26 21:58:03";var Lt="Google returned a CAPTCHA. Run with --headless=false to re-warm the browser profile, then retry.",ve="This operation is temporarily unavailable. Please retry later.",ke=["request_aborted","captcha_exhausted","captcha_or_blocked","location_mismatch","proxy_tunnel_failed","proxy_unavailable","harvest_timeout","mcp_request_timeout","mcp_http_error","extraction_failed","concurrency_limit_exceeded","unauthorized","forbidden","invalid_request","rate_limited","upstream_rate_limited","insufficient_balance","service_unavailable","response_lost","vendor_unavailable","page_not_found","page_forbidden","page_rate_limited","page_server_error","page_http_error","bot_check_unresolved","page_too_large","page_unreachable","browser_session_interrupted","site_export_not_found","directory_job_not_found","site_export_format_unavailable","site_export_read_failed","site_export_image_not_found","image_url_invalid","image_url_not_https","image_host_unresolvable","image_host_blocked","image_redirect_invalid","image_source_unavailable","image_too_large","image_redirect_limit","image_base64_invalid","image_source_missing","image_source_ambiguous","image_source_type_invalid","image_artifact_not_found","image_page_too_large","page_image_not_found","page_image_candidates_unusable","image_format_unsupported","image_storage_unconfigured","featured_image_unhostable"],Xe=["request_aborted","captcha","location_mismatch","connection","timeout","extraction","concurrency_limit","unauthorized","forbidden","invalid_request","not_found","rate_limit","billing","service_unavailable"];function O(e){return e?JSON.stringify(e):null}function ae(e){if(e==null)return null;try{let t=typeof e=="string"?JSON.parse(e):e;if(!t||typeof t!="object"||Array.isArray(t))return null;let r=t;if(typeof r.error_code!="string"||!oe.has(r.error_code))return null;let n=Ge({errorCode:r.error_code,errorType:r.error_type,retryable:r.retryable,retryAfterSeconds:r.retry_after_seconds,chargeStatus:r.charge_status,details:r.details});if(typeof r.message=="string"){let s=_e(r.message).trim().slice(0,1e3);s&&!/https?:\/\//i.test(s)&&(n.message=s)}return n}catch{return null}}var oe=new Set(ke),Fe=new Set(Xe),Me=new Set(["active","limit","operation","upgrade_url","topup_url","upgrade_command","slots_per_pack","pack_price_usd","balance_credits","required_credits","retry_guidance","http_status"]),Pe=12,He=500;function W(e){return typeof e=="string"&&oe.has(e)?e:"service_unavailable"}function je(e){if(!e||typeof e!="object"||Array.isArray(e))return;let t={};for(let[r,n]of Object.entries(e)){if(Object.keys(t).length>=Pe)break;if(Me.has(r))if(typeof n=="string"){if((r==="upgrade_url"||r==="topup_url")&&!qe(n))continue;let s=_e(n).slice(0,He);s&&(t[r]=s)}else(typeof n=="number"&&Number.isFinite(n)||typeof n=="boolean"||n===null)&&(t[r]=n)}return Object.keys(t).length>0?t:void 0}function qe(e){if(e.startsWith("/")&&!e.startsWith("//"))return!0;try{let t=new URL(e);return t.protocol==="https:"&&(t.hostname==="mcpscraper.dev"||t.hostname.endsWith(".mcpscraper.dev"))}catch{return!1}}function We(e){let t=W(e);switch(t){case"captcha_exhausted":case"captcha_or_blocked":return"captcha";case"proxy_tunnel_failed":case"proxy_unavailable":case"response_lost":return"connection";case"harvest_timeout":case"mcp_request_timeout":return"timeout";case"concurrency_limit_exceeded":return"concurrency_limit";case"rate_limited":case"upstream_rate_limited":return"rate_limit";case"extraction_failed":case"page_not_found":case"page_forbidden":case"page_rate_limited":case"page_server_error":case"page_http_error":case"bot_check_unresolved":case"page_too_large":case"page_unreachable":case"browser_session_interrupted":case"site_export_not_found":case"site_export_format_unavailable":case"site_export_read_failed":case"site_export_image_not_found":return"extraction";case"image_url_invalid":case"image_url_not_https":case"image_host_unresolvable":case"image_host_blocked":case"image_redirect_invalid":case"image_source_unavailable":case"image_too_large":case"image_redirect_limit":case"image_base64_invalid":case"image_source_missing":case"image_source_ambiguous":case"image_source_type_invalid":case"image_artifact_not_found":case"image_page_too_large":case"page_image_not_found":case"page_image_candidates_unusable":case"image_format_unsupported":case"image_storage_unconfigured":case"featured_image_unhostable":return"invalid_request";case"insufficient_balance":return"billing";case"vendor_unavailable":case"mcp_http_error":return"service_unavailable";case"directory_job_not_found":return"not_found";default:return t}}function Be(e){switch(W(e)){case"request_aborted":return"The request was cancelled before it completed.";case"captcha_exhausted":case"captcha_or_blocked":return"The target site returned a verification challenge. Heavy traffic can temporarily increase these challenges; retry in a few minutes.";case"location_mismatch":return"The target site returned results for a different location. Please retry.";case"proxy_tunnel_failed":case"proxy_unavailable":return"The web request could not establish a working connection. Please retry later.";case"harvest_timeout":return"The request timed out before it completed. Please retry with a smaller request.";case"mcp_request_timeout":return"The MCP caller stopped waiting before a final response arrived. Durable work may still be running; continue with the returned Task or job handle instead of restarting it.";case"concurrency_limit_exceeded":return"The service is available, but this account has reached its parallel-operation limit. Wait for an active operation to finish or add capacity.";case"unauthorized":return"Authentication is required to perform this operation.";case"forbidden":return"This account does not have permission to perform this operation.";case"invalid_request":return"The request is invalid. Check the supplied inputs and try again.";case"rate_limited":return"This account is sending requests too quickly. Wait briefly and retry.";case"upstream_rate_limited":return"The connected provider is temporarily rate-limiting requests. Wait briefly and retry.";case"mcp_http_error":return"The API returned an unexpected HTTP response.";case"insufficient_balance":return"This account does not have enough Credits for the operation.";case"extraction_failed":return"The target could not be extracted. Check retryable before attempting it again.";case"directory_job_not_found":return"This directory job was not found for the current account.";case"response_lost":return"The connection was lost before the response arrived. The operation may have already completed and been billed on our side \u2014 check credits_info before retrying blind.";case"vendor_unavailable":return"MCP Scraper's internal browser services require MCP Scraper team attention. Servers or IPs are down until this is fixed \u2014 this is not caused by your request. Please retry in a few minutes.";case"page_not_found":return"The page could not be found. It may have been moved or deleted.";case"page_forbidden":return"The site refused the request.";case"page_rate_limited":return"The site is rate-limiting requests right now. Retrying after a short wait usually works.";case"page_server_error":return"The page's own server returned an error. This is on the target site's side, not something a retry here can fix.";case"page_http_error":return"The page returned an unexpected HTTP response.";case"bot_check_unresolved":return"This site has automated-traffic protection (a bot/CAPTCHA check) that could not be resolved in time. Some sites are simply not extractable this way.";case"page_too_large":return"The page is larger than we can safely process.";case"page_unreachable":return"The page did not respond in time, or the connection could not be completed.";case"browser_session_interrupted":return"The browser session closed before extraction completed. MCP Scraper will retry once with a fresh session; retry the request if this persists.";case"site_export_not_found":return"The site export or requested page was not found, expired, or does not belong to this account.";case"site_export_format_unavailable":return"That representation was not retained for this export page. Read the export manifest and request one of the formats marked available.";case"site_export_read_failed":return"The stored site export could not be read or did not pass its integrity check.";case"site_export_image_not_found":return"The requested site-export image was not found, expired, or does not belong to this account.";case"image_url_invalid":return"The image source is not a valid URL. Use a stable public HTTPS URL or inline image bytes.";case"image_url_not_https":return"Commons image sources must use a public HTTPS URL or inline image bytes.";case"image_host_unresolvable":return"The image host could not be resolved. Use a different stable public URL or inline image bytes.";case"image_host_blocked":return"The image source resolves to a network address Commons cannot fetch safely.";case"image_redirect_invalid":return"The image source redirected to an invalid or unsafe destination.";case"image_source_unavailable":return"The image source could not be fetched. Host a different stable public URL or provide inline image bytes.";case"image_too_large":return"The image exceeds the Commons image size limit.";case"image_redirect_limit":return"The image source exceeded the Commons redirect limit.";case"image_base64_invalid":return"The supplied inline image bytes are invalid.";case"image_source_missing":return"Provide exactly one of a public image or webpage URL, inline image bytes, or an owner-scoped image artifact.";case"image_source_ambiguous":return"Provide only one image source: sourceUrl, imageBase64, or artifactId.";case"image_source_type_invalid":return"Use sourceType only with inline image bytes or an owner-scoped image artifact.";case"image_artifact_not_found":return"The image artifact was not found, expired, or does not belong to this account.";case"image_page_too_large":return"The webpage is too large for bounded Commons image discovery.";case"page_image_not_found":return"The webpage did not expose a usable featured or content image.";case"page_image_candidates_unusable":return"The webpage exposed image candidates, but none returned supported public image bytes.";case"image_format_unsupported":return"Commons accepts JPEG, PNG, GIF, or WebP image bytes.";case"image_storage_unconfigured":return"Commons image storage is temporarily unavailable.";case"featured_image_unhostable":return"The required featured image could not be hosted for Commons publication.";default:return ve}}function Ge(e){let t=W(e.errorCode),r=typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?Math.max(1,Math.min(86400,Math.trunc(e.retryAfterSeconds))):void 0,n=e.chargeStatus==="not_charged"||e.chargeStatus==="refund_pending"||e.chargeStatus==="refunded"||e.chargeStatus==="charged"?e.chargeStatus:void 0,s=typeof e.errorType=="string"&&Fe.has(e.errorType)?e.errorType:void 0,a=je(e.details);return{error_code:t,error_type:s??We(t),message:Be(t),retryable:e.retryable===!0,...r?{retry_after_seconds:r}:{},...n?{charge_status:n}:{},...a?{details:a}:{}}}function _e(e){return e.replace((new RegExp("https?:\\/\\/[^\\s]*(?:\u0062\u0072\u0069\u0067\u0068\u0074\u0064\u0061\u0074\u0061|on\u006b\u0065\u0072\u006e\u0065\u006c|\u006b\u0065\u0072\u006e\u0065\u006c\\.sh)[^\\s]*", "gi")),"the service").replace(/bright\s*data/gi,"the service").replace((new RegExp("\u0062\u0072\u0069\u0067\u0068\u0074\u0064\u0061\u0074\u0061", "gi")),"the service").replace((new RegExp("\u006b\u0065\u0072\u006e\u0065\u006c\\.sh\\s+sessions?", "gi")),"sessions").replace((new RegExp("\u006b\u0065\u0072\u006e\u0065\u006c\\.sh\\s+session", "gi")),"this session").replace((new RegExp("\u006b\u0065\u0072\u006e\u0065\u006c\\.sh", "gi")),"the service").replace((new RegExp("\u006b\u0065\u0072\u006e\u0065\u006c\\s+sessions?", "gi")),"sessions").replace((new RegExp("\u006b\u0065\u0072\u006e\u0065\u006c\\s+session", "gi")),"this session").replace(/\b(?:sub|cus|sess|proxy)_[A-Za-z0-9_-]+\b/g,"[redacted]").replace((new RegExp("\\b(?:\u004b\u0045\u0052\u004e\u0045\u004c|\u0042\u0052\u0049\u0047\u0048\u0054\u0044\u0041\u0054\u0041|\u0042\u0052\u0049\u0047\u0048\u0054_\u0044\u0041\u0054\u0041)_[A-Z0-9_]*API_KEY\\b", "g")),"BROWSER_SERVICE_API_KEY").replace((new RegExp("\\b\u006b\u0065\u0072\u006e\u0065\u006c\\b", "gi")),"the service").replace(/  +/g," ").trim()}var ee=class extends Error{constructor(r){super(`CAPTCHA detected. ${r}`);this.instructions=r}instructions;name="CaptchaError"},te=class extends Error{constructor(r,n){super(r);this.cause=n}cause;name="ExtractionError"},re=class extends Error{constructor(r){super(`Google Maps search did not reach a complete result state (${r})`);this.pageState=r}pageState;name="MapsSearchIncompletePageError"},ne=class extends Error{name="RequestAbortedError";constructor(t="Request aborted before harvest completed"){super(t)}},se=class extends Error{name="PaaInteractionInterruptedError"},ie=class extends Error{name="LocationMismatchError";constructor(t="Google returned results for a different location than requested"){super(t)}};var I=["oauth_store_metadata","oauth_clients","oauth_client_redirect_uris","oauth_codes","oauth_code_exchanges","oauth_refresh_families","oauth_refresh_tokens","oauth_refresh_rotations","oauth_security_events","oauth_rate_limit_buckets"],x=["oauth_clients_inactivity_idx","oauth_clients_cleanup_idx","oauth_codes_expiry_idx","oauth_codes_client_idx","oauth_code_exchanges_replay_expiry_idx","oauth_refresh_families_lifecycle_idx","oauth_refresh_families_user_status_idx","oauth_refresh_families_client_idx","oauth_refresh_families_cleanup_idx","oauth_refresh_tokens_expiry_idx","oauth_refresh_rotations_replay_expiry_idx","oauth_security_events_retention_idx","oauth_rate_limit_buckets_expiry_idx"],ue={oauth_clients:"oauth_clients_legacy_raw",oauth_codes:"oauth_codes_legacy_raw",oauth_tokens:"oauth_tokens_legacy_raw"},L="strftime('%Y-%m-%dT%H:%M:%fZ','now')";async function y(e,t,r=!1){try{await e.execute(t)}catch(n){let s=n.code;if(!r||s!=="SQL_PARSE_ERROR")throw n}}var Ye=[`CREATE TABLE IF NOT EXISTS oauth_store_metadata (
-    id INTEGER PRIMARY KEY CHECK (id = 1),
-    store_id TEXT NOT NULL UNIQUE,
-    schema_version INTEGER NOT NULL CHECK (schema_version > 0),
-    authority_epoch INTEGER NOT NULL CHECK (authority_epoch > 0),
-    authority_state TEXT NOT NULL CHECK (authority_state IN ('ready','authoritative','retired')),
-    updated_at TEXT NOT NULL DEFAULT (${L})
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_clients (
-    client_id TEXT PRIMARY KEY,
-    client_name TEXT NOT NULL,
-    client_type TEXT NOT NULL CHECK (client_type = 'public'),
-    token_endpoint_auth_method TEXT NOT NULL CHECK (token_endpoint_auth_method = 'none'),
-    status TEXT NOT NULL CHECK (status IN ('active','disabled','expired')),
-    created_at TEXT NOT NULL DEFAULT (${L}),
-    last_used_at TEXT,
-    expires_at TEXT
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_client_redirect_uris (
-    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
-    redirect_uri TEXT NOT NULL,
-    redirect_kind TEXT NOT NULL CHECK (redirect_kind IN ('https','loopback','private_scheme')),
-    PRIMARY KEY (client_id, redirect_uri)
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_codes (
-    code_digest BLOB PRIMARY KEY,
-    lookup_key_id TEXT NOT NULL,
-    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE RESTRICT,
-    redirect_uri TEXT NOT NULL,
-    code_challenge TEXT NOT NULL,
-    challenge_method TEXT NOT NULL CHECK (challenge_method = 'S256'),
-    user_id TEXT NOT NULL,
-    scope TEXT NOT NULL,
-    resource TEXT,
-    issued_at TEXT NOT NULL DEFAULT (${L}),
-    expires_at TEXT NOT NULL
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_code_exchanges (
-    code_digest BLOB PRIMARY KEY,
-    request_fingerprint BLOB NOT NULL UNIQUE,
-    client_id TEXT NOT NULL,
-    family_id TEXT NOT NULL UNIQUE,
-    grant_scope TEXT NOT NULL,
-    grant_resource TEXT,
-    scope TEXT NOT NULL,
-    resource TEXT,
-    sealed_refresh BLOB NOT NULL,
-    sealed_nonce BLOB NOT NULL,
-    sealed_tag BLOB NOT NULL,
-    replay_key_id TEXT NOT NULL,
-    completed_at TEXT NOT NULL DEFAULT (${L}),
-    replay_expires_at TEXT NOT NULL
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_refresh_families (
-    family_id TEXT PRIMARY KEY,
-    user_id TEXT NOT NULL,
-    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE RESTRICT,
-    issuer TEXT NOT NULL,
-    scope TEXT NOT NULL,
-    resource TEXT,
-    status TEXT NOT NULL CHECK (status IN ('active','revoked','compromised','expired')),
-    current_generation INTEGER NOT NULL CHECK (current_generation > 0),
-    created_at TEXT NOT NULL DEFAULT (${L}),
-    expires_at TEXT NOT NULL,
-    revoked_at TEXT,
-    compromised_at TEXT,
-    UNIQUE (family_id, client_id),
-    FOREIGN KEY (family_id, current_generation)
-      REFERENCES oauth_refresh_tokens(family_id, generation)
-      DEFERRABLE INITIALLY DEFERRED
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
-    family_id TEXT NOT NULL REFERENCES oauth_refresh_families(family_id) ON DELETE CASCADE,
-    generation INTEGER NOT NULL CHECK (generation > 0),
-    token_digest BLOB NOT NULL UNIQUE,
-    lookup_key_id TEXT NOT NULL,
-    token_prefix TEXT NOT NULL,
-    predecessor_generation INTEGER,
-    issued_at TEXT NOT NULL DEFAULT (${L}),
-    expires_at TEXT NOT NULL,
-    used_at TEXT,
-    revoked_at TEXT,
-    PRIMARY KEY (family_id, generation),
-    CHECK (predecessor_generation IS NULL OR (predecessor_generation > 0 AND predecessor_generation < generation))
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_refresh_rotations (
-    family_id TEXT NOT NULL REFERENCES oauth_refresh_families(family_id) ON DELETE CASCADE,
-    predecessor_generation INTEGER NOT NULL,
-    request_fingerprint BLOB NOT NULL,
-    successor_generation INTEGER NOT NULL,
-    sealed_successor BLOB NOT NULL,
-    sealed_nonce BLOB NOT NULL,
-    sealed_tag BLOB NOT NULL,
-    replay_key_id TEXT NOT NULL,
-    rotated_at TEXT NOT NULL DEFAULT (${L}),
-    replay_expires_at TEXT NOT NULL,
-    PRIMARY KEY (family_id, predecessor_generation),
-    UNIQUE (family_id, successor_generation),
-    CHECK (successor_generation = predecessor_generation + 1)
-  ) STRICT`,`CREATE TABLE IF NOT EXISTS oauth_security_events (
-    event_id TEXT PRIMARY KEY,
-    family_id TEXT NOT NULL,
-    event_type TEXT NOT NULL CHECK (event_type IN ('reuse','binding_mismatch','manual_revoke','expiry')),
-    reason_code TEXT NOT NULL,
-    occurred_at TEXT NOT NULL DEFAULT (${L}),
-    retain_until TEXT NOT NULL
-  ) STRICT`,"CREATE INDEX IF NOT EXISTS oauth_clients_inactivity_idx ON oauth_clients(status, last_used_at, client_id)","CREATE INDEX IF NOT EXISTS oauth_codes_expiry_idx ON oauth_codes(expires_at, code_digest)","CREATE INDEX IF NOT EXISTS oauth_code_exchanges_replay_expiry_idx ON oauth_code_exchanges(replay_expires_at, code_digest)","CREATE INDEX IF NOT EXISTS oauth_refresh_families_lifecycle_idx ON oauth_refresh_families(status, expires_at, family_id)","CREATE INDEX IF NOT EXISTS oauth_refresh_families_user_status_idx ON oauth_refresh_families(user_id, status)","CREATE INDEX IF NOT EXISTS oauth_refresh_tokens_expiry_idx ON oauth_refresh_tokens(expires_at, family_id, generation)","CREATE INDEX IF NOT EXISTS oauth_refresh_rotations_replay_expiry_idx ON oauth_refresh_rotations(replay_expires_at, family_id, predecessor_generation)","CREATE INDEX IF NOT EXISTS oauth_security_events_retention_idx ON oauth_security_events(retain_until, event_id)"],ce=["CREATE INDEX IF NOT EXISTS oauth_clients_cleanup_idx ON oauth_clients(COALESCE(last_used_at,created_at), client_id)","CREATE INDEX IF NOT EXISTS oauth_codes_client_idx ON oauth_codes(client_id, code_digest)","CREATE INDEX IF NOT EXISTS oauth_refresh_families_client_idx ON oauth_refresh_families(client_id, family_id)",`CREATE INDEX IF NOT EXISTS oauth_refresh_families_cleanup_idx
-    ON oauth_refresh_families(COALESCE(compromised_at,revoked_at,expires_at), family_id)
-    WHERE status!='active'`],B=[`CREATE TABLE IF NOT EXISTS oauth_rate_limit_buckets (
-    scope TEXT NOT NULL CHECK (length(scope) BETWEEN 1 AND 80),
-    key_digest BLOB NOT NULL CHECK (typeof(key_digest) = 'blob' AND length(key_digest) = 32),
-    window_start INTEGER NOT NULL CHECK (window_start >= 0),
-    window_seconds INTEGER NOT NULL CHECK (window_seconds BETWEEN 1 AND 604800),
-    count INTEGER NOT NULL CHECK (count >= 1),
-    expires_at INTEGER NOT NULL CHECK (expires_at = window_start + window_seconds),
-    updated_at TEXT NOT NULL DEFAULT (${L}),
-    PRIMARY KEY (scope, key_digest, window_start, window_seconds)
-  ) STRICT`,`CREATE INDEX IF NOT EXISTS oauth_rate_limit_buckets_expiry_idx
-    ON oauth_rate_limit_buckets(expires_at, scope, key_digest, window_start, window_seconds)`],X=[...Ye,...ce,...B];async function Ke(e){if(await y(e,"PRAGMA foreign_keys = ON"),await y(e,"PRAGMA busy_timeout = 5000",!0),(await e.execute("SELECT name FROM pragma_table_info('oauth_codes')")).rows.some(_=>String(_.name)==="code"))throw new Error("Legacy raw OAuth tables require the explicit maintenance-mode coexistence migration");let n=(await e.execute("SELECT 1 present FROM sqlite_master WHERE type='table' AND name='oauth_store_metadata'")).rows.length>0?await e.execute("SELECT schema_version FROM oauth_store_metadata WHERE id=1"):void 0,s=n?.rows[0]?.schema_version==null?void 0:Number(n.rows[0].schema_version);if(s!==void 0&&(!Number.isSafeInteger(s)||s<1||s>3))throw new Error("OAuth store schema version cannot be migrated by this runtime");let a=s===void 0?X:s===1?[...ce,...B]:s===2?B:[];for(let _ of a)await e.execute(_);if(s!==void 0&&s<3&&(await e.execute({sql:`UPDATE oauth_store_metadata SET schema_version=?,updated_at=${L} WHERE id=1 AND schema_version=?`,args:[3,s]})).rowsAffected!==1)throw new Error("OAuth store schema version changed during migration");await y(e,"PRAGMA optimize",!0)}async function de(e){await y(e,"PRAGMA foreign_keys = ON"),await y(e,"PRAGMA busy_timeout = 5000",!0);let t=await e.execute("SELECT name FROM pragma_table_info('oauth_codes')");if(!t.rows.some(a=>String(a.name)==="code")){let a=t.rows.some(_=>String(_.name)==="code_digest");return await Ke(e),a?"current":"created"}if((await e.execute({sql:"SELECT name FROM sqlite_master WHERE type='table' AND name IN (?,?,?)",args:Object.values(ue)})).rows.length>0)throw new Error("Legacy OAuth archive names already exist; refusing ambiguous migration");let s=await e.transaction("write");try{for(let[a,_]of Object.entries(ue))(await s.execute({sql:"SELECT 1 present FROM sqlite_master WHERE type='table' AND name=?",args:[a]})).rows.length>0&&await s.execute({sql:`ALTER TABLE ${a} RENAME TO ${_}`,args:[]});for(let a of X)await s.execute({sql:a,args:[]});await s.commit()}finally{s.close()}return"archived_legacy"}var $e={oauth_store_metadata:["id","store_id","schema_version","authority_epoch","authority_state","updated_at"],oauth_clients:["client_id","client_name","client_type","token_endpoint_auth_method","status","created_at","last_used_at","expires_at"],oauth_client_redirect_uris:["client_id","redirect_uri","redirect_kind"],oauth_codes:["code_digest","lookup_key_id","client_id","redirect_uri","code_challenge","challenge_method","user_id","scope","resource","issued_at","expires_at"],oauth_code_exchanges:["code_digest","request_fingerprint","client_id","family_id","grant_scope","grant_resource","scope","resource","sealed_refresh","sealed_nonce","sealed_tag","replay_key_id","completed_at","replay_expires_at"],oauth_refresh_families:["family_id","user_id","client_id","issuer","scope","resource","status","current_generation","created_at","expires_at","revoked_at","compromised_at"],oauth_refresh_tokens:["family_id","generation","token_digest","lookup_key_id","token_prefix","predecessor_generation","issued_at","expires_at","used_at","revoked_at"],oauth_refresh_rotations:["family_id","predecessor_generation","request_fingerprint","successor_generation","sealed_successor","sealed_nonce","sealed_tag","replay_key_id","rotated_at","replay_expires_at"],oauth_security_events:["event_id","family_id","event_type","reason_code","occurred_at","retain_until"],oauth_rate_limit_buckets:["scope","key_digest","window_start","window_seconds","count","expires_at","updated_at"]},Je={oauth_clients_inactivity_idx:["status","last_used_at","client_id"],oauth_clients_cleanup_idx:[null,"client_id"],oauth_codes_expiry_idx:["expires_at","code_digest"],oauth_codes_client_idx:["client_id","code_digest"],oauth_code_exchanges_replay_expiry_idx:["replay_expires_at","code_digest"],oauth_refresh_families_lifecycle_idx:["status","expires_at","family_id"],oauth_refresh_families_user_status_idx:["user_id","status"],oauth_refresh_families_client_idx:["client_id","family_id"],oauth_refresh_families_cleanup_idx:[null,"family_id"],oauth_refresh_tokens_expiry_idx:["expires_at","family_id","generation"],oauth_refresh_rotations_replay_expiry_idx:["replay_expires_at","family_id","predecessor_generation"],oauth_security_events_retention_idx:["retain_until","event_id"],oauth_rate_limit_buckets_expiry_idx:["expires_at","scope","key_digest","window_start","window_seconds"]};async function Ee(e){let t=await e.execute({sql:`SELECT name FROM sqlite_master WHERE type = 'table' AND name IN (${I.map(()=>"?").join(",")})`,args:[...I]}),r=await e.execute({sql:`SELECT name FROM sqlite_master WHERE type = 'index' AND name IN (${x.map(()=>"?").join(",")})`,args:[...x]}),n=new Set(t.rows.map(o=>String(o.name))),s=new Set(r.rows.map(o=>String(o.name))),a=await e.execute("PRAGMA foreign_keys"),_=[],u=o=>o.replace(/\bIF\s+NOT\s+EXISTS\b/gi,"").replace(/\s+/g," ").trim().toLowerCase();for(let o of I){if(!n.has(o))continue;let d=(await e.execute(`PRAGMA table_info('${o}')`)).rows.map(g=>String(g.name));JSON.stringify(d)!==JSON.stringify($e[o])&&_.push(`${o}:columns`);let l=await e.execute({sql:"SELECT sql FROM sqlite_master WHERE type='table' AND name=?",args:[o]}),E=String(l.rows[0]?.sql??""),m=X.find(g=>u(g).startsWith(`create table ${o} `));(!m||u(E)!==u(m))&&_.push(`${o}:definition`)}for(let o of x){if(!s.has(o))continue;let d=(await e.execute(`PRAGMA index_info('${o}')`)).rows.map(g=>g.name==null?null:String(g.name));JSON.stringify(d)!==JSON.stringify(Je[o])&&_.push(`${o}:columns`);let l=await e.execute({sql:"SELECT sql FROM sqlite_master WHERE type='index' AND name=?",args:[o]}),E=String(l.rows[0]?.sql??""),m=X.find(g=>u(g).startsWith(`create index ${o} `));(!m||u(E)!==u(m))&&_.push(`${o}:definition`)}return{ok:I.every(o=>n.has(o))&&x.every(o=>s.has(o))&&Number(a.rows[0]?.foreign_keys??0)===1&&_.length===0,missingTables:I.filter(o=>!n.has(o)),missingIndexes:x.filter(o=>!s.has(o)),foreignKeysEnabled:Number(a.rows[0]?.foreign_keys??0)===1,problems:_}}var Qe=process.env.TURSO_DATABASE_URL??"file:./paa-api.db",Ze=process.env.TURSO_AUTH_TOKEN,M=null,U="2026-09-25.1",le="data-2026-07-28-site-extract-counters.1",Te=["admin_credit_adjustment_events","admin_credit_adjustments","billing_authorizations","billing_credits","billing_debits","billing_debit_allocations","billing_events","browser_profile_labels","connected_account_billing","concurrency_locks","credit_lot_expirations","credit_lots","credit_lot_repairs","free_credit_refreshes","harvest_attempts","inbox_messages","jobs","kpo_jobs","kpo_phase_log","ledger","oauth_clients","oauth_codes","oauth_tokens","operation_attempts","operation_billing_links","operation_coverage_defects","operation_runs","maps_place_runs","maps_place_attempts","maps_place_run_events","maps_place_reviews","maps_place_images","page_snapshots","password_reset_tokens","rate_limits","request_events","provider_reconciliation_runs","provider_account_windows","provider_usage_receipts","scheduled_run_view_links","serp_identities","site_audit_jobs","site_audit_phase_log","site_extract_jobs","site_extract_pages","stripe_events","users","workflow_artifacts","workflow_runs","workflow_schedules","workflow_webhook_deliveries","workshop_registrations"],pe=["admin_credit_adjustment_events_reference","admin_credit_adjustments_user_created","billing_authorizations_user_status","billing_credits_user_status","billing_debits_user_status","billing_events_authorization","billing_events_user_created_at","concurrency_locks_active_user","concurrency_locks_operation","concurrency_locks_user_status","credit_lots_user_active","credit_lot_repairs_user_applied","harvest_attempts_job_id","harvest_attempts_provider_lookup","harvest_attempts_user_created_at","inbox_messages_user_sent_at","jobs_created_at_status_user","jobs_status","jobs_user_created_at_status","jobs_user_id","kpo_jobs_status","kpo_jobs_user_id","kpo_phase_log_job_id","ledger_stripe_pi_unique","ledger_user_id","oauth_tokens_identity","operation_attempts_provider_status","operation_attempts_run_number","operation_billing_links_run","operation_coverage_defects_created","operation_runs_idempotency_scope","operation_runs_status_started","operation_runs_tool_started","operation_runs_user_started","maps_place_runs_owner_key","maps_place_runs_status_lease","maps_place_attempts_run_number","maps_place_reviews_order","maps_place_images_order","page_snapshots_user_checked_at","prt_user_id","request_events_created_at","request_events_user_created_at","provider_reconciliation_runs_provider_started","provider_account_windows_lookup","provider_usage_receipts_attempt","provider_usage_receipts_pending","provider_usage_receipts_provider_source","scheduled_run_view_links_expiry","scheduled_run_view_links_owner_run","stripe_events_due","serp_identities_user_name","site_audit_jobs_status","site_audit_jobs_user_id","site_audit_phase_log_job_id","site_extract_jobs_status","site_extract_jobs_idempotency","site_extract_jobs_user_id","site_extract_pages_job_id","workflow_artifacts_run","workflow_runs_idempotency","workflow_runs_schedule","workflow_runs_user_created","workflow_schedules_due","workflow_schedules_user_status","workflow_webhook_deliveries_run","workshop_registrations_event_status"],me=["credit_lots_bounds_insert","credit_lots_bounds_update","credit_lots_one_migration_insert","credit_lots_one_migration_update"],et={maps_place_runs:["request_fingerprint","field_states_json","core_json","checkpoint_revision","current_attempt_id","current_fence_token","lease_expires_at","billing_state"],maps_place_attempts:["attempt_number","resume_key_hash","fence_token","hold_key","held_amount_mc","final_amount_mc","billing_state"],maps_place_reviews:["review_key","record_json"],maps_place_images:["media_key","record_json"],credit_lots:["never_expires"],harvest_attempts:["debug_json","browser_provider","provider_session_id","provider_session_observed_at","provider_lookup_status","provider_status","provider_error_code","provider_error_message","provider_reason_source","provider_duration_ms","provider_bandwidth_bytes","provider_captcha","provider_checked_at","provider_detail_json","provider_disconnect_observed","provider_disconnect_message"],jobs:["public_error_json"],oauth_tokens:["replaced_by","rotated_at"],provider_usage_receipts:["provider_product","billing_tier","billable_event","measurement_source","rate_numerator","rate_denominator","rate_policy_version","rate_effective_at"],site_extract_jobs:["attempted_urls","successful_urls","failed_urls","idempotency_key","request_fingerprint","dispatch_attempts","next_dispatch_at","dispatch_error","settlement_attempts","next_settlement_at","settlement_error","public_error_json"],stripe_events:["attempt_count","claim_token","claimed_at","completed_at","event_type","last_error","last_error_code","next_attempt_at","received_at","status","stripe_created_at","updated_at"],users:["balance_mc","concurrency_stripe_sub_id","concurrency_pack_quantity","extra_concurrency_slots","key_active","memory_identity","memory_key","memory_plan","memory_provisioned","memory_subscription_id","password_hash","stripe_customer_id","subscription_concurrency","subscription_id","subscription_tier"],workshop_registrations:["field_notes_email_id","reminder_48h_email_id","reminder_24h_email_id","reminder_1h_email_id"],workflow_artifacts:["content"],workflow_runs:["step_index","step_log_json","step_state_json","total_steps","webhook_url"]},b="provider_usage_receipts",f="provider_usage_receipts_measured_v1",ge="cost_state IN ('pending', 'estimated', 'measured', 'actual', 'unavailable')";function Le(e=b){if(e!==b&&e!==f)throw new Error(`Unsupported provider receipt table name: ${e}`);return`
-    CREATE TABLE IF NOT EXISTS ${e} (
-      id                       TEXT PRIMARY KEY,
-      attempt_id               TEXT NOT NULL REFERENCES operation_attempts(id) ON DELETE CASCADE,
-      provider                 TEXT NOT NULL,
-      account_scope_hash       TEXT NOT NULL,
-      method                   TEXT NOT NULL,
-      provider_source_key      TEXT,
-      provider_source_key_hash TEXT,
-      cost_state               TEXT NOT NULL DEFAULT 'pending'
-                               CHECK (cost_state IN ('pending', 'estimated', 'measured', 'actual', 'unavailable')),
-      provider_product         TEXT,
-      billing_tier             TEXT,
-      billable_event           TEXT,
-      measurement_source      TEXT,
-      rate_numerator           INTEGER CHECK (rate_numerator IS NULL OR rate_numerator >= 0),
-      rate_denominator         INTEGER CHECK (rate_denominator IS NULL OR rate_denominator > 0),
-      rate_policy_version      TEXT,
-      rate_effective_at        TEXT,
-      units                    REAL CHECK (units IS NULL OR units >= 0),
-      unit_type                TEXT,
-      amount_usd_nanos         INTEGER CHECK (amount_usd_nanos IS NULL OR amount_usd_nanos >= 0),
-      currency                 TEXT NOT NULL DEFAULT 'USD',
-      rate_source              TEXT,
-      zero_cost_reason         TEXT,
-      provider_status          TEXT,
-      provider_duration_ms     INTEGER CHECK (provider_duration_ms IS NULL OR provider_duration_ms >= 0),
-      provider_captcha         INTEGER CHECK (provider_captcha IS NULL OR provider_captcha IN (0, 1)),
-      error_code               TEXT,
-      error_message            TEXT,
-      checked_at               TEXT,
-      finalized_at             TEXT,
-      created_at               TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at               TEXT NOT NULL DEFAULT (datetime('now')),
-      CHECK (provider_source_key IS NULL OR provider_source_key_hash IS NOT NULL),
-      CHECK (cost_state <> 'pending' OR (amount_usd_nanos IS NULL AND finalized_at IS NULL)),
-      CHECK (cost_state <> 'actual' OR (amount_usd_nanos IS NOT NULL AND finalized_at IS NOT NULL
-        AND (amount_usd_nanos > 0 OR zero_cost_reason IS NOT NULL))),
-      CHECK (cost_state NOT IN ('estimated', 'measured', 'unavailable') OR finalized_at IS NOT NULL),
-      CHECK (cost_state <> 'measured' OR (amount_usd_nanos IS NOT NULL
-        AND (amount_usd_nanos > 0 OR zero_cost_reason IS NOT NULL)))
-    )
-  `}async function be(e){let t=await e.execute({sql:"SELECT sql FROM sqlite_master WHERE type = 'table' AND name = ?",args:[b]});return t.rows[0]?.sql==null?null:String(t.rows[0].sql)}function Se(e){return e==null||e.includes(ge)}async function tt(e){let t=await be(e);if(Se(t))return"not_needed";if((await e.execute({sql:"SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = ? LIMIT 1",args:[f]})).rows.length>0)throw new Error(`Refusing provider receipt migration because ${f} already exists`);let s=(await e.execute(`PRAGMA table_info(${b})`)).rows.map(a=>String(a.name)).map(a=>`"${a.replaceAll('"','""')}"`).join(", ");if(!s)throw new Error("Provider receipt migration found no source columns");return await e.batch([Le(f),`INSERT INTO ${f} (${s}) SELECT ${s} FROM ${b}`,`DROP TABLE ${b}`,`ALTER TABLE ${f} RENAME TO ${b}`,"CREATE INDEX provider_usage_receipts_attempt ON provider_usage_receipts(attempt_id, created_at)","CREATE INDEX provider_usage_receipts_pending ON provider_usage_receipts(cost_state, checked_at, created_at) WHERE cost_state = 'pending'","CREATE UNIQUE INDEX provider_usage_receipts_provider_source ON provider_usage_receipts(provider, account_scope_hash, method, provider_source_key_hash) WHERE provider_source_key_hash IS NOT NULL"],"write"),"rebuilt"}function F(e){return e.map(t=>`'${t.replaceAll("'","''")}'`).join(", ")}async function P(e){let t=[`(SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN (${F(Te)})) = ${Te.length}`,`(SELECT COUNT(*) FROM sqlite_master WHERE type = 'index' AND name IN (${F(pe)})) = ${pe.length}`,`(SELECT COUNT(*) FROM sqlite_master WHERE type = 'trigger' AND name IN (${F(me)})) = ${me.length}`,...Object.entries(et).map(([n,s])=>`(SELECT COUNT(*) FROM pragma_table_info('${n}') WHERE name IN (${F(s)})) = ${s.length}`),`(SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name = '${b}' AND instr(sql, '${ge.replaceAll("'","''")}') > 0) = 1`],r=await e.execute(`SELECT ${t.join(" AND ")} AS ready`);return Number(r.rows[0]?.ready??0)===1}async function It(e=i()){let t=!1;try{t=(await e.execute({sql:"SELECT 1 AS applied FROM schema_migrations WHERE version = ? LIMIT 1",args:[U]})).rows.length===1}catch(n){let s=n instanceof Error?n.message.toLowerCase():String(n).toLowerCase();if(!s.includes("no such table")||!s.includes("schema_migrations"))throw n}let r=t?await P(e):!1;return{coreSchemaVersion:U,migrationApplied:t,schemaReady:r}}async function rt(e){await e.execute(`
-    UPDATE site_extract_jobs SET
-      attempted_urls = done_urls,
-      successful_urls = (
-        SELECT COUNT(*) FROM site_extract_pages
-        WHERE job_id = site_extract_jobs.id
-          AND CASE
-            WHEN json_valid(page) = 0 THEN 0
-            WHEN json_extract(page, '$.extractionStatus') IS NOT NULL
-              THEN json_extract(page, '$.extractionStatus') = 'successful'
-            ELSE COALESCE(
-              json_extract(page, '$.status') >= 200
-              AND json_extract(page, '$.status') < 300
-              AND json_extract(page, '$.wordCount') > 0,
-              0
-            )
-          END
-      ),
-      failed_urls = MAX(0, done_urls - (
-        SELECT COUNT(*) FROM site_extract_pages
-        WHERE job_id = site_extract_jobs.id
-          AND CASE
-            WHEN json_valid(page) = 0 THEN 0
-            WHEN json_extract(page, '$.extractionStatus') IS NOT NULL
-              THEN json_extract(page, '$.extractionStatus') = 'successful'
-            ELSE COALESCE(
-              json_extract(page, '$.status') >= 200
-              AND json_extract(page, '$.status') < 300
-              AND json_extract(page, '$.wordCount') > 0,
-              0
-            )
-          END
-      ))
-    WHERE done_urls > 0
-      AND attempted_urls = 0
-      AND successful_urls = 0
-      AND failed_urls = 0
-  `)}async function G(e){(await e.execute({sql:"SELECT 1 AS applied FROM schema_migrations WHERE version = ? LIMIT 1",args:[le]})).rows.length>0||(await rt(e),await e.execute({sql:"INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",args:[le]}))}function i(){return M||(M=Ve({url:Qe,authToken:Ze})),M}function xt(e){M=e}async function yt(e=i()){if(process.env.OAUTH_MAINTENANCE_MODE!=="true")throw new Error("Secured main OAuth schema migration requires OAUTH_MAINTENANCE_MODE=true");await de(e)}async function Ct(e=i()){return Ee(e)}async function nt(e={}){let t=i(),r;try{r=await t.execute({sql:"SELECT 1 AS applied FROM schema_migrations WHERE version = ? LIMIT 1",args:[U]})}catch(s){let a=s instanceof Error?s.message.toLowerCase():String(s).toLowerCase();if(!a.includes("no such table")||!a.includes("schema_migrations"))throw s;await t.execute(`
-      CREATE TABLE IF NOT EXISTS schema_migrations (
-        version    TEXT PRIMARY KEY,
-        applied_at TEXT NOT NULL DEFAULT (datetime('now'))
-      )
-    `),r={rows:[]}}if(r.rows.length>0){if(!e.verifyCurrentSchema)return;if(await P(t)){e.runDataRepairs&&await G(t);return}}let n=await be(t);if(!Se(n))throw new Error("Provider receipt schema requires the explicit operator migration: run npm run db:migrate before starting the new application release");if(await P(t)){await G(t),await t.execute({sql:"INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",args:[U]});return}await t.execute(`
-    CREATE TABLE IF NOT EXISTS users (
-      id            INTEGER PRIMARY KEY AUTOINCREMENT,
-      email         TEXT UNIQUE NOT NULL,
-      name          TEXT,
-      api_key       TEXT UNIQUE NOT NULL,
-      password_hash TEXT,
-      created_at    TEXT NOT NULL DEFAULT (datetime('now')),
-      active        INTEGER NOT NULL DEFAULT 1
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS jobs (
-      id            TEXT PRIMARY KEY,
-      user_id       INTEGER NOT NULL REFERENCES users(id),
-      status        TEXT NOT NULL DEFAULT 'pending',
-      query         TEXT NOT NULL,
-      options       TEXT NOT NULL,
-      callback_url  TEXT,
-      result        TEXT,
-      error         TEXT,
-      public_error_json TEXT,
-      created_at    TEXT NOT NULL DEFAULT (datetime('now')),
-      started_at    TEXT,
-      completed_at  TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS jobs_user_id ON jobs(user_id)"),await t.execute("CREATE INDEX IF NOT EXISTS jobs_status ON jobs(status)");try{await t.execute("ALTER TABLE jobs ADD COLUMN public_error_json TEXT")}catch{}await t.execute("CREATE INDEX IF NOT EXISTS jobs_created_at_status_user ON jobs(created_at, status, user_id)"),await t.execute("CREATE INDEX IF NOT EXISTS jobs_user_created_at_status ON jobs(user_id, created_at, status)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS harvest_attempts (
-      id                       TEXT PRIMARY KEY,
-      job_id                   TEXT NOT NULL REFERENCES jobs(id),
-      user_id                  INTEGER NOT NULL REFERENCES users(id),
-      attempt_number           INTEGER NOT NULL,
-      max_attempts             INTEGER NOT NULL,
-      query                    TEXT NOT NULL,
-      location                 TEXT,
-      max_questions            INTEGER NOT NULL,
-      status                   TEXT NOT NULL,
-      outcome                  TEXT,
-      \u006b\u0065\u0072\u006e\u0065\u006c_session_id        TEXT,
-      question_count           INTEGER,
-      duration_ms              INTEGER,
-      error                    TEXT,
-      will_retry               INTEGER,
-      \u006b\u0065\u0072\u006e\u0065\u006c_delete_started    INTEGER NOT NULL DEFAULT 0,
-      \u006b\u0065\u0072\u006e\u0065\u006c_delete_succeeded  INTEGER,
-      \u006b\u0065\u0072\u006e\u0065\u006c_delete_error      TEXT,
-      browser_close_succeeded  INTEGER,
-      browser_close_error      TEXT,
-      debug_json               TEXT,
-      browser_provider         TEXT,
-      provider_session_id      TEXT,
-      provider_session_observed_at TEXT,
-      provider_lookup_status   TEXT,
-      provider_status          TEXT,
-      provider_error_code      TEXT,
-      provider_error_message   TEXT,
-      provider_reason_source   TEXT,
-      provider_duration_ms     INTEGER,
-      provider_bandwidth_bytes INTEGER,
-      provider_captcha         INTEGER,
-      provider_checked_at      TEXT,
-      provider_detail_json     TEXT,
-      provider_disconnect_observed INTEGER,
-      provider_disconnect_message TEXT,
-      created_at               TEXT NOT NULL DEFAULT (datetime('now')),
-      completed_at             TEXT,
-      UNIQUE(job_id, attempt_number)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS harvest_attempts_job_id ON harvest_attempts(job_id)"),await t.execute("CREATE INDEX IF NOT EXISTS harvest_attempts_user_created_at ON harvest_attempts(user_id, created_at DESC)");try{await t.execute("ALTER TABLE harvest_attempts ADD COLUMN debug_json TEXT")}catch{}for(let s of["browser_provider TEXT","provider_session_id TEXT","provider_session_observed_at TEXT","provider_lookup_status TEXT","provider_status TEXT","provider_error_code TEXT","provider_error_message TEXT","provider_reason_source TEXT","provider_duration_ms INTEGER","provider_bandwidth_bytes INTEGER","provider_captcha INTEGER","provider_checked_at TEXT","provider_detail_json TEXT","provider_disconnect_observed INTEGER","provider_disconnect_message TEXT"])try{await t.execute(`ALTER TABLE harvest_attempts ADD COLUMN ${s}`)}catch{}await t.execute("CREATE INDEX IF NOT EXISTS harvest_attempts_provider_lookup ON harvest_attempts(browser_provider, provider_lookup_status, provider_checked_at)");try{await t.execute("ALTER TABLE users ADD COLUMN password_hash TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN key_active INTEGER NOT NULL DEFAULT 1")}catch{}await t.execute(`
-    CREATE TABLE IF NOT EXISTS kpo_jobs (
-      id          TEXT    PRIMARY KEY,
-      user_id     INTEGER NOT NULL REFERENCES users(id),
-      status      TEXT    NOT NULL,
-      entity_name TEXT    NOT NULL,
-      entity_type TEXT    NOT NULL,
-      url         TEXT,
-      request     TEXT    NOT NULL,
-      result      TEXT,
-      error       TEXT,
-      created_at  TEXT    NOT NULL DEFAULT (datetime('now')),
-      updated_at  TEXT    NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS kpo_phase_log (
-      id         INTEGER PRIMARY KEY AUTOINCREMENT,
-      job_id     TEXT    NOT NULL REFERENCES kpo_jobs(id),
-      phase      TEXT    NOT NULL,
-      output     TEXT    NOT NULL,
-      created_at TEXT    NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS kpo_jobs_user_id ON kpo_jobs(user_id)"),await t.execute("CREATE INDEX IF NOT EXISTS kpo_jobs_status ON kpo_jobs(status)"),await t.execute("CREATE INDEX IF NOT EXISTS kpo_phase_log_job_id ON kpo_phase_log(job_id)");try{await t.execute("ALTER TABLE users ADD COLUMN stripe_customer_id TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN balance_mc INTEGER NOT NULL DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN extra_concurrency_slots INTEGER NOT NULL DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN concurrency_stripe_sub_id TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN concurrency_pack_quantity INTEGER NOT NULL DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN subscription_concurrency INTEGER NOT NULL DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN subscription_tier TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN subscription_id TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN memory_key TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN memory_identity TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN memory_plan TEXT NOT NULL DEFAULT 'free'")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN memory_subscription_id TEXT")}catch{}try{await t.execute("ALTER TABLE users ADD COLUMN memory_provisioned INTEGER NOT NULL DEFAULT 0")}catch{}await t.execute(`
-    CREATE TABLE IF NOT EXISTS concurrency_locks (
-      id          TEXT PRIMARY KEY,
-      user_id     INTEGER NOT NULL REFERENCES users(id),
-      operation   TEXT NOT NULL,
-      status      TEXT NOT NULL DEFAULT 'active',
-      acquired_at TEXT NOT NULL DEFAULT (datetime('now')),
-      expires_at  TEXT NOT NULL,
-      released_at TEXT,
-      metadata    TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS concurrency_locks_user_status ON concurrency_locks(user_id, status, expires_at)"),await t.execute("CREATE INDEX IF NOT EXISTS concurrency_locks_operation ON concurrency_locks(operation, status, expires_at)"),await t.execute("CREATE INDEX IF NOT EXISTS concurrency_locks_active_user ON concurrency_locks(user_id, expires_at) WHERE status = 'active'"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS ledger (
-      id          INTEGER PRIMARY KEY AUTOINCREMENT,
-      user_id     INTEGER NOT NULL REFERENCES users(id),
-      amount_mc   INTEGER NOT NULL,
-      operation   TEXT NOT NULL,
-      description TEXT,
-      stripe_pi   TEXT,
-      created_at  TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS ledger_user_id ON ledger(user_id)"),await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS ledger_stripe_pi_unique ON ledger(stripe_pi) WHERE stripe_pi IS NOT NULL"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS credit_lots (
-      id           INTEGER PRIMARY KEY AUTOINCREMENT,
-      user_id      INTEGER NOT NULL REFERENCES users(id),
-      amount_mc    INTEGER NOT NULL,
-      remaining_mc INTEGER NOT NULL,
-      source       TEXT NOT NULL,
-      stripe_pi    TEXT,
-      granted_at   TEXT NOT NULL DEFAULT (datetime('now')),
-      expires_at   TEXT NOT NULL,
-      never_expires INTEGER NOT NULL DEFAULT 0
-    )
-  `);try{await t.execute("ALTER TABLE credit_lots ADD COLUMN never_expires INTEGER NOT NULL DEFAULT 0")}catch{}await t.execute("CREATE INDEX IF NOT EXISTS credit_lots_user_active ON credit_lots(user_id, expires_at, remaining_mc)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS credit_lot_expirations (
-      lot_id       INTEGER PRIMARY KEY REFERENCES credit_lots(id),
-      user_id      INTEGER NOT NULL REFERENCES users(id),
-      amount_mc    INTEGER NOT NULL,
-      claim_token  TEXT NOT NULL UNIQUE,
-      expired_at   TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TRIGGER IF NOT EXISTS credit_lots_bounds_insert
-    BEFORE INSERT ON credit_lots
-    WHEN NEW.amount_mc < 0
-      OR NEW.remaining_mc < 0
-      OR NEW.remaining_mc > NEW.amount_mc
-    BEGIN
-      SELECT RAISE(ABORT, 'invalid credit lot bounds');
-    END
-  `),await t.execute(`
-    CREATE TRIGGER IF NOT EXISTS credit_lots_bounds_update
-    BEFORE UPDATE OF amount_mc, remaining_mc ON credit_lots
-    WHEN NEW.amount_mc < 0
-      OR NEW.remaining_mc < 0
-      OR NEW.remaining_mc > NEW.amount_mc
-    BEGIN
-      SELECT RAISE(ABORT, 'invalid credit lot bounds');
-    END
-  `),await t.execute(`
-    CREATE TRIGGER IF NOT EXISTS credit_lots_one_migration_insert
-    BEFORE INSERT ON credit_lots
-    WHEN NEW.source = 'migration'
-      AND EXISTS (
-        SELECT 1 FROM credit_lots
-        WHERE user_id = NEW.user_id AND source = 'migration'
-      )
-    BEGIN
-      SELECT RAISE(ABORT, 'duplicate migration lot');
-    END
-  `),await t.execute(`
-    CREATE TRIGGER IF NOT EXISTS credit_lots_one_migration_update
-    BEFORE UPDATE OF source, user_id ON credit_lots
-    WHEN NEW.source = 'migration'
-      AND EXISTS (
-        SELECT 1 FROM credit_lots
-        WHERE user_id = NEW.user_id
-          AND source = 'migration'
-          AND id != OLD.id
-      )
-    BEGIN
-      SELECT RAISE(ABORT, 'duplicate migration lot');
-    END
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS credit_lot_repairs (
-      repair_id       TEXT PRIMARY KEY,
-      user_id         INTEGER NOT NULL REFERENCES users(id),
-      report_sha256   TEXT NOT NULL,
-      classification TEXT NOT NULL,
-      before_json     TEXT NOT NULL,
-      plan_json       TEXT NOT NULL,
-      after_json      TEXT,
-      status          TEXT NOT NULL DEFAULT 'claimed',
-      created_at      TEXT NOT NULL DEFAULT (datetime('now')),
-      applied_at      TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS credit_lot_repairs_user_applied ON credit_lot_repairs(user_id, applied_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS free_credit_refreshes (
-      user_id    INTEGER NOT NULL REFERENCES users(id),
-      month      TEXT NOT NULL,
-      created_at TEXT NOT NULL DEFAULT (datetime('now')),
-      PRIMARY KEY (user_id, month)
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS billing_authorizations (
-      id                TEXT PRIMARY KEY,
-      user_id           INTEGER NOT NULL REFERENCES users(id),
-      idempotency_key   TEXT NOT NULL UNIQUE,
-      billing_class     TEXT NOT NULL,
-      status            TEXT NOT NULL,
-      minimum_amount_mc INTEGER NOT NULL,
-      maximum_amount_mc INTEGER NOT NULL,
-      token_hash        TEXT NOT NULL,
-      metadata          TEXT,
-      expires_at        TEXT NOT NULL,
-      created_at        TEXT NOT NULL DEFAULT (datetime('now')),
-      settled_at        TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS billing_authorizations_user_status ON billing_authorizations(user_id, status, expires_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS billing_events (
-      id                 TEXT PRIMARY KEY,
-      user_id            INTEGER NOT NULL REFERENCES users(id),
-      authorization_id   TEXT REFERENCES billing_authorizations(id),
-      idempotency_key    TEXT NOT NULL UNIQUE,
-      billing_class      TEXT NOT NULL,
-      source_surface     TEXT NOT NULL,
-      status             TEXT NOT NULL,
-      amount_mc          INTEGER NOT NULL DEFAULT 0,
-      raw_cost_usd_nanos INTEGER,
-      multiplier_bps     INTEGER,
-      input_tokens       INTEGER,
-      output_tokens      INTEGER,
-      cached_tokens      INTEGER,
-      model_steps        INTEGER,
-      metadata           TEXT,
-      created_at         TEXT NOT NULL DEFAULT (datetime('now')),
-      settled_at         TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS billing_events_user_created_at ON billing_events(user_id, created_at DESC)"),await t.execute("CREATE INDEX IF NOT EXISTS billing_events_authorization ON billing_events(authorization_id)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS billing_debits (
-      idempotency_key TEXT PRIMARY KEY,
-      user_id         INTEGER NOT NULL REFERENCES users(id),
-      amount_mc       INTEGER NOT NULL,
-      operation       TEXT NOT NULL,
-      description     TEXT,
-      status          TEXT NOT NULL DEFAULT 'claimed',
-      created_at      TEXT NOT NULL DEFAULT (datetime('now')),
-      applied_at      TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS billing_debits_user_status ON billing_debits(user_id, status)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS billing_debit_allocations (
-      debit_idempotency_key TEXT NOT NULL REFERENCES billing_debits(idempotency_key),
-      lot_id                INTEGER NOT NULL REFERENCES credit_lots(id),
-      user_id               INTEGER NOT NULL REFERENCES users(id),
-      amount_mc             INTEGER NOT NULL,
-      expires_at            TEXT NOT NULL,
-      PRIMARY KEY (debit_idempotency_key, lot_id)
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS connected_account_billing (
-      user_id                     INTEGER PRIMARY KEY REFERENCES users(id),
-      stripe_subscription_id      TEXT,
-      stripe_subscription_item_id TEXT,
-      price_id                    TEXT,
-      quantity                    INTEGER NOT NULL DEFAULT 0,
-      status                      TEXT NOT NULL DEFAULT 'pending',
-      last_error_code             TEXT,
-      checked_at                  TEXT NOT NULL DEFAULT (datetime('now')),
-      synced_at                   TEXT,
-      updated_at                  TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS connected_account_charges (
-      user_id       INTEGER NOT NULL,
-      connection_id TEXT NOT NULL,
-      period_start  TEXT NOT NULL,
-      amount_mc     INTEGER NOT NULL,
-      created_at    TEXT NOT NULL DEFAULT (datetime('now')),
-      PRIMARY KEY (user_id, connection_id, period_start)
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS connected_account_charge_transfers (
-      id                 INTEGER PRIMARY KEY AUTOINCREMENT,
-      user_id            INTEGER NOT NULL,
-      period_start       TEXT NOT NULL,
-      from_connection_id TEXT NOT NULL,
-      to_connection_id   TEXT NOT NULL,
-      provider_config_key TEXT NOT NULL,
-      transferred_at     TEXT NOT NULL DEFAULT (datetime('now')),
-      UNIQUE (user_id, period_start, from_connection_id),
-      CHECK (from_connection_id <> to_connection_id)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS connected_account_charge_transfers_destination ON connected_account_charge_transfers(user_id, period_start, to_connection_id, transferred_at DESC)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS billing_credits (
-      idempotency_key TEXT PRIMARY KEY,
-      user_id         INTEGER NOT NULL REFERENCES users(id),
-      amount_mc       INTEGER NOT NULL,
-      operation       TEXT NOT NULL,
-      description     TEXT,
-      status          TEXT NOT NULL DEFAULT 'claimed',
-      created_at      TEXT NOT NULL DEFAULT (datetime('now')),
-      applied_at      TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS billing_credits_user_status ON billing_credits(user_id, status)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS operation_runs (
-      id                      TEXT PRIMARY KEY,
-      user_id                 INTEGER REFERENCES users(id),
-      owner_scope_hash        TEXT NOT NULL,
-      tool                    TEXT NOT NULL,
-      idempotency_scope_hash  TEXT,
-      request_fingerprint     TEXT,
-      job_id                  TEXT,
-      request_id              TEXT,
-      deployment_commit       TEXT,
-      normalized_flags_json   TEXT NOT NULL DEFAULT '{}' CHECK (json_valid(normalized_flags_json)),
-      status                  TEXT NOT NULL DEFAULT 'running'
-                              CHECK (status IN ('running', 'succeeded', 'failed', 'cancelled', 'timed_out', 'interrupted', 'unknown')),
-      failure_class           TEXT,
-      started_at              TEXT NOT NULL,
-      ended_at                TEXT,
-      created_at              TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at              TEXT NOT NULL DEFAULT (datetime('now')),
-      CHECK ((idempotency_scope_hash IS NULL AND request_fingerprint IS NULL)
-        OR (idempotency_scope_hash IS NOT NULL AND request_fingerprint IS NOT NULL)),
-      CHECK ((status = 'running' AND ended_at IS NULL) OR (status <> 'running' AND ended_at IS NOT NULL))
-    )
-  `),await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS operation_runs_idempotency_scope ON operation_runs(idempotency_scope_hash) WHERE idempotency_scope_hash IS NOT NULL"),await t.execute("CREATE INDEX IF NOT EXISTS operation_runs_user_started ON operation_runs(user_id, started_at DESC)"),await t.execute("CREATE INDEX IF NOT EXISTS operation_runs_tool_started ON operation_runs(tool, started_at DESC)"),await t.execute("CREATE INDEX IF NOT EXISTS operation_runs_status_started ON operation_runs(status, started_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS maps_place_runs (
-      id TEXT PRIMARY KEY,
-      user_id INTEGER NOT NULL REFERENCES users(id),
-      idempotency_key_hash TEXT NOT NULL,
-      request_fingerprint TEXT NOT NULL,
-      declaration_json TEXT NOT NULL CHECK (json_valid(declaration_json)),
-      status TEXT NOT NULL DEFAULT 'queued' CHECK (status IN ('queued','running','interrupted','complete','partial','failed','cancelled')),
-      billing_state TEXT NOT NULL DEFAULT 'unreserved' CHECK (billing_state IN ('unreserved','held','settling','settled','refunded','pending_reconciliation')),
-      field_states_json TEXT NOT NULL CHECK (json_valid(field_states_json)),
-      core_json TEXT CHECK (core_json IS NULL OR json_valid(core_json)),
-      verified INTEGER NOT NULL DEFAULT 0 CHECK (verified IN (0,1)),
-      checkpoint_revision INTEGER NOT NULL DEFAULT 0 CHECK (checkpoint_revision >= 0),
-      current_attempt_id TEXT,
-      current_fence_token TEXT,
-      lease_expires_at TEXT,
-      operation_run_id TEXT,
-      concurrency_lock_id TEXT,
-      error_code TEXT,
-      created_at TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at TEXT NOT NULL DEFAULT (datetime('now')),
-      UNIQUE(user_id, idempotency_key_hash)
-    )
-  `),await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS maps_place_runs_owner_key ON maps_place_runs(user_id,idempotency_key_hash)"),await t.execute("CREATE INDEX IF NOT EXISTS maps_place_runs_status_lease ON maps_place_runs(status,lease_expires_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS maps_place_attempts (
-      id TEXT PRIMARY KEY,
-      run_id TEXT NOT NULL REFERENCES maps_place_runs(id) ON DELETE CASCADE,
-      attempt_number INTEGER NOT NULL CHECK (attempt_number > 0),
-      resume_key_hash TEXT,
-      fence_token TEXT NOT NULL,
-      status TEXT NOT NULL CHECK (status IN ('running','complete','partial','failed','interrupted','cancelled')),
-      lease_expires_at TEXT NOT NULL,
-      hold_key TEXT NOT NULL,
-      held_amount_mc INTEGER NOT NULL DEFAULT 0,
-      final_amount_mc INTEGER,
-      billing_state TEXT NOT NULL DEFAULT 'unreserved',
-      started_at TEXT NOT NULL DEFAULT (datetime('now')),
-      ended_at TEXT,
-      UNIQUE(run_id,attempt_number),
-      UNIQUE(run_id,resume_key_hash)
-    )
-  `),await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS maps_place_attempts_run_number ON maps_place_attempts(run_id,attempt_number)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS maps_place_run_events (
-      id TEXT PRIMARY KEY,
-      run_id TEXT NOT NULL REFERENCES maps_place_runs(id) ON DELETE CASCADE,
-      attempt_id TEXT,
-      revision INTEGER NOT NULL,
-      event_type TEXT NOT NULL,
-      details_json TEXT NOT NULL DEFAULT '{}' CHECK (json_valid(details_json)),
-      created_at TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS maps_place_reviews (
-      run_id TEXT NOT NULL REFERENCES maps_place_runs(id) ON DELETE CASCADE,
-      review_key TEXT NOT NULL,
-      ordinal INTEGER NOT NULL,
-      record_json TEXT NOT NULL CHECK (json_valid(record_json)),
-      PRIMARY KEY(run_id,review_key)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS maps_place_reviews_order ON maps_place_reviews(run_id,ordinal,review_key)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS maps_place_images (
-      run_id TEXT NOT NULL REFERENCES maps_place_runs(id) ON DELETE CASCADE,
-      media_key TEXT NOT NULL,
-      ordinal INTEGER NOT NULL,
-      record_json TEXT NOT NULL CHECK (json_valid(record_json)),
-      PRIMARY KEY(run_id,media_key)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS maps_place_images_order ON maps_place_images(run_id,ordinal,media_key)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS operation_attempts (
-      id                    TEXT PRIMARY KEY,
-      run_id                TEXT NOT NULL REFERENCES operation_runs(id) ON DELETE CASCADE,
-      parent_attempt_id     TEXT,
-      attempt_number        INTEGER NOT NULL CHECK (attempt_number > 0),
-      edge_kind             TEXT CHECK (edge_kind IN ('next_phase', 'parallel_child', 'same_method_retry', 'provider_fallback', 'durable_resume', 'reconciliation')),
-      retry_kind            TEXT CHECK (retry_kind IN ('same_method', 'provider_fallback', 'durable_resume', 'reconciliation')),
-      retry_reason          TEXT,
-      retry_owner           TEXT,
-      method                TEXT NOT NULL,
-      provider              TEXT,
-      normalized_flags_json TEXT NOT NULL DEFAULT '{}' CHECK (json_valid(normalized_flags_json)),
-      status                TEXT NOT NULL DEFAULT 'running'
-                            CHECK (status IN ('running', 'succeeded', 'failed', 'cancelled', 'timed_out', 'interrupted', 'unknown')),
-      error_code            TEXT,
-      error_message         TEXT,
-      started_at            TEXT NOT NULL,
-      ended_at              TEXT,
-      duration_ms           INTEGER CHECK (duration_ms IS NULL OR duration_ms >= 0),
-      created_at            TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at            TEXT NOT NULL DEFAULT (datetime('now')),
-      UNIQUE (id, run_id),
-      FOREIGN KEY (parent_attempt_id, run_id) REFERENCES operation_attempts(id, run_id) ON DELETE RESTRICT,
-      CHECK ((attempt_number = 1 AND parent_attempt_id IS NULL AND edge_kind IS NULL AND retry_kind IS NULL)
-        OR (attempt_number > 1 AND parent_attempt_id IS NOT NULL AND edge_kind IS NOT NULL)),
-      CHECK (retry_kind IS NULL OR edge_kind IN ('same_method_retry', 'provider_fallback', 'durable_resume', 'reconciliation')),
-      CHECK ((status = 'running' AND ended_at IS NULL AND duration_ms IS NULL)
-        OR (status <> 'running' AND ended_at IS NOT NULL AND duration_ms IS NOT NULL))
-    )
-  `),await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS operation_attempts_run_number ON operation_attempts(run_id, attempt_number)"),await t.execute("CREATE INDEX IF NOT EXISTS operation_attempts_provider_status ON operation_attempts(provider, status, started_at)"),await t.execute(Le()),await t.execute("CREATE INDEX IF NOT EXISTS provider_usage_receipts_attempt ON provider_usage_receipts(attempt_id, created_at)"),await t.execute("CREATE INDEX IF NOT EXISTS provider_usage_receipts_pending ON provider_usage_receipts(cost_state, checked_at, created_at) WHERE cost_state = 'pending'"),await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS provider_usage_receipts_provider_source ON provider_usage_receipts(provider, account_scope_hash, method, provider_source_key_hash) WHERE provider_source_key_hash IS NOT NULL"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS provider_reconciliation_runs (
-      id                TEXT PRIMARY KEY,
-      provider          TEXT NOT NULL,
-      status            TEXT NOT NULL DEFAULT 'running' CHECK (status IN ('running', 'completed', 'failed')),
-      checked_count     INTEGER NOT NULL DEFAULT 0 CHECK (checked_count >= 0),
-      completed_count   INTEGER NOT NULL DEFAULT 0 CHECK (completed_count >= 0),
-      pending_count     INTEGER NOT NULL DEFAULT 0 CHECK (pending_count >= 0),
-      unavailable_count INTEGER NOT NULL DEFAULT 0 CHECK (unavailable_count >= 0),
-      failed_count      INTEGER NOT NULL DEFAULT 0 CHECK (failed_count >= 0),
-      error_code        TEXT,
-      started_at        TEXT NOT NULL,
-      completed_at      TEXT,
-      created_at        TEXT NOT NULL DEFAULT (datetime('now')),
-      CHECK ((status = 'running' AND completed_at IS NULL) OR (status <> 'running' AND completed_at IS NOT NULL))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS provider_reconciliation_runs_provider_started ON provider_reconciliation_runs(provider, started_at DESC)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS provider_account_windows (
-      id                       TEXT PRIMARY KEY,
-      provider                 TEXT NOT NULL,
-      provider_product         TEXT NOT NULL,
-      account_scope_hash       TEXT NOT NULL,
-      window_start             TEXT NOT NULL,
-      window_end               TEXT NOT NULL,
-      source                   TEXT NOT NULL,
-      source_observed_at       TEXT NOT NULL,
-      account_total_usd_nanos  INTEGER NOT NULL CHECK (account_total_usd_nanos >= 0),
-      actual_usd_nanos         INTEGER NOT NULL CHECK (actual_usd_nanos >= 0),
-      measured_usd_nanos       INTEGER NOT NULL CHECK (measured_usd_nanos >= 0),
-      estimated_usd_nanos      INTEGER NOT NULL CHECK (estimated_usd_nanos >= 0),
-      unattributed_usd_nanos   INTEGER NOT NULL,
-      pending_count            INTEGER NOT NULL CHECK (pending_count >= 0),
-      unavailable_count        INTEGER NOT NULL CHECK (unavailable_count >= 0),
-      receipt_count            INTEGER NOT NULL CHECK (receipt_count >= 0),
-      created_at               TEXT NOT NULL DEFAULT (datetime('now')),
-      CHECK (window_start < window_end),
-      CHECK (account_total_usd_nanos = actual_usd_nanos + measured_usd_nanos + estimated_usd_nanos + unattributed_usd_nanos),
-      UNIQUE (provider, provider_product, account_scope_hash, window_start, window_end, source)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS provider_account_windows_lookup ON provider_account_windows(provider, provider_product, window_start, window_end)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS operation_coverage_defects (
-      id          TEXT PRIMARY KEY,
-      tool        TEXT NOT NULL,
-      method      TEXT NOT NULL,
-      phase       TEXT NOT NULL,
-      error_code  TEXT NOT NULL,
-      run_id      TEXT,
-      attempt_id  TEXT,
-      created_at  TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS operation_coverage_defects_created ON operation_coverage_defects(created_at, tool, method)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS operation_billing_links (
-      run_id         TEXT NOT NULL REFERENCES operation_runs(id) ON DELETE CASCADE,
-      billing_table  TEXT NOT NULL CHECK (billing_table IN ('billing_authorizations', 'billing_events', 'billing_debits', 'billing_credits', 'ledger')),
-      billing_key    TEXT NOT NULL,
-      relation       TEXT NOT NULL CHECK (relation IN ('hold', 'settlement', 'debit', 'refund', 'refund_pending')),
-      amount_mc      INTEGER CHECK (amount_mc IS NULL OR amount_mc >= 0),
-      created_at     TEXT NOT NULL DEFAULT (datetime('now')),
-      PRIMARY KEY (run_id, billing_table, billing_key, relation)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS operation_billing_links_run ON operation_billing_links(run_id, created_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS admin_credit_adjustments (
-      reference   TEXT PRIMARY KEY,
-      user_id     INTEGER NOT NULL REFERENCES users(id),
-      direction   TEXT NOT NULL,
-      amount_mc   INTEGER NOT NULL,
-      reason      TEXT NOT NULL,
-      actor       TEXT NOT NULL,
-      status      TEXT NOT NULL DEFAULT 'applied',
-      created_at  TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at  TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS admin_credit_adjustments_user_created ON admin_credit_adjustments(user_id, created_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS admin_credit_adjustment_events (
-      id             INTEGER PRIMARY KEY AUTOINCREMENT,
-      reference      TEXT NOT NULL REFERENCES admin_credit_adjustments(reference),
-      seq            INTEGER NOT NULL,
-      kind           TEXT NOT NULL,
-      from_amount_mc INTEGER,
-      to_amount_mc   INTEGER,
-      from_reason    TEXT,
-      to_reason      TEXT,
-      moved_mc       INTEGER NOT NULL DEFAULT 0,
-      actor          TEXT NOT NULL,
-      created_at     TEXT NOT NULL DEFAULT (datetime('now')),
-      UNIQUE (reference, seq)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS admin_credit_adjustment_events_reference ON admin_credit_adjustment_events(reference)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS site_audit_jobs (
-      id            TEXT    PRIMARY KEY,
-      user_id       INTEGER,
-      status        TEXT    DEFAULT 'pending',
-      client_domain TEXT,
-      session_path  TEXT,
-      request       TEXT,
-      result        TEXT,
-      error         TEXT,
-      created_at    TEXT    DEFAULT (datetime('now')),
-      updated_at    TEXT    DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS site_audit_phase_log (
-      id             INTEGER PRIMARY KEY AUTOINCREMENT,
-      job_id         TEXT    REFERENCES site_audit_jobs(id),
-      phase          TEXT,
-      completed_at   TEXT    DEFAULT (datetime('now')),
-      output_summary TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS site_audit_jobs_user_id ON site_audit_jobs(user_id)"),await t.execute("CREATE INDEX IF NOT EXISTS site_audit_jobs_status ON site_audit_jobs(status)"),await t.execute("CREATE INDEX IF NOT EXISTS site_audit_phase_log_job_id ON site_audit_phase_log(job_id)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS site_extract_jobs (
-      id            TEXT    PRIMARY KEY,
-      user_id       INTEGER,
-      status        TEXT    DEFAULT 'pending',
-      start_url     TEXT,
-      options       TEXT,
-      total_urls    INTEGER DEFAULT 0,
-      done_urls     INTEGER DEFAULT 0,
-      attempted_urls INTEGER DEFAULT 0,
-      successful_urls INTEGER DEFAULT 0,
-      failed_urls   INTEGER DEFAULT 0,
-      idempotency_key TEXT,
-      request_fingerprint TEXT,
-      dispatch_attempts INTEGER DEFAULT 0,
-      next_dispatch_at TEXT,
-      dispatch_error TEXT,
-      settlement_attempts INTEGER DEFAULT 0,
-      next_settlement_at TEXT,
-      settlement_error TEXT,
-      artifacts     TEXT,
-      error         TEXT,
-      public_error_json TEXT,
-      billed_mc     INTEGER,
-      created_at    TEXT    DEFAULT (datetime('now')),
-      updated_at    TEXT    DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS site_extract_pages (
-      job_id     TEXT,
-      url        TEXT,
-      page       TEXT,
-      PRIMARY KEY (job_id, url)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS site_extract_jobs_user_id ON site_extract_jobs(user_id)"),await t.execute("CREATE INDEX IF NOT EXISTS site_extract_jobs_status ON site_extract_jobs(status)"),await t.execute("CREATE INDEX IF NOT EXISTS site_extract_pages_job_id ON site_extract_pages(job_id)");try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN attempted_urls INTEGER DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN successful_urls INTEGER DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN failed_urls INTEGER DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN idempotency_key TEXT")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN request_fingerprint TEXT")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN dispatch_attempts INTEGER DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN next_dispatch_at TEXT")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN dispatch_error TEXT")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN settlement_attempts INTEGER DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN next_settlement_at TEXT")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN settlement_error TEXT")}catch{}try{await t.execute("ALTER TABLE site_extract_jobs ADD COLUMN public_error_json TEXT")}catch{}await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS site_extract_jobs_idempotency ON site_extract_jobs(user_id, idempotency_key) WHERE idempotency_key IS NOT NULL"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS password_reset_tokens (
-      token      TEXT    PRIMARY KEY,
-      user_id    INTEGER NOT NULL REFERENCES users(id),
-      expires_at TEXT    NOT NULL,
-      used       INTEGER NOT NULL DEFAULT 0,
-      created_at TEXT    NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS prt_user_id ON password_reset_tokens(user_id)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS rate_limits (
-      scope        TEXT    NOT NULL,
-      key_hash     TEXT    NOT NULL,
-      window_start INTEGER NOT NULL,
-      count        INTEGER NOT NULL DEFAULT 0,
-      updated_at   TEXT    NOT NULL DEFAULT (datetime('now')),
-      PRIMARY KEY (scope, key_hash, window_start)
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS request_events (
-      id           TEXT PRIMARY KEY,
-      user_id      INTEGER NOT NULL REFERENCES users(id),
-      source       TEXT NOT NULL,
-      status       TEXT NOT NULL,
-      query        TEXT NOT NULL,
-      location     TEXT,
-      result_count INTEGER,
-      result       TEXT,
-      error        TEXT,
-      created_at   TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS request_events_user_created_at ON request_events(user_id, created_at DESC)"),await t.execute("CREATE INDEX IF NOT EXISTS request_events_created_at ON request_events(created_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS workflow_schedules (
-      id             TEXT PRIMARY KEY,
-      user_id        INTEGER NOT NULL REFERENCES users(id),
-      workflow_id    TEXT NOT NULL,
-      name           TEXT NOT NULL,
-      input_json     TEXT NOT NULL,
-      cadence        TEXT NOT NULL,
-      cron_expr      TEXT,
-      timezone       TEXT NOT NULL DEFAULT 'UTC',
-      webhook_url    TEXT,
-      status         TEXT NOT NULL DEFAULT 'active',
-      next_run_at    TEXT,
-      last_run_at    TEXT,
-      created_at     TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at     TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS workflow_schedules_user_status ON workflow_schedules(user_id, status, created_at DESC)"),await t.execute("CREATE INDEX IF NOT EXISTS workflow_schedules_due ON workflow_schedules(status, next_run_at)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS workflow_runs (
-      id              TEXT PRIMARY KEY,
-      user_id         INTEGER NOT NULL REFERENCES users(id),
-      schedule_id     TEXT,
-      workflow_id     TEXT NOT NULL,
-      input_json      TEXT NOT NULL,
-      status          TEXT NOT NULL DEFAULT 'queued',
-      manifest_json   TEXT,
-      error_message   TEXT,
-      queued_at       TEXT NOT NULL DEFAULT (datetime('now')),
-      started_at      TEXT,
-      completed_at    TEXT,
-      idempotency_key TEXT,
-      step_index      INTEGER NOT NULL DEFAULT 0,
-      total_steps     INTEGER,
-      step_state_json TEXT,
-      step_log_json   TEXT,
-      webhook_url     TEXT
-    )
-  `);try{await t.execute("ALTER TABLE workflow_runs ADD COLUMN step_index INTEGER NOT NULL DEFAULT 0")}catch{}try{await t.execute("ALTER TABLE workflow_runs ADD COLUMN total_steps INTEGER")}catch{}try{await t.execute("ALTER TABLE workflow_runs ADD COLUMN step_state_json TEXT")}catch{}try{await t.execute("ALTER TABLE workflow_runs ADD COLUMN step_log_json TEXT")}catch{}try{await t.execute("ALTER TABLE workflow_runs ADD COLUMN webhook_url TEXT")}catch{}await t.execute("CREATE INDEX IF NOT EXISTS workflow_runs_user_created ON workflow_runs(user_id, queued_at DESC)"),await t.execute("CREATE INDEX IF NOT EXISTS workflow_runs_schedule ON workflow_runs(schedule_id, queued_at DESC)"),await t.execute("CREATE UNIQUE INDEX IF NOT EXISTS workflow_runs_idempotency ON workflow_runs(idempotency_key) WHERE idempotency_key IS NOT NULL"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS workflow_artifacts (
-      id           TEXT PRIMARY KEY,
-      run_id       TEXT NOT NULL REFERENCES workflow_runs(id),
-      user_id      INTEGER NOT NULL REFERENCES users(id),
-      kind         TEXT NOT NULL,
-      label        TEXT NOT NULL,
-      path         TEXT NOT NULL,
-      content_type TEXT NOT NULL,
-      bytes        INTEGER,
-      rows_count   INTEGER,
-      content      TEXT,
-      created_at   TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `);try{await t.execute("ALTER TABLE workflow_artifacts ADD COLUMN content TEXT")}catch{}await t.execute("CREATE INDEX IF NOT EXISTS workflow_artifacts_run ON workflow_artifacts(run_id)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS workflow_webhook_deliveries (
-      id           TEXT PRIMARY KEY,
-      run_id       TEXT NOT NULL REFERENCES workflow_runs(id),
-      schedule_id  TEXT,
-      user_id      INTEGER NOT NULL REFERENCES users(id),
-      webhook_url  TEXT NOT NULL,
-      status       TEXT NOT NULL,
-      attempts     INTEGER NOT NULL DEFAULT 0,
-      last_error   TEXT,
-      created_at   TEXT NOT NULL DEFAULT (datetime('now')),
-      delivered_at TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS workflow_webhook_deliveries_run ON workflow_webhook_deliveries(run_id)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS scheduled_run_view_links (
-      share_id      TEXT PRIMARY KEY,
-      owner_id      TEXT NOT NULL,
-      run_id        TEXT NOT NULL,
-      artifact_id   TEXT NOT NULL,
-      title         TEXT NOT NULL,
-      summary       TEXT NOT NULL,
-      renderer_key  TEXT NOT NULL CHECK (renderer_key IN ('editorial_reading_room_v1','personal_authority_v1','personal_authority_v2','newsroom_publisher_v1','blog_article_v1')),
-      token_hash    TEXT NOT NULL UNIQUE,
-      expires_at    TEXT NOT NULL,
-      revoked_at    TEXT,
-      created_at    TEXT NOT NULL
-    )
-  `),await t.execute(`
-    CREATE INDEX IF NOT EXISTS scheduled_run_view_links_owner_run
-    ON scheduled_run_view_links(owner_id, run_id, created_at DESC)
-  `),await t.execute(`
-    CREATE INDEX IF NOT EXISTS scheduled_run_view_links_expiry
-    ON scheduled_run_view_links(expires_at, revoked_at)
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS stripe_events (
-      event_id      TEXT PRIMARY KEY,
-      status        TEXT NOT NULL DEFAULT 'processed',
-      attempt_count INTEGER NOT NULL DEFAULT 1,
-      claim_token   TEXT,
-      event_type    TEXT,
-      stripe_created_at INTEGER,
-      received_at   TEXT NOT NULL DEFAULT (datetime('now')),
-      claimed_at    TEXT,
-      next_attempt_at TEXT,
-      completed_at  TEXT,
-      last_error    TEXT,
-      last_error_code TEXT,
-      processed_at  TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at    TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `);for(let s of["status TEXT NOT NULL DEFAULT 'processed'","attempt_count INTEGER NOT NULL DEFAULT 1","claim_token TEXT","event_type TEXT","stripe_created_at INTEGER","received_at TEXT","claimed_at TEXT","next_attempt_at TEXT","completed_at TEXT","last_error TEXT","last_error_code TEXT","updated_at TEXT"])try{await t.execute(`ALTER TABLE stripe_events ADD COLUMN ${s}`)}catch{}await t.execute(`
-    UPDATE stripe_events
-    SET updated_at = COALESCE(updated_at, processed_at),
-        received_at = COALESCE(received_at, processed_at, updated_at, datetime('now')),
-        claimed_at = CASE WHEN status = 'processing' THEN COALESCE(claimed_at, updated_at, processed_at) ELSE claimed_at END,
-        next_attempt_at = CASE WHEN status = 'failed' THEN COALESCE(next_attempt_at, datetime('now')) ELSE next_attempt_at END,
-        completed_at = CASE WHEN status = 'processed' THEN COALESCE(completed_at, processed_at, updated_at) ELSE completed_at END,
-        status = CASE WHEN status = 'failed' THEN 'retryable' ELSE COALESCE(status, 'processed') END,
-        attempt_count = CASE WHEN status = 'pending' THEN MAX(0, COALESCE(attempt_count, 0)) ELSE MAX(1, COALESCE(attempt_count, 1)) END
-    WHERE updated_at IS NULL
-       OR received_at IS NULL
-       OR status IS NULL
-       OR status = 'failed'
-       OR (status = 'processing' AND claimed_at IS NULL)
-       OR (status = 'processed' AND completed_at IS NULL)
-       OR attempt_count IS NULL
-       OR attempt_count < 0
-  `),await t.execute(`
-    CREATE INDEX IF NOT EXISTS stripe_events_due
-    ON stripe_events(status, next_attempt_at, claimed_at, received_at)
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS oauth_clients (
-      client_id     TEXT PRIMARY KEY,
-      redirect_uris TEXT NOT NULL,
-      name          TEXT,
-      created_at    TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS oauth_codes (
-      code           TEXT PRIMARY KEY,
-      client_id      TEXT NOT NULL,
-      redirect_uri   TEXT NOT NULL,
-      code_challenge TEXT NOT NULL,
-      identity       TEXT NOT NULL,
-      scope          TEXT NOT NULL,
-      resource       TEXT,
-      expires_at     TEXT NOT NULL,
-      created_at     TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS oauth_tokens (
-      refresh_token TEXT PRIMARY KEY,
-      client_id     TEXT NOT NULL,
-      identity      TEXT NOT NULL,
-      scope         TEXT NOT NULL,
-      resource      TEXT,
-      expires_at    TEXT NOT NULL,
-      revoked       INTEGER NOT NULL DEFAULT 0,
-      created_at    TEXT NOT NULL DEFAULT (datetime('now'))
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS oauth_tokens_identity ON oauth_tokens(identity)");for(let s of["replaced_by TEXT","rotated_at TEXT"])try{await t.execute(`ALTER TABLE oauth_tokens ADD COLUMN ${s}`)}catch{}await t.execute(`
-    CREATE TABLE IF NOT EXISTS page_snapshots (
-      user_id       INTEGER NOT NULL REFERENCES users(id),
-      url           TEXT    NOT NULL,
-      content_hash  TEXT    NOT NULL,
-      content       TEXT    NOT NULL,
-      title         TEXT,
-      content_bytes INTEGER NOT NULL,
-      truncated     INTEGER NOT NULL DEFAULT 0,
-      checked_at    TEXT    NOT NULL DEFAULT (datetime('now')),
-      PRIMARY KEY (user_id, url)
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS page_snapshots_user_checked_at ON page_snapshots(user_id, checked_at DESC)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS inbox_messages (
-      id         TEXT    PRIMARY KEY,
-      user_id    INTEGER NOT NULL REFERENCES users(id),
-      subject    TEXT    NOT NULL,
-      body_md    TEXT    NOT NULL,
-      source     TEXT    NOT NULL DEFAULT 'operator',
-      sent_at    TEXT    NOT NULL DEFAULT (datetime('now')),
-      opened_at  TEXT,
-      deleted_at TEXT
-    )
-  `),await t.execute("CREATE INDEX IF NOT EXISTS inbox_messages_user_sent_at ON inbox_messages(user_id, sent_at DESC)"),await t.execute(`
-    CREATE TABLE IF NOT EXISTS workshop_registrations (
-      id                    TEXT PRIMARY KEY,
-      event_slug            TEXT NOT NULL,
-      email                 TEXT NOT NULL,
-      first_name            TEXT NOT NULL,
-      last_name             TEXT,
-      status                TEXT NOT NULL,
-      zoom_registrant_id    TEXT,
-      zoom_join_url         TEXT,
-      resend_contact_id     TEXT,
-      confirmation_email_id TEXT,
-      field_notes_email_id  TEXT,
-      reminder_48h_email_id TEXT,
-      reminder_24h_email_id TEXT,
-      reminder_1h_email_id  TEXT,
-      last_error            TEXT,
-      registered_at         TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at            TEXT NOT NULL DEFAULT (datetime('now')),
-      UNIQUE(event_slug, email)
-    )
-  `);for(let s of["field_notes_email_id TEXT","reminder_48h_email_id TEXT","reminder_24h_email_id TEXT","reminder_1h_email_id TEXT"])try{await t.execute(`ALTER TABLE workshop_registrations ADD COLUMN ${s}`)}catch{}if(await t.execute(`
-    CREATE INDEX IF NOT EXISTS workshop_registrations_event_status
-    ON workshop_registrations(event_slug, status, registered_at)
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS browser_profile_labels (
-      user_id    INTEGER NOT NULL REFERENCES users(id),
-      profile    TEXT    NOT NULL,
-      label      TEXT    NOT NULL,
-      created_at TEXT    NOT NULL DEFAULT (datetime('now')),
-      updated_at TEXT,
-      PRIMARY KEY (user_id, profile)
-    )
-  `),await t.execute(`
-    CREATE TABLE IF NOT EXISTS serp_identities (
-      id                  TEXT    PRIMARY KEY,
-      user_id             INTEGER NOT NULL REFERENCES users(id),
-      name                TEXT    NOT NULL,
-      \u006b\u0065\u0072\u006e\u0065\u006c_profile_name TEXT    NOT NULL,
-      \u006b\u0065\u0072\u006e\u0065\u006c_proxy_id     TEXT    NOT NULL,
-      proxy_type          TEXT    NOT NULL DEFAULT 'isp',
-      country             TEXT    NOT NULL DEFAULT 'US',
-      status              TEXT    NOT NULL DEFAULT 'ready',
-      created_at          TEXT    NOT NULL DEFAULT (datetime('now')),
-      updated_at          TEXT,
-      last_used_at        TEXT,
-      UNIQUE(user_id, name)
-    )
-  `),await t.execute(`
-    CREATE UNIQUE INDEX IF NOT EXISTS serp_identities_user_name
-    ON serp_identities(user_id, name)
-  `),!await P(t))throw new Error("core schema migration finished without all required tables, indexes, and columns");await G(t),await t.execute({sql:"INSERT OR IGNORE INTO schema_migrations (version) VALUES (?)",args:[U]})}async function Ut(e={}){let t=await tt(i());return await nt(e),{providerUsageReceipts:t}}async function Dt(e,t,r){await i().execute({sql:"INSERT INTO oauth_clients (client_id, redirect_uris, name) VALUES (?, ?, ?)",args:[e,JSON.stringify(t),r]})}async function vt(e){let r=(await i().execute({sql:"SELECT * FROM oauth_clients WHERE client_id = ?",args:[e]})).rows[0];if(!r)return;let n=[];try{let s=JSON.parse(String(r.redirect_uris));Array.isArray(s)&&(n=s.filter(a=>typeof a=="string"))}catch{n=[]}return{client_id:String(r.client_id),redirect_uris:n,name:r.name!=null?String(r.name):null,created_at:String(r.created_at)}}async function kt(e){await i().execute({sql:"INSERT INTO oauth_codes (code, client_id, redirect_uri, code_challenge, identity, scope, resource, expires_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",args:[e.code,e.client_id,e.redirect_uri,e.code_challenge,e.identity,e.scope,e.resource,e.expires_at]})}async function Xt(e){let t=i(),n=(await t.execute({sql:"SELECT * FROM oauth_codes WHERE code = ?",args:[e]})).rows[0];if(await t.execute({sql:"DELETE FROM oauth_codes WHERE code = ?",args:[e]}),!!n)return{code:String(n.code),client_id:String(n.client_id),redirect_uri:String(n.redirect_uri),code_challenge:String(n.code_challenge),identity:String(n.identity),scope:String(n.scope),resource:n.resource!=null?String(n.resource):null,expires_at:String(n.expires_at)}}async function st(e){await i().execute({sql:"INSERT INTO oauth_tokens (refresh_token, client_id, identity, scope, resource, expires_at, revoked) VALUES (?, ?, ?, ?, ?, ?, 0)",args:[e.refresh_token,e.client_id,e.identity,e.scope,e.resource,e.expires_at]})}async function Ft(e){let r=(await i().execute({sql:"SELECT * FROM oauth_tokens WHERE refresh_token = ?",args:[e]})).rows[0];if(r)return{refresh_token:String(r.refresh_token),client_id:String(r.client_id),identity:String(r.identity),scope:String(r.scope),resource:r.resource!=null?String(r.resource):null,expires_at:String(r.expires_at),revoked:Number(r.revoked??0),replaced_by:r.replaced_by!=null?String(r.replaced_by):null,rotated_at:r.rotated_at!=null?String(r.rotated_at):null}}async function Mt(e){await i().execute({sql:"UPDATE oauth_tokens SET revoked = 1 WHERE refresh_token = ?",args:[e]})}async function Pt(e,t){await st(t),await i().execute({sql:"UPDATE oauth_tokens SET revoked = 1, replaced_by = ?, rotated_at = ? WHERE refresh_token = ?",args:[t.refresh_token,new Date().toISOString(),e]})}async function Ht(e,t,r){return(await i().execute({sql:`INSERT OR IGNORE INTO stripe_events
-            (event_id, event_type, stripe_created_at, status, attempt_count, received_at, next_attempt_at, processed_at, updated_at)
-          VALUES (?, ?, ?, 'pending', 0, datetime('now'), datetime('now'), datetime('now'), datetime('now'))`,args:[e,t,r]})).rowsAffected===1?"queued":"duplicate"}async function jt(e=50,t=300){let r=Math.max(1,Math.min(500,Math.trunc(e))),n=await i().execute({sql:`SELECT event_id
-          FROM stripe_events
-          WHERE (status IN ('pending', 'retryable') AND COALESCE(next_attempt_at, received_at) <= datetime('now'))
-             OR (status = 'processing' AND claimed_at <= datetime('now', '-' || ? || ' seconds'))
-          ORDER BY COALESCE(next_attempt_at, received_at), received_at
-          LIMIT ?`,args:[t,r]}),s=[];for(let a of n.rows){let _=String(a.event_id),u=N();if((await i().execute({sql:`UPDATE stripe_events
-            SET status = 'processing', attempt_count = attempt_count + 1,
-                claim_token = ?, claimed_at = datetime('now'), last_error = NULL,
-                last_error_code = NULL, updated_at = datetime('now')
-            WHERE event_id = ?
-              AND ((status IN ('pending', 'retryable') AND COALESCE(next_attempt_at, received_at) <= datetime('now'))
-                OR (status = 'processing' AND claimed_at <= datetime('now', '-' || ? || ' seconds')))`,args:[u,_,t]})).rowsAffected!==1)continue;let c=await i().execute({sql:"SELECT event_type, attempt_count FROM stripe_events WHERE event_id = ? LIMIT 1",args:[_]});s.push({eventId:_,eventType:c.rows[0]?.event_type!=null?String(c.rows[0].event_type):null,attemptCount:Number(c.rows[0]?.attempt_count??1),token:u})}return s}async function qt(e,t){return(await i().execute({sql:`UPDATE stripe_events
-          SET status = 'processed',
-              claim_token = NULL,
-              claimed_at = NULL,
-              next_attempt_at = NULL,
-              completed_at = datetime('now'),
-              last_error = NULL,
-              processed_at = datetime('now'),
-              updated_at = datetime('now')
-          WHERE event_id = ? AND status = 'processing' AND claim_token = ?`,args:[e,t]})).rowsAffected===1}async function Wt(e,t,r,n,s){return(await i().execute({sql:`UPDATE stripe_events
-          SET status = 'retryable',
-              claim_token = NULL,
-              claimed_at = NULL,
-              last_error = ?,
-              last_error_code = ?,
-              next_attempt_at = datetime('now', '+' || ? || ' seconds'),
-              updated_at = datetime('now')
-          WHERE event_id = ? AND status = 'processing' AND claim_token = ?`,args:[r.slice(0,500),n.slice(0,100),Math.max(0,Math.trunc(s)),e,t]})).rowsAffected===1}async function Bt(e,t,r,n){return(await i().execute({sql:`UPDATE stripe_events
-          SET status = 'dead_letter', claim_token = NULL, claimed_at = NULL,
-              last_error = ?, last_error_code = ?, next_attempt_at = NULL, updated_at = datetime('now')
-          WHERE event_id = ? AND status = 'processing' AND claim_token = ?`,args:[r.slice(0,500),n.slice(0,100),e,t]})).rowsAffected===1}async function Gt(){let t=(await i().execute(`
-    SELECT
-      SUM(CASE WHEN status = 'pending' THEN 1 ELSE 0 END) AS pending,
-      SUM(CASE WHEN status = 'processing' THEN 1 ELSE 0 END) AS processing,
-      SUM(CASE WHEN status = 'retryable' THEN 1 ELSE 0 END) AS retryable,
-      SUM(CASE WHEN status = 'dead_letter' THEN 1 ELSE 0 END) AS dead_letter,
-      MIN(CASE WHEN status IN ('pending', 'retryable') THEN COALESCE(next_attempt_at, received_at) END) AS oldest_due_at
-    FROM stripe_events
-  `)).rows[0];return{pending:Number(t?.pending??0),processing:Number(t?.processing??0),retryable:Number(t?.retryable??0),dead_letter:Number(t?.dead_letter??0),oldest_due_at:t?.oldest_due_at!=null?String(t.oldest_due_at):null}}async function Yt(e){return(await i().execute({sql:"SELECT 1 FROM stripe_events WHERE event_id = ? AND status = 'processed' LIMIT 1",args:[e]})).rows.length>0}function Re(){return"sk_"+j(24).toString("hex")}function Ae(e){let t=j(16).toString("hex"),r=Ne(e,t,64);return`${t}:${r.toString("hex")}`}function Kt(e,t){let[r,n]=t.split(":"),s=Buffer.from(n,"hex"),a=Ne(e,r,64);return ze(s,a)}function S(e){return{id:Number(e.id),email:String(e.email),name:e.name!=null?String(e.name):null,api_key:String(e.api_key),key_active:Number(e.key_active??1),password_hash:e.password_hash!=null?String(e.password_hash):null,created_at:String(e.created_at),active:Number(e.active),stripe_customer_id:e.stripe_customer_id!=null?String(e.stripe_customer_id):null,balance_mc:Number(e.balance_mc??0),extra_concurrency_slots:Number(e.extra_concurrency_slots??0),concurrency_stripe_sub_id:e.concurrency_stripe_sub_id!=null?String(e.concurrency_stripe_sub_id):null,concurrency_pack_quantity:Number(e.concurrency_pack_quantity??0),subscription_concurrency:Number(e.subscription_concurrency??0),subscription_tier:e.subscription_tier!=null?String(e.subscription_tier):null,subscription_id:e.subscription_id!=null?String(e.subscription_id):null,memory_plan:e.memory_plan!=null?String(e.memory_plan):"free",memory_subscription_id:e.memory_subscription_id!=null?String(e.memory_subscription_id):null,memory_provisioned:Number(e.memory_provisioned??0)}}async function $t(e){let t=await i().execute({sql:"SELECT * FROM users WHERE email = ? AND active = 1",args:[e]});return t.rows[0]?S(t.rows[0]):void 0}async function Jt(e){let t=await i().execute({sql:"SELECT * FROM users WHERE api_key = ? AND active = 1 AND key_active = 1",args:[e]});return t.rows[0]?S(t.rows[0]):void 0}async function Vt(e){let t=await i().execute({sql:"SELECT * FROM users WHERE id = ? AND active = 1",args:[e]});return t.rows[0]?S(t.rows[0]):void 0}async function zt(e){let r=(await i().execute({sql:"SELECT memory_key, memory_identity FROM users WHERE id = ?",args:[e]})).rows[0];return{memory_key:r?.memory_key!=null?String(r.memory_key):null,memory_identity:r?.memory_identity!=null?String(r.memory_identity):null}}async function Qt(e,t,r){await i().execute({sql:"UPDATE users SET memory_key = ?, memory_identity = ? WHERE id = ?",args:[t,r,e]})}async function Zt(e,t){await i().execute({sql:"UPDATE users SET password_hash = ? WHERE id = ?",args:[Ae(t),e]})}async function er(e){let t=i(),[r,n,s,a,_]=await Promise.all([t.execute({sql:"SELECT COUNT(*) as n FROM jobs WHERE user_id = ?",args:[e]}),t.execute({sql:"SELECT COUNT(*) as n FROM jobs WHERE user_id = ? AND status = 'done'",args:[e]}),t.execute({sql:"SELECT COUNT(*) as n FROM jobs WHERE user_id = ? AND status = 'failed'",args:[e]}),t.execute({sql:"SELECT COALESCE(SUM(json_extract(result, '$.totalQuestions')), 0) as n FROM jobs WHERE user_id = ? AND status = 'done'",args:[e]}),t.execute({sql:"SELECT MAX(created_at) as t FROM jobs WHERE user_id = ?",args:[e]})]);return{total:Number(r.rows[0]?.n??0),done:Number(n.rows[0]?.n??0),failed:Number(s.rows[0]?.n??0),totalQuestions:Number(a.rows[0]?.n??0),lastUsed:_.rows[0]?.t!=null?String(_.rows[0].t):null}}async function tr(e,t,r,n){let s=i(),a=Re(),_=r??j(6).toString("hex"),u=Ae(_);return{id:(await s.execute({sql:"INSERT INTO users (email, name, api_key, password_hash, stripe_customer_id) VALUES (?, ?, ?, ?, ?)",args:[e,t??null,a,u,n??null]})).lastInsertRowid,email:e,name:t,api_key:a,password:_}}async function rr(e,t,r,n){let s=Math.floor(Date.now()/1e3),a=Math.floor(s/n)*n,_=v("sha256").update(t).digest("hex"),o=await i().execute({sql:`
-      INSERT INTO rate_limits (scope, key_hash, window_start, count)
-      VALUES (?, ?, ?, 1)
-      ON CONFLICT(scope, key_hash, window_start)
-      DO UPDATE SET count = count + 1, updated_at = datetime('now')
-      RETURNING count
-    `,args:[e,_,a]}),c=Number(o.rows[0]?.count);if(!Number.isSafeInteger(c)||c<1)throw new Error("Rate-limit bucket mutation did not return a valid count");return{allowed:c<=r,count:c,remaining:Math.max(0,r-c),resetSeconds:Math.max(1,a+n-s)}}async function nr(e){let t=j(32).toString("hex"),r=v("sha256").update(t).digest("hex"),n=new Date(Date.now()+3600*1e3).toISOString();return await i().execute({sql:"INSERT INTO password_reset_tokens (token, user_id, expires_at) VALUES (?, ?, ?)",args:[r,e,n]}),t}async function sr(e){let t=i(),r=v("sha256").update(e).digest("hex"),s=(await t.execute({sql:"SELECT user_id, expires_at, used FROM password_reset_tokens WHERE token = ?",args:[r]})).rows[0];return!s||Number(s.used)||new Date(String(s.expires_at))<new Date?null:(await t.execute({sql:"UPDATE password_reset_tokens SET used = 1 WHERE token = ?",args:[r]}),Number(s.user_id))}async function ir(e){let t=Re();return await i().execute({sql:"UPDATE users SET api_key = ?, key_active = 1 WHERE id = ?",args:[t,e]}),t}async function ar(e){await i().execute({sql:"UPDATE users SET key_active = 0 WHERE id = ?",args:[e]})}async function or(){return(await i().execute("SELECT id, email, name, created_at, active FROM users ORDER BY created_at DESC")).rows.map(t=>S({...t,api_key:"",key_active:1}))}async function _r(e){await i().execute({sql:"UPDATE users SET active = 0 WHERE id = ?",args:[e]})}function R(e){return{id:String(e.id),user_id:Number(e.user_id),status:String(e.status),query:String(e.query),options:String(e.options),callback_url:e.callback_url!=null?String(e.callback_url):null,result:e.result!=null?String(e.result):null,error:e.error!=null?String(e.error):null,public_error_json:e.public_error_json!=null?String(e.public_error_json):null,created_at:String(e.created_at),started_at:e.started_at!=null?String(e.started_at):null,completed_at:e.completed_at!=null?String(e.completed_at):null}}function C(e){return e==null?null:Number(e)===1}function H(e){if(e==null)return null;try{return JSON.parse(String(e))}catch{return null}}function we(e){return{id:String(e.id),job_id:String(e.job_id),user_id:Number(e.user_id),attempt_number:Number(e.attempt_number),max_attempts:Number(e.max_attempts),query:String(e.query),location:e.location!=null?String(e.location):null,max_questions:Number(e.max_questions),status:String(e.status),outcome:e.outcome!=null?String(e.outcome):null,\u006b\u0065\u0072\u006e\u0065\u006c_session_id:e.\u006b\u0065\u0072\u006e\u0065\u006c_session_id!=null?String(e.\u006b\u0065\u0072\u006e\u0065\u006c_session_id):null,question_count:e.question_count!=null?Number(e.question_count):null,duration_ms:e.duration_ms!=null?Number(e.duration_ms):null,error:e.error!=null?String(e.error):null,will_retry:C(e.will_retry),\u006b\u0065\u0072\u006e\u0065\u006c_delete_started:Number(e.\u006b\u0065\u0072\u006e\u0065\u006c_delete_started??0)===1,\u006b\u0065\u0072\u006e\u0065\u006c_delete_succeeded:C(e.\u006b\u0065\u0072\u006e\u0065\u006c_delete_succeeded),\u006b\u0065\u0072\u006e\u0065\u006c_delete_error:e.\u006b\u0065\u0072\u006e\u0065\u006c_delete_error!=null?String(e.\u006b\u0065\u0072\u006e\u0065\u006c_delete_error):null,browser_close_succeeded:C(e.browser_close_succeeded),browser_close_error:e.browser_close_error!=null?String(e.browser_close_error):null,browser_provider:e.browser_provider!=null?String(e.browser_provider):null,provider_session_id:e.provider_session_id!=null?String(e.provider_session_id):null,provider_session_observed_at:e.provider_session_observed_at!=null?String(e.provider_session_observed_at):null,provider_lookup_status:e.provider_lookup_status!=null?String(e.provider_lookup_status):null,provider_status:e.provider_status!=null?String(e.provider_status):null,provider_error_code:e.provider_error_code!=null?String(e.provider_error_code):null,provider_error_message:e.provider_error_message!=null?String(e.provider_error_message):null,provider_reason_source:e.provider_reason_source!=null?String(e.provider_reason_source):null,provider_duration_ms:e.provider_duration_ms!=null?Number(e.provider_duration_ms):null,provider_bandwidth_bytes:e.provider_bandwidth_bytes!=null?Number(e.provider_bandwidth_bytes):null,provider_captcha:C(e.provider_captcha),provider_checked_at:e.provider_checked_at!=null?String(e.provider_checked_at):null,provider_detail:H(e.provider_detail_json),provider_disconnect_observed:C(e.provider_disconnect_observed),provider_disconnect_message:e.provider_disconnect_message!=null?String(e.provider_disconnect_message):null,debug:H(e.debug_json),created_at:String(e.created_at),completed_at:e.completed_at!=null?String(e.completed_at):null}}function h(e){let{public_error_json:t,...r}=e;return{...r,options:JSON.parse(e.options),result:e.result?JSON.parse(e.result):null,publicError:ae(t)}}async function ur(e,t,r,n){let s=N();return await it(s,e,t,r,n),s}async function it(e,t,r,n,s){if(!/^[a-zA-Z0-9-]{1,100}$/.test(e))throw new Error("job id is invalid");await i().execute({sql:"INSERT INTO jobs (id, user_id, query, options, callback_url) VALUES (?, ?, ?, ?, ?)",args:[e,t,r,JSON.stringify(n),s??null]})}async function cr(e,t,r){let n=N();return await i().execute({sql:"INSERT INTO jobs (id, user_id, query, options, status, started_at) VALUES (?, ?, ?, ?, 'running', datetime('now'))",args:[n,e,t,JSON.stringify(r)]}),n}async function dr(e,t,r,n){let s=await i().execute({sql:`INSERT INTO jobs (id, user_id, query, options, status, started_at)
-          VALUES (?, ?, ?, ?, 'running', datetime('now'))
-          ON CONFLICT(id) DO NOTHING`,args:[e,t,r,JSON.stringify(n)]}),a=await K(e,t);if(!a)throw new Error(`getOrCreateRunningJob: row missing immediately after insert/lookup for ${e}`);return{job:a,created:s.rowsAffected===1}}async function Er(e){await i().execute({sql:`
-      INSERT INTO harvest_attempts (
-        id, job_id, user_id, attempt_number, max_attempts, query, location, max_questions, status, created_at
-      )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'running', ?)
-      ON CONFLICT(job_id, attempt_number) DO NOTHING
-    `,args:[N(),e.jobId,e.userId,e.attemptNumber,e.maxAttempts,e.query,e.location,e.maxQuestions,e.startedAt]})}async function lr(e){return(await i().execute({sql:`
-      UPDATE harvest_attempts SET
-        browser_provider = ?,
-        provider_session_id = ?,
-        provider_session_observed_at = COALESCE(provider_session_observed_at, ?),
-        provider_lookup_status = CASE
-          WHEN provider_lookup_status = 'complete' THEN provider_lookup_status
-          ELSE 'pending'
-        END
-      WHERE job_id = ? AND attempt_number = ? AND status = 'running'
-    `,args:[e.browserProvider,e.providerSessionId,e.observedAt,e.jobId,e.attemptNumber]})).rowsAffected===1}async function Tr(e,t,r=new Date().toISOString()){return(await i().execute({sql:`
-      UPDATE harvest_attempts SET
-        status = 'finished',
-        outcome = COALESCE(outcome, 'timeout'),
-        question_count = COALESCE(question_count, 0),
-        duration_ms = COALESCE(duration_ms, MAX(0, CAST((julianday(?) - julianday(created_at)) * 86400000 AS INTEGER))),
-        error = COALESCE(error, 'Durable worker lease expired before attempt completion'),
-        will_retry = ?,
-        provider_error_code = COALESCE(provider_error_code, 'timeout'),
-        provider_error_message = COALESCE(provider_error_message, 'Durable worker lease expired before attempt completion'),
-        provider_reason_source = COALESCE(provider_reason_source, 'client_runtime'),
-        completed_at = COALESCE(completed_at, ?)
-      WHERE job_id = ? AND status = 'running'
-    `,args:[r,t?1:0,r,e]})).rowsAffected}async function pr(e){await i().execute({sql:`
-      UPDATE harvest_attempts SET
-        status = 'finished',
-        outcome = ?,
-        \u006b\u0065\u0072\u006e\u0065\u006c_session_id = ?,
-        question_count = ?,
-        duration_ms = ?,
-        error = ?,
-        will_retry = ?,
-        \u006b\u0065\u0072\u006e\u0065\u006c_delete_started = ?,
-        \u006b\u0065\u0072\u006e\u0065\u006c_delete_succeeded = ?,
-        \u006b\u0065\u0072\u006e\u0065\u006c_delete_error = ?,
-        browser_close_succeeded = ?,
-        browser_close_error = ?,
-        browser_provider = COALESCE(browser_provider, ?),
-        provider_session_id = COALESCE(provider_session_id, ?),
-        provider_lookup_status = CASE
-          WHEN provider_lookup_status = 'complete' THEN provider_lookup_status
-          ELSE COALESCE(?, provider_lookup_status)
-        END,
-        provider_status = COALESCE(provider_status, ?),
-        provider_error_code = CASE
-          WHEN provider_reason_source = 'provider_session_api' THEN provider_error_code
-          ELSE COALESCE(?, provider_error_code)
-        END,
-        provider_error_message = CASE
-          WHEN provider_reason_source = 'provider_session_api' THEN provider_error_message
-          ELSE COALESCE(?, provider_error_message)
-        END,
-        provider_reason_source = CASE
-          WHEN provider_reason_source = 'provider_session_api' THEN provider_reason_source
-          ELSE COALESCE(?, provider_reason_source)
-        END,
-        provider_duration_ms = COALESCE(provider_duration_ms, ?),
-        provider_bandwidth_bytes = COALESCE(provider_bandwidth_bytes, ?),
-        provider_captcha = COALESCE(provider_captcha, ?),
-        provider_checked_at = COALESCE(provider_checked_at, ?),
-        provider_detail_json = COALESCE(provider_detail_json, ?),
-        provider_disconnect_observed = COALESCE(provider_disconnect_observed, ?),
-        provider_disconnect_message = COALESCE(provider_disconnect_message, ?),
-        debug_json = ?,
-        completed_at = ?
-      WHERE job_id = ? AND attempt_number = ?
-    `,args:[e.outcome,e.\u006b\u0065\u0072\u006e\u0065\u006cSessionId,e.questionCount,e.durationMs,e.error,e.willRetry?1:0,e.\u006b\u0065\u0072\u006e\u0065\u006cDeleteStarted?1:0,e.\u006b\u0065\u0072\u006e\u0065\u006cDeleteSucceeded==null?null:e.\u006b\u0065\u0072\u006e\u0065\u006cDeleteSucceeded?1:0,e.\u006b\u0065\u0072\u006e\u0065\u006cDeleteError,e.browserCloseSucceeded==null?null:e.browserCloseSucceeded?1:0,e.browserCloseError,e.browserProvider??null,e.providerSessionId??null,e.providerLookupStatus??null,e.providerStatus??null,e.providerErrorCode??null,e.providerErrorMessage??null,e.providerReasonSource??null,e.providerDurationMs??null,e.providerBandwidthBytes??null,e.providerCaptcha==null?null:e.providerCaptcha?1:0,e.providerCheckedAt??null,e.providerDetail==null?null:Oe(e.providerDetail),e.providerDisconnectObserved==null?null:e.providerDisconnectObserved?1:0,e.providerDisconnectMessage??null,e.debug==null?null:JSON.stringify(e.debug),e.completedAt,e.jobId,e.attemptNumber]})}function Oe(e,t=4096){let r=JSON.stringify(e);return r.length<=t?r:JSON.stringify({truncated:!0})}async function mr(e){return(await i().execute({sql:`
-      UPDATE harvest_attempts SET
-        provider_lookup_status = ?,
-        provider_status = ?,
-        provider_error_code = ?,
-        provider_error_message = ?,
-        provider_reason_source = ?,
-        provider_duration_ms = ?,
-        provider_bandwidth_bytes = ?,
-        provider_captcha = ?,
-        provider_checked_at = ?,
-        provider_detail_json = ?
-      WHERE id = ?
-        AND job_id = ?
-        AND user_id = ?
-        AND browser_provider = '\u0062\u0072\u0069\u0067\u0068\u0074_\u0064\u0061\u0074\u0061_browser_api'
-        AND provider_session_id = ?
-        AND COALESCE(provider_lookup_status, '') <> 'complete'
-    `,args:[e.lookupStatus,e.providerStatus??null,e.errorCode??null,e.errorMessage??null,e.reasonSource??null,e.durationMs??null,e.bandwidthBytes??null,e.captcha==null?null:e.captcha?1:0,e.checkedAt,e.detail==null?null:Oe(e.detail),e.attemptId,e.jobId,e.userId,e.providerSessionId]})).rowsAffected===1}async function Nr(e=25){let t=Math.max(1,Math.min(100,Math.trunc(e)));return(await i().execute({sql:`
-      SELECT * FROM harvest_attempts
-      WHERE browser_provider = '\u0062\u0072\u0069\u0067\u0068\u0074_\u0064\u0061\u0074\u0061_browser_api'
-        AND provider_session_id IS NOT NULL
-        AND provider_lookup_status IN ('pending', 'temporary_error')
-      ORDER BY COALESCE(provider_checked_at, created_at) ASC
-      LIMIT ?
-    `,args:[t]})).rows.map(n=>we(n))}async function gr(e,t){return(t==null?await i().execute({sql:"SELECT * FROM harvest_attempts WHERE job_id = ? ORDER BY attempt_number ASC",args:[e]}):await i().execute({sql:`
-          SELECT ha.*
-          FROM harvest_attempts ha
-          INNER JOIN jobs j ON j.id = ha.job_id
-          WHERE ha.job_id = ? AND j.user_id = ?
-          ORDER BY ha.attempt_number ASC
-        `,args:[e,t]})).rows.map(n=>we(n))}async function K(e,t){let r=i(),n=t?await r.execute({sql:"SELECT * FROM jobs WHERE id = ? AND user_id = ?",args:[e,t]}):await r.execute({sql:"SELECT * FROM jobs WHERE id = ?",args:[e]});return n.rows[0]?h(R(n.rows[0])):void 0}async function Lr(e,t,r){await i().execute({sql:`UPDATE jobs
-          SET status = 'running', started_at = COALESCE(started_at, datetime('now'))
-          WHERE id = ? AND status = 'pending'
-            AND json_extract(options, '$.executionOwner') = ?
-            AND json_extract(options, '$.jobKind') = ?`,args:[e,t,r]});let n=await K(e);if(!(!n||n.options.executionOwner!==t||n.options.jobKind!==r))return n}async function br(e=25){let t=Math.max(1,Math.min(100,Math.floor(e)));return(await i().execute({sql:`SELECT * FROM jobs
-          WHERE status = 'pending'
-            AND json_extract(options, '$.executionOwner') = 'inngest'
-            AND json_extract(options, '$.jobKind') = 'extract_url'
-            AND json_extract(options, '$.billingDebitKey') IS NOT NULL
-            AND created_at <= datetime('now', '-30 seconds')
-            AND datetime(COALESCE(json_extract(options, '$.extractUrlLastDispatchAt'), '1970-01-01')) <= datetime('now', '-30 seconds')
-          ORDER BY created_at
-          LIMIT ?`,args:[t]})).rows.map(n=>h(R(n)))}async function Sr(e,t){return(await i().execute({sql:`UPDATE jobs
-          SET options = json_set(options,
-            '$.extractUrlDispatchAttempts', COALESCE(json_extract(options, '$.extractUrlDispatchAttempts'), 0) + 1,
-            '$.extractUrlLastDispatchAt', ?,
-            '$.extractUrlLastDispatchError', ?)
-          WHERE id = ? AND status = 'pending'
-            AND json_extract(options, '$.executionOwner') = 'inngest'
-            AND json_extract(options, '$.jobKind') = 'extract_url'`,args:[new Date().toISOString(),t??null,e]})).rowsAffected===1}async function Rr(e){return(await i().execute({sql:"SELECT * FROM jobs WHERE user_id = ? ORDER BY created_at DESC LIMIT 50",args:[e]})).rows.map(r=>h(R(r)))}async function Ar(e,t){let n=(await i().execute({sql:"SELECT content_hash, content, title, content_bytes, truncated, checked_at FROM page_snapshots WHERE user_id = ? AND url = ?",args:[e,t]})).rows[0];return n?{contentHash:String(n.content_hash),content:String(n.content),title:n.title==null?null:String(n.title),contentBytes:Number(n.content_bytes),truncated:Number(n.truncated)===1,checkedAt:String(n.checked_at)}:null}async function wr(e,t,r){await i().execute({sql:`
-      INSERT INTO page_snapshots (user_id, url, content_hash, content, title, content_bytes, truncated, checked_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'))
-      ON CONFLICT(user_id, url) DO UPDATE SET
-        content_hash  = excluded.content_hash,
-        content       = excluded.content,
-        title         = excluded.title,
-        content_bytes = excluded.content_bytes,
-        truncated     = excluded.truncated,
-        checked_at    = excluded.checked_at
-    `,args:[e,t,r.contentHash,r.content,r.title,r.contentBytes,r.truncated?1:0]})}var at=32*1024;function ot(e){if(e==null)return null;let t=JSON.stringify(e),r=Buffer.byteLength(t,"utf8");return r<=at?t:JSON.stringify({truncated:!0,originalBytes:r,sha256:v("sha256").update(t).digest("hex")})}function _t(e){let t=e.result!=null?String(e.result):null;return{id:String(e.id),user_id:Number(e.user_id),source:String(e.source),status:String(e.status),query:String(e.query),location:e.location!=null?String(e.location):null,result_count:e.result_count!=null?Number(e.result_count):null,result:t?JSON.parse(t):null,error:e.error!=null?String(e.error):null,created_at:String(e.created_at)}}async function Or(e){let t=N();return await i().execute({sql:`
-      INSERT INTO request_events (id, user_id, source, status, query, location, result_count, result, error)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `,args:[t,e.userId,e.source,e.status,e.query,e.location??null,e.resultCount??null,ot(e.result),e.error??null]}),t}async function fr(e,t=100){return(await i().execute({sql:`
-      SELECT id, user_id, source, status, query, location, result_count, NULL AS result, error, created_at
-      FROM request_events
-      WHERE user_id = ?
-      ORDER BY created_at DESC
-      LIMIT ?
-    `,args:[e,t]})).rows.map(n=>_t(n))}function fe(e){if(e==null)return{};try{let t=JSON.parse(String(e));return t&&typeof t=="object"&&!Array.isArray(t)?t:{}}catch{return{}}}function $(e){return{id:String(e.id),user_id:Number(e.user_id),workflow_id:String(e.workflow_id),name:String(e.name),input:fe(e.input_json),cadence:String(e.cadence),cron_expr:e.cron_expr!=null?String(e.cron_expr):null,timezone:String(e.timezone??"UTC"),webhook_url:e.webhook_url!=null?String(e.webhook_url):null,status:String(e.status),next_run_at:e.next_run_at!=null?String(e.next_run_at):null,last_run_at:e.last_run_at!=null?String(e.last_run_at):null,created_at:String(e.created_at),updated_at:String(e.updated_at)}}function J(e){return{id:String(e.id),user_id:Number(e.user_id),schedule_id:e.schedule_id!=null?String(e.schedule_id):null,workflow_id:String(e.workflow_id),input:fe(e.input_json),status:String(e.status),manifest:e.manifest_json!=null?H(e.manifest_json):null,error_message:e.error_message!=null?String(e.error_message):null,queued_at:String(e.queued_at),started_at:e.started_at!=null?String(e.started_at):null,completed_at:e.completed_at!=null?String(e.completed_at):null,idempotency_key:e.idempotency_key!=null?String(e.idempotency_key):null,step_index:e.step_index!=null?Number(e.step_index):0,total_steps:e.total_steps!=null?Number(e.total_steps):null,step_log:he(e.step_log_json),webhook_url:e.webhook_url!=null?String(e.webhook_url):null}}function he(e){if(e==null)return[];try{let t=JSON.parse(String(e));return Array.isArray(t)?t:[]}catch{return[]}}function Ie(e){return{id:String(e.id),run_id:String(e.run_id),user_id:Number(e.user_id),kind:String(e.kind),label:String(e.label),path:String(e.path),content_type:String(e.content_type),bytes:e.bytes!=null?Number(e.bytes):null,rows_count:e.rows_count!=null?Number(e.rows_count):null,content:e.content!=null?String(e.content):null,created_at:String(e.created_at)}}async function hr(e){let t=N();await i().execute({sql:`
-      INSERT INTO workflow_schedules (
-        id, user_id, workflow_id, name, input_json, cadence, timezone, webhook_url, next_run_at
-      )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `,args:[t,e.userId,e.workflowId,e.name,JSON.stringify(e.workflowInput),e.cadence,e.timezone??"UTC",e.webhookUrl??null,e.nextRunAt??null]});let r=await Y(t,e.userId);if(!r)throw new Error("Failed to create workflow schedule");return r}async function Y(e,t){let r=t==null?await i().execute({sql:"SELECT * FROM workflow_schedules WHERE id = ? AND status != ? LIMIT 1",args:[e,"deleted"]}):await i().execute({sql:"SELECT * FROM workflow_schedules WHERE id = ? AND user_id = ? AND status != ? LIMIT 1",args:[e,t,"deleted"]});return r.rows[0]?$(r.rows[0]):null}async function Ir(e){return(await i().execute({sql:"SELECT * FROM workflow_schedules WHERE user_id = ? AND status != 'deleted' ORDER BY created_at DESC LIMIT 100",args:[e]})).rows.map(r=>$(r))}async function xr(e){let t=[],r=[];return e.name!==void 0&&(t.push("name = ?"),r.push(e.name)),e.status!==void 0&&(t.push("status = ?"),r.push(e.status)),e.workflowInput!==void 0&&(t.push("input_json = ?"),r.push(JSON.stringify(e.workflowInput))),e.cadence!==void 0&&(t.push("cadence = ?"),r.push(e.cadence)),e.timezone!==void 0&&(t.push("timezone = ?"),r.push(e.timezone)),e.webhookUrl!==void 0&&(t.push("webhook_url = ?"),r.push(e.webhookUrl)),e.nextRunAt!==void 0&&(t.push("next_run_at = ?"),r.push(e.nextRunAt)),t.length===0||(t.push("updated_at = datetime('now')"),await i().execute({sql:`UPDATE workflow_schedules SET ${t.join(", ")} WHERE id = ? AND user_id = ? AND status != 'deleted'`,args:[...r,e.id,e.userId]})),Y(e.id,e.userId)}async function yr(e,t){return(await i().execute({sql:"UPDATE workflow_schedules SET status = 'deleted', updated_at = datetime('now') WHERE id = ? AND user_id = ? AND status != 'deleted'",args:[e,t]})).rowsAffected>0}async function Cr(e,t=10){return(await i().execute({sql:`
-      SELECT * FROM workflow_schedules
-      WHERE status = 'active' AND next_run_at IS NOT NULL AND next_run_at <= ?
-      ORDER BY next_run_at ASC
-      LIMIT ?
-    `,args:[e,t]})).rows.map(n=>$(n))}async function Ur(e,t,r){await i().execute({sql:"UPDATE workflow_schedules SET last_run_at = ?, next_run_at = ?, updated_at = datetime('now') WHERE id = ?",args:[t,r,e]})}async function Dr(e){let t=e.id??N(),r=[t,e.userId,e.scheduleId??null,e.workflowId,JSON.stringify(e.workflowInput),e.idempotencyKey??null,e.webhookUrl??null,e.totalSteps??null];try{await i().execute({sql:`
-        INSERT INTO workflow_runs (id, user_id, schedule_id, workflow_id, input_json, idempotency_key, webhook_url, total_steps)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?)
-      `,args:r})}catch(s){if(e.idempotencyKey){let a=await ct(e.idempotencyKey);if(a)return a}throw s}let n=await ut(t,e.userId);if(!n)throw new Error("Failed to create workflow run");return n}async function ut(e,t){let r=t==null?await i().execute({sql:"SELECT * FROM workflow_runs WHERE id = ? LIMIT 1",args:[e]}):await i().execute({sql:"SELECT * FROM workflow_runs WHERE id = ? AND user_id = ? LIMIT 1",args:[e,t]});return r.rows[0]?J(r.rows[0]):null}async function ct(e){let t=await i().execute({sql:"SELECT * FROM workflow_runs WHERE idempotency_key = ? LIMIT 1",args:[e]});return t.rows[0]?J(t.rows[0]):null}async function vr(e,t=50){return(await i().execute({sql:"SELECT * FROM workflow_runs WHERE user_id = ? ORDER BY queued_at DESC LIMIT ?",args:[e,t]})).rows.map(n=>J(n))}async function kr(e){await i().execute({sql:"UPDATE workflow_runs SET status = 'running', started_at = COALESCE(started_at, datetime('now')) WHERE id = ?",args:[e]})}async function Xr(e,t,r){await i().execute({sql:"UPDATE workflow_runs SET status = ?, manifest_json = ?, completed_at = datetime('now') WHERE id = ?",args:[t,JSON.stringify(r),e]})}async function Fr(e,t,r){await i().execute({sql:"UPDATE workflow_runs SET status = 'failed', error_message = ?, manifest_json = ?, completed_at = datetime('now') WHERE id = ?",args:[t,r==null?null:JSON.stringify(r),e]})}function dt(e){return e==="html_report"?"text/html; charset=utf-8":e==="csv"?"text/csv; charset=utf-8":e==="json"?"application/json; charset=utf-8":"text/plain; charset=utf-8"}async function xe(e,t,r){await i().execute({sql:`
-      INSERT INTO workflow_artifacts (id, run_id, user_id, kind, label, path, content_type, bytes, rows_count, content)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `,args:[N(),e,t,r.kind,r.label,r.path,dt(r.kind),r.bytes??null,r.rows??null,r.content??null]})}async function Mr(e,t,r){await i().execute({sql:"DELETE FROM workflow_artifacts WHERE run_id = ? AND user_id = ?",args:[e,t]});for(let n of r)await xe(e,t,n);return ye(e,t)}async function Pr(e,t,r){for(let n of r)await xe(e,t,n);return ye(e,t)}async function Hr(e,t){let n=(t==null?await i().execute({sql:"SELECT step_index, total_steps, step_state_json, step_log_json FROM workflow_runs WHERE id = ? LIMIT 1",args:[e]}):await i().execute({sql:"SELECT step_index, total_steps, step_state_json, step_log_json FROM workflow_runs WHERE id = ? AND user_id = ? LIMIT 1",args:[e,t]})).rows[0];return n?{stepIndex:n.step_index!=null?Number(n.step_index):0,totalSteps:n.total_steps!=null?Number(n.total_steps):null,state:n.step_state_json!=null?H(n.step_state_json):null,stepLog:he(n.step_log_json)}:null}async function jr(e,t){let r=[...t.appendLog,t.logEntry];await i().execute({sql:"UPDATE workflow_runs SET status = ?, step_index = ?, total_steps = ?, step_state_json = ?, step_log_json = ?, started_at = COALESCE(started_at, datetime('now')) WHERE id = ?",args:[t.status,t.stepIndex,t.totalSteps,JSON.stringify(t.state??null),JSON.stringify(r),e]})}async function ye(e,t){return(await i().execute({sql:"SELECT * FROM workflow_artifacts WHERE run_id = ? AND user_id = ? ORDER BY created_at ASC",args:[e,t]})).rows.map(n=>Ie(n))}async function qr(e,t){let r=await i().execute({sql:"SELECT * FROM workflow_artifacts WHERE id = ? AND user_id = ? LIMIT 1",args:[e,t]});return r.rows[0]?Ie(r.rows[0]):null}async function Wr(e){await i().execute({sql:`
-      INSERT INTO workflow_webhook_deliveries (
-        id, run_id, schedule_id, user_id, webhook_url, status, attempts, last_error, delivered_at
-      )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `,args:[N(),e.runId,e.scheduleId??null,e.userId,e.webhookUrl,e.status,e.attempts,e.lastError??null,e.status==="delivered"?new Date().toISOString():null]})}async function Br(){let e=await i().execute("SELECT COUNT(*) as n FROM users WHERE active = 1");return Number(e.rows[0]?.n??0)}async function Gr(e){let t=await i().execute({sql:"SELECT COUNT(*) as n FROM jobs WHERE user_id = ? AND (status = 'pending' OR (status = 'running' AND started_at > datetime('now', '-10 minutes')))",args:[e]});return Number(t.rows[0]?.n??0)}async function Yr(){let e=i(),t=await e.execute(`
-    SELECT * FROM jobs
-    WHERE status = 'pending'
-      AND COALESCE(json_extract(options, '$.executionOwner'), 'cron') NOT IN ('direct', 'inngest')
-    ORDER BY created_at
-    LIMIT 1
-  `),r=t.rows[0]?R(t.rows[0]):void 0;return r?(await e.execute({sql:"UPDATE jobs SET status = 'running', started_at = datetime('now') WHERE id = ? AND status = 'pending'",args:[r.id]})).rowsAffected===0?void 0:{...r,status:"running"}:void 0}var V=45e3;async function Kr(e){let t=i(),r=await K(e);if(!r||r.options.executionOwner!=="direct"||r.options.serpOnly===!0)return;let n=Math.max(0,Number(r.options.paaRecoveryCount??0));if(r.status!=="running"){if(r.status==="pending"){let s=N(),a=new Date().toISOString(),_=new Date(Date.now()+V).toISOString();return(await t.execute({sql:`UPDATE jobs
-            SET status = 'running', started_at = datetime('now'), error = NULL,
-                options = json_set(options,
-                  '$.paaLeaseToken', ?,
-                  '$.paaLeaseExpiresAt', ?,
-                  '$.paaLastDispatchAt', ?)
-            WHERE id = ? AND status = 'pending'`,args:[s,_,a,e]})).rowsAffected===0?void 0:{job:{...r,status:"running",started_at:a,options:{...r.options,paaLeaseToken:s,paaLeaseExpiresAt:_,paaLastDispatchAt:a}},leaseToken:s,recoveryCount:n}}return{job:r,leaseToken:null,recoveryCount:n}}}async function $r(e,t){return(await i().execute({sql:"UPDATE jobs SET result = ? WHERE id = ? AND status = 'running'",args:[JSON.stringify(t),e]})).rowsAffected===1}async function Jr(e,t,r){let n=new Date(Date.now()+V).toISOString();return(await i().execute({sql:`UPDATE jobs SET result = ?, options = json_set(options, '$.paaLeaseExpiresAt', ?)
-          WHERE id = ? AND status = 'running' AND json_extract(options, '$.paaLeaseToken') = ?`,args:[JSON.stringify(r),n,e,t]})).rowsAffected===1}async function Vr(e,t){let r=new Date(Date.now()+V).toISOString();return(await i().execute({sql:`UPDATE jobs SET options = json_set(options, '$.paaLeaseExpiresAt', ?)
-          WHERE id = ? AND status = 'running' AND json_extract(options, '$.paaLeaseToken') = ?`,args:[r,e,t]})).rowsAffected===1}async function zr(e,t,r){return(await i().execute({sql:`UPDATE jobs SET status = 'done', result = ?, error = NULL, public_error_json = NULL,
-            completed_at = datetime('now'),
-            options = json_set(options, '$.paaLeaseExpiresAt', NULL)
-          WHERE id = ? AND status = 'running' AND json_extract(options, '$.paaLeaseToken') = ?`,args:[JSON.stringify(r),e,t]})).rowsAffected===1}async function Qr(e,t,r,n){return(await i().execute({sql:`UPDATE jobs SET status = 'failed', error = ?, public_error_json = ?, completed_at = datetime('now'),
-            options = json_set(options, '$.paaLeaseExpiresAt', NULL)
-          WHERE id = ? AND status = 'running' AND json_extract(options, '$.paaLeaseToken') = ?`,args:[r,O(n),e,t]})).rowsAffected===1}async function Zr(e,t){let r=new Date().toISOString();return(await i().execute({sql:`UPDATE jobs SET status = 'pending', started_at = NULL,
-            result = CASE WHEN json_valid(result) THEN json_set(result,
-              '$.progress.lifecycle.discoveryStatus', 'interrupted',
-              '$.progress.lifecycle.completionReason', 'The previous worker lease expired; the same job is recovering automatically.',
-              '$.progress.lifecycle.automaticRetries', COALESCE(json_extract(options, '$.paaRecoveryCount'), 0) + 1)
-              ELSE result END,
-            options = json_set(options,
-              '$.paaRecoveryCount', COALESCE(json_extract(options, '$.paaRecoveryCount'), 0) + 1,
-              '$.paaLeaseToken', NULL,
-              '$.paaLeaseExpiresAt', NULL,
-              '$.paaRecoveryQueuedAt', ?)
-          WHERE id = ? AND status = 'running'
-            AND (
-              datetime(json_extract(options, '$.paaLeaseExpiresAt')) <= datetime('now')
-              OR (json_extract(options, '$.paaLeaseExpiresAt') IS NULL AND started_at <= datetime('now', '-15 minutes'))
-            )
-            AND COALESCE(json_extract(options, '$.paaRecoveryCount'), 0) < ?`,args:[r,e,Math.max(0,Math.trunc(t))]})).rowsAffected===1}async function en(e,t){return(await i().execute({sql:`UPDATE jobs SET status = 'done', result = ?, error = NULL, public_error_json = NULL, completed_at = datetime('now')
-          WHERE id = ? AND status = 'running'
-            AND (
-              datetime(json_extract(options, '$.paaLeaseExpiresAt')) <= datetime('now')
-              OR (json_extract(options, '$.paaLeaseExpiresAt') IS NULL AND started_at <= datetime('now', '-15 minutes'))
-            )`,args:[JSON.stringify(t),e]})).rowsAffected===1}async function tn(e,t,r){return(await i().execute({sql:`UPDATE jobs SET status = 'failed', error = ?, public_error_json = ?, completed_at = datetime('now')
-          WHERE id = ? AND status = 'running'
-            AND (
-              datetime(json_extract(options, '$.paaLeaseExpiresAt')) <= datetime('now')
-              OR (json_extract(options, '$.paaLeaseExpiresAt') IS NULL AND started_at <= datetime('now', '-15 minutes'))
-            )`,args:[t,O(r),e]})).rowsAffected===1}async function rn(e=25){let t=Math.max(1,Math.min(100,Math.floor(e)));return(await i().execute({sql:`SELECT * FROM jobs
-          WHERE status IN ('done', 'failed', 'cancelled')
-            AND json_extract(options, '$.executionOwner') IN ('direct', 'inngest')
-            AND json_extract(options, '$.billingDebitKey') IS NOT NULL
-            AND CAST(json_extract(options, '$.billingHoldMc') AS INTEGER) > 0
-            AND json_extract(options, '$.billingSettledAt') IS NULL
-          ORDER BY completed_at DESC
-          LIMIT ?`,args:[t]})).rows.map(n=>h(R(n)))}async function nn(e=25){let t=Math.max(1,Math.min(100,Math.floor(e)));return(await i().execute({sql:`SELECT * FROM jobs
-          WHERE status = 'running'
-            AND started_at <= datetime('now', '-15 minutes')
-            AND json_extract(options, '$.executionOwner') IN ('direct', 'inngest')
-          ORDER BY started_at
-          LIMIT ?`,args:[t]})).rows.map(n=>h(R(n)))}async function sn(e=25){let t=Math.max(1,Math.min(100,Math.floor(e)));return(await i().execute({sql:`SELECT * FROM jobs
-          WHERE json_extract(options, '$.executionOwner') = 'direct'
-            AND json_extract(options, '$.serpOnly') IS NOT 1
-            AND (
-              (status = 'running' AND (
-                datetime(json_extract(options, '$.paaLeaseExpiresAt')) <= datetime('now')
-                OR (json_extract(options, '$.paaLeaseExpiresAt') IS NULL AND started_at <= datetime('now', '-15 minutes'))
-              ))
-              OR
-              (status = 'pending' AND COALESCE(json_extract(options, '$.paaRecoveryCount'), 0) > 0
-                AND datetime(COALESCE(json_extract(options, '$.paaLastDispatchAt'), '1970-01-01')) <= datetime('now', '-30 seconds'))
-            )
-          ORDER BY COALESCE(started_at, created_at)
-          LIMIT ?`,args:[t]})).rows.map(n=>h(R(n)))}async function an(e,t,r=new Date().toISOString()){if(!Number.isSafeInteger(t)||t<0)throw new Error("job billed amount must be a non-negative integer");return(await i().execute({sql:`UPDATE jobs
-          SET options = json_set(options, '$.billingSettledAt', ?, '$.billedMc', ?)
-          WHERE id = ?`,args:[r,t,e]})).rowsAffected===1}async function on(e,t){await i().execute({sql:"UPDATE jobs SET status = 'done', result = ?, error = NULL, public_error_json = NULL, completed_at = datetime('now') WHERE id = ?",args:[JSON.stringify(t),e]})}async function _n(e,t){return(await i().execute({sql:`UPDATE jobs SET status = 'done', result = ?, error = NULL, public_error_json = NULL, completed_at = datetime('now')
-          WHERE id = ? AND status = 'running'`,args:[JSON.stringify(t),e]})).rowsAffected===1}async function un(e,t,r){await i().execute({sql:"UPDATE jobs SET status = 'failed', error = ?, public_error_json = ?, completed_at = datetime('now') WHERE id = ?",args:[t,O(r),e]})}async function cn(e,t,r){return(await i().execute({sql:`UPDATE jobs SET status = 'failed', error = ?, public_error_json = ?, completed_at = datetime('now')
-          WHERE id = ? AND status = 'running'`,args:[t,O(r),e]})).rowsAffected===1}async function dn(e,t,r){await i().execute({sql:"UPDATE jobs SET status = 'cancelled', error = ?, public_error_json = ?, completed_at = datetime('now') WHERE id = ?",args:[t,O(r),e]})}function z(e){return{id:String(e.id),user_id:Number(e.user_id),status:String(e.status),entity_name:String(e.entity_name),entity_type:String(e.entity_type),url:e.url!=null?String(e.url):null,request:String(e.request),result:e.result!=null?String(e.result):null,error:e.error!=null?String(e.error):null,created_at:String(e.created_at),updated_at:String(e.updated_at)}}function Et(e){return{id:Number(e.id),job_id:String(e.job_id),phase:String(e.phase),output:String(e.output),created_at:String(e.created_at)}}async function En(e,t,r,n,s,a){await i().execute({sql:"INSERT INTO kpo_jobs (id, user_id, status, entity_name, entity_type, url, request) VALUES (?, ?, 'pending', ?, ?, ?, ?)",args:[e,t,r,n,a??null,JSON.stringify(s)]})}async function ln(){let t=await i().execute("UPDATE kpo_jobs SET status='running', updated_at=datetime('now') WHERE id = (SELECT id FROM kpo_jobs WHERE status='pending' ORDER BY created_at ASC LIMIT 1) RETURNING *");return t.rowsAffected===0?null:t.rows[0]?z(t.rows[0]):null}async function Tn(e){let t=await i().execute({sql:"SELECT * FROM kpo_jobs WHERE id = ?",args:[e]});return t.rows[0]?z(t.rows[0]):null}async function pn(e,t){await i().execute({sql:"UPDATE kpo_jobs SET status = ?, updated_at = datetime('now') WHERE id = ?",args:[t,e]})}async function mn(e,t){await i().execute({sql:"UPDATE kpo_jobs SET status = 'done', result = ?, updated_at = datetime('now') WHERE id = ?",args:[JSON.stringify(t),e]})}async function Nn(e,t){await i().execute({sql:"UPDATE kpo_jobs SET status = 'failed', error = ?, updated_at = datetime('now') WHERE id = ?",args:[t,e]})}async function gn(e,t,r){await i().execute({sql:"INSERT INTO kpo_phase_log (job_id, phase, output) VALUES (?, ?, ?)",args:[e,t,JSON.stringify(r)]})}async function Ln(e){return(await i().execute({sql:"SELECT * FROM kpo_phase_log WHERE job_id = ? ORDER BY created_at ASC",args:[e]})).rows.map(r=>Et(r))}async function bn(e){return(e!=null?await i().execute({sql:"SELECT * FROM kpo_jobs WHERE user_id = ? ORDER BY created_at DESC LIMIT 50",args:[e]}):await i().execute("SELECT * FROM kpo_jobs ORDER BY created_at DESC LIMIT 50")).rows.map(r=>z(r))}async function Sn(e){let t=await i().execute({sql:"SELECT * FROM users WHERE stripe_customer_id = ? AND active = 1",args:[e]});return t.rows[0]?S(t.rows[0]):void 0}async function Rn(e,t){await i().execute({sql:"UPDATE users SET stripe_customer_id = ? WHERE id = ?",args:[t,e]})}async function An(e,t){if(!Number.isSafeInteger(t)||t<0)throw new Error("extra concurrency slots must be a non-negative safe integer");await lt(e,Math.ceil(t/2))}async function lt(e,t){if(!Number.isSafeInteger(t)||t<0)throw new Error("concurrency pack quantity must be a non-negative safe integer");await i().execute({sql:"UPDATE users SET concurrency_pack_quantity = ?, extra_concurrency_slots = ? WHERE id = ?",args:[t,t*2,e]})}async function wn(e,t){await i().execute({sql:"UPDATE users SET concurrency_stripe_sub_id = ? WHERE id = ?",args:[t,e]})}async function On(e,t,r,n){await i().execute({sql:"UPDATE users SET subscription_tier = ?, subscription_concurrency = ?, subscription_id = ? WHERE id = ?",args:[t,Math.max(0,Math.round(r)),n,e]})}async function fn(e){if(!e.invoiceId||e.invoiceId.length>500)throw new Error("invoice id is required and must be bounded");if(!Number.isSafeInteger(e.creditsMc)||e.creditsMc<=0)throw new Error("subscription credit amount must be a positive integer");await A(e.userId);let t=i(),r=e.neverExpires?"9999-12-31 23:59:59":null,n=await t.batch([{sql:`INSERT OR IGNORE INTO ledger (user_id, amount_mc, operation, description, stripe_pi)
-            VALUES (?, ?, 'subscription', ?, ?)`,args:[e.userId,e.creditsMc,e.description,e.invoiceId]},{sql:`INSERT INTO credit_lots (user_id, amount_mc, remaining_mc, source, stripe_pi, expires_at, never_expires)
-            SELECT ?, ?, ?, 'subscription', ?, COALESCE(?, datetime('now', ?)), ?
-            WHERE changes() = 1`,args:[e.userId,e.creditsMc,e.creditsMc,e.invoiceId,r,D,e.neverExpires?1:0]},{sql:"UPDATE users SET balance_mc = balance_mc + ? WHERE id = ? AND changes() = 1",args:[e.creditsMc,e.userId]},{sql:`UPDATE users
-            SET subscription_tier = ?, subscription_concurrency = ?, subscription_id = ?,
-                memory_plan = CASE WHEN ? IS NOT NULL THEN ? ELSE memory_plan END,
-                memory_subscription_id = CASE WHEN ? IS NOT NULL THEN NULL ELSE memory_subscription_id END
-            WHERE id = ?
-              AND EXISTS (
-                SELECT 1 FROM ledger
-                WHERE stripe_pi = ? AND user_id = ? AND amount_mc = ? AND operation = 'subscription'
-              )`,args:[e.tier,Math.max(0,Math.round(e.concurrency)),e.subscriptionId,e.includedMemoryPlan,e.includedMemoryPlan,e.includedMemoryPlan,e.userId,e.invoiceId,e.userId,e.creditsMc]}],"write"),a=(await t.execute({sql:`SELECT l.user_id, l.amount_mc, l.operation, u.balance_mc
-          FROM ledger l JOIN users u ON u.id = l.user_id
-          WHERE l.stripe_pi = ? LIMIT 1`,args:[e.invoiceId]})).rows[0];if(!a||Number(a.user_id)!==e.userId||Number(a.amount_mc)!==e.creditsMc||String(a.operation)!=="subscription")throw new Error("invoice idempotency key conflicts with an existing grant");return{granted:n[0]?.rowsAffected===1,balance_mc:Number(a.balance_mc??0)}}function Tt(e){return{user_id:Number(e.user_id),stripe_subscription_id:e.stripe_subscription_id!=null?String(e.stripe_subscription_id):null,stripe_subscription_item_id:e.stripe_subscription_item_id!=null?String(e.stripe_subscription_item_id):null,price_id:e.price_id!=null?String(e.price_id):null,quantity:Math.max(0,Number(e.quantity??0)),status:["pending","synced","blocked","error"].includes(String(e.status))?String(e.status):"error",last_error_code:e.last_error_code!=null?String(e.last_error_code):null,checked_at:String(e.checked_at),synced_at:e.synced_at!=null?String(e.synced_at):null,updated_at:String(e.updated_at)}}async function pt(e){let r=(await i().execute({sql:"SELECT * FROM connected_account_billing WHERE user_id = ? LIMIT 1",args:[e]})).rows[0];return r?Tt(r):null}async function hn(e){let t=Math.max(0,Math.round(e.quantity));await i().execute({sql:`INSERT INTO connected_account_billing
-      (user_id, stripe_subscription_id, stripe_subscription_item_id, price_id, quantity, status, last_error_code, checked_at, synced_at, updated_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'), CASE WHEN ? THEN datetime('now') ELSE NULL END, datetime('now'))
-      ON CONFLICT(user_id) DO UPDATE SET
-        stripe_subscription_id = excluded.stripe_subscription_id,
-        stripe_subscription_item_id = excluded.stripe_subscription_item_id,
-        price_id = excluded.price_id,
-        quantity = excluded.quantity,
-        status = excluded.status,
-        last_error_code = excluded.last_error_code,
-        checked_at = datetime('now'),
-        synced_at = CASE WHEN ? THEN datetime('now') ELSE connected_account_billing.synced_at END,
-        updated_at = datetime('now')`,args:[e.userId,e.stripeSubscriptionId,e.stripeSubscriptionItemId,e.priceId,t,e.status,e.lastErrorCode??null,e.synced===!0?1:0,e.synced===!0?1:0]});let r=await pt(e.userId);if(!r)throw new Error("connected account billing state was not persisted");return r}async function In(e=60,t=20){let r=`-${Math.max(1,Math.round(e))} minutes`;return(await i().execute({sql:`SELECT u.*
-      FROM users u
-      LEFT JOIN connected_account_billing b ON b.user_id = u.id
-      WHERE u.active = 1
-        AND u.subscription_id IS NOT NULL
-        AND (b.checked_at IS NULL OR b.checked_at <= datetime('now', ?))
-      ORDER BY COALESCE(b.checked_at, u.created_at) ASC
-      LIMIT ?`,args:[r,Math.max(1,Math.min(100,Math.round(t)))]})).rows.map(s=>S(s))}async function xn(e,t,r){await i().execute({sql:"UPDATE users SET memory_plan = ?, memory_subscription_id = ? WHERE id = ?",args:[t,r,e]})}async function yn(e){let r=(await i().execute({sql:"SELECT memory_plan, memory_subscription_id FROM users WHERE id = ?",args:[e]})).rows[0];return{plan:r?.memory_plan!=null?String(r.memory_plan):"free",memory_subscription_id:r?.memory_subscription_id!=null?String(r.memory_subscription_id):null}}async function Cn(e){let r=(await i().execute({sql:"SELECT memory_provisioned FROM users WHERE id = ?",args:[e]})).rows[0];return Number(r?.memory_provisioned??0)===1}async function Un(e,t){await i().execute({sql:"UPDATE users SET memory_provisioned = ? WHERE id = ?",args:[t?1:0,e]})}async function Dn(e){let t=await i().execute({sql:"SELECT * FROM users WHERE memory_subscription_id = ? AND active = 1",args:[e]});return t.rows[0]?S(t.rows[0]):void 0}var D="+3 months";async function A(e){return(await i().execute({sql:`INSERT INTO credit_lots (user_id, amount_mc, remaining_mc, source, expires_at)
-          SELECT ?, legacy.balance_mc, legacy.balance_mc, 'migration', datetime('now', ?)
-          FROM (
-            SELECT COALESCE(SUM(amount_mc), 0) AS balance_mc
-            FROM ledger
-            WHERE user_id = ?
-          ) AS legacy
-          WHERE legacy.balance_mc > 0
-            AND EXISTS (
-              SELECT 1 FROM ledger
-              WHERE user_id = ? AND created_at < ?
-            )
-            AND NOT EXISTS (
-              SELECT 1 FROM credit_lots WHERE user_id = ?
-            )`,args:[e,D,e,e,k,e]})).rowsAffected}async function vn(){let e=i(),t=await e.execute({sql:`SELECT id
-          FROM credit_lots
-          WHERE remaining_mc > 0
-            AND never_expires = 0
-            AND expires_at <= datetime('now')
-          LIMIT 500`});if(t.rows.length===0)return{expired_lots:0,expired_mc:0};let r=[],n=[];for(let c of t.rows){let d=Number(c.id),l=N();r.push({token:l,insertResultIndex:n.length}),n.push({sql:`INSERT OR IGNORE INTO credit_lot_expirations (lot_id, user_id, amount_mc, claim_token)
-            SELECT id, user_id, remaining_mc, ?
-            FROM credit_lots
-            WHERE id = ?
-              AND remaining_mc > 0
-              AND never_expires = 0
-              AND expires_at <= datetime('now')`,args:[l,d]}),n.push({sql:`UPDATE credit_lots
-            SET remaining_mc = 0
-            WHERE id = ?
-              AND EXISTS (
-                SELECT 1 FROM credit_lot_expirations
-                WHERE lot_id = ? AND claim_token = ?
-              )`,args:[d,d,l]}),n.push({sql:`INSERT INTO ledger (user_id, amount_mc, operation, description)
-            SELECT user_id, -amount_mc, 'credit_expired', 'credits expired'
-            FROM credit_lot_expirations
-            WHERE lot_id = ? AND claim_token = ?`,args:[d,l]})}let s=await e.batch(n,"write"),a=r.filter(c=>s[c.insertResultIndex]?.rowsAffected===1).map(c=>c.token);if(a.length===0)return{expired_lots:0,expired_mc:0};let _=a.map(()=>"?").join(", "),u=await e.execute({sql:`SELECT user_id, amount_mc
-          FROM credit_lot_expirations
-          WHERE claim_token IN (${_})`,args:a}),o=new Set(u.rows.map(c=>Number(c.user_id)));for(let c of o)await Ce(c);return{expired_lots:u.rows.length,expired_mc:u.rows.reduce((c,d)=>c+Number(d.amount_mc),0)}}async function kn(){let e=i(),t=await e.execute({sql:`SELECT DISTINCT u.id AS user_id
-          FROM users u
-          JOIN ledger l ON l.user_id = u.id
-          WHERE l.created_at < ?
-            AND NOT EXISTS (SELECT 1 FROM credit_lots WHERE user_id = u.id)`,args:[k]}),r=0,n=0;for(let s of t.rows){let a=Number(s.user_id);if(await A(a)===0)continue;let u=await e.execute({sql:`SELECT amount_mc FROM credit_lots
-            WHERE user_id = ? AND source = 'migration'
-            ORDER BY id DESC LIMIT 1`,args:[a]}),o=Number(u.rows[0]?.amount_mc??0);await Ce(a),r+=1,n+=o}return{migrated:r,total_mc:n}}async function Xn(e,t,r,n,s,a){let _=i();await A(e);let u=a?.neverExpires;if(u===void 0&&t>0){let l=await _.execute({sql:"SELECT subscription_tier FROM users WHERE id = ? LIMIT 1",args:[e]});u=String(l.rows[0]?.subscription_tier??"").startsWith("sonic")}let o=u?"9999-12-31 23:59:59":null;if(s){let l=[{sql:"INSERT OR IGNORE INTO ledger (user_id, amount_mc, operation, description, stripe_pi) VALUES (?, ?, ?, ?, ?)",args:[e,t,r,n??null,s]}];t>0&&l.push({sql:`INSERT INTO credit_lots (user_id, amount_mc, remaining_mc, source, stripe_pi, expires_at, never_expires)
-              SELECT ?, ?, ?, ?, ?, COALESCE(?, datetime('now', ?)), ?
-              WHERE changes() = 1`,args:[e,t,t,r,s,o,D,u?1:0]}),l.push({sql:"UPDATE users SET balance_mc = balance_mc + ? WHERE id = ? AND changes() = 1",args:[t,e]}),await _.batch(l,"write");let E=await _.execute({sql:"SELECT balance_mc FROM users WHERE id = ?",args:[e]});return Number(E.rows[0]?.balance_mc??0)}let c=[];t>0&&c.push({sql:"INSERT INTO credit_lots (user_id, amount_mc, remaining_mc, source, stripe_pi, expires_at, never_expires) VALUES (?, ?, ?, ?, ?, COALESCE(?, datetime('now', ?)), ?)",args:[e,t,t,r,null,o,D,u?1:0]}),c.push({sql:"UPDATE users SET balance_mc = balance_mc + ? WHERE id = ?",args:[t,e]}),c.push({sql:"INSERT INTO ledger (user_id, amount_mc, operation, description, stripe_pi) VALUES (?, ?, ?, ?, ?)",args:[e,t,r,n??null,null]}),await _.batch(c,"write");let d=await _.execute({sql:"SELECT balance_mc FROM users WHERE id = ?",args:[e]});return Number(d.rows[0]?.balance_mc??0)}async function Fn(e,t,r,n,s,a){if(!Number.isSafeInteger(t)||t<=0)throw new Error("idempotent credit amount must be a positive integer");if(!s||s.length>500)throw new Error("idempotent credit key is required and must be bounded");let _=i();await A(e);let u=a?.neverExpires;if(u===void 0){let m=await _.execute({sql:"SELECT subscription_tier FROM users WHERE id = ? LIMIT 1",args:[e]});u=String(m.rows[0]?.subscription_tier??"").startsWith("sonic")}let o=u?"9999-12-31 23:59:59":null,c=async()=>{let m=await _.execute({sql:"SELECT balance_mc FROM users WHERE id = ?",args:[e]});return Number(m.rows[0]?.balance_mc??0)},d;try{d=await _.batch([{sql:"INSERT OR IGNORE INTO billing_credits (idempotency_key, user_id, amount_mc, operation, description, status) VALUES (?, ?, ?, ?, ?, 'claimed')",args:[s,e,t,r,n]},{sql:"UPDATE billing_credits SET status = 'applying' WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed'",args:[s,e,t,r,n]},{sql:`INSERT INTO credit_lots (user_id, amount_mc, remaining_mc, source, stripe_pi, expires_at, never_expires)
-              SELECT user_id, amount_mc, amount_mc, operation, NULL, COALESCE(?, datetime('now', ?)), ?
-              FROM billing_credits
-              WHERE idempotency_key = ? AND status = 'applying'`,args:[o,D,u?1:0,s]},{sql:`UPDATE users
-              SET balance_mc = balance_mc + COALESCE((
-                SELECT amount_mc FROM billing_credits WHERE idempotency_key = ? AND status = 'applying'
-              ), 0)
-              WHERE id = ?`,args:[s,e]},{sql:"INSERT INTO ledger (user_id, amount_mc, operation, description) SELECT user_id, amount_mc, operation, description FROM billing_credits WHERE idempotency_key = ? AND status = 'applying'",args:[s]},{sql:"UPDATE billing_credits SET status = 'applied', applied_at = datetime('now') WHERE idempotency_key = ? AND status = 'applying'",args:[s]}],"write")}catch(m){try{let T=(await _.execute({sql:"SELECT user_id, amount_mc, operation, description FROM billing_credits WHERE idempotency_key = ? AND status = 'applied' LIMIT 1",args:[s]})).rows[0];if(T&&Number(T.user_id)===e&&Number(T.amount_mc)===t&&String(T.operation)===r&&String(T.description)===n)return{ok:!0,balance_mc:await c(),duplicate:!0}}catch{}throw m}let E=(await _.execute({sql:"SELECT user_id, amount_mc, operation, description, status FROM billing_credits WHERE idempotency_key = ? LIMIT 1",args:[s]})).rows[0];if(!E||Number(E.user_id)!==e||Number(E.amount_mc)!==t||String(E.operation)!==r||String(E.description)!==n)throw new Error("idempotent credit key conflicts with another credit");return{ok:String(E.status)==="applied",balance_mc:await c(),duplicate:d[1]?.rowsAffected===0&&String(E.status)==="applied"}}async function Mn(e,t){return(await i().execute({sql:"SELECT 1 FROM ledger WHERE user_id = ? AND operation = ? LIMIT 1",args:[e,t]})).rows.length>0}async function Pn(e,t){return(await i().execute({sql:"INSERT OR IGNORE INTO free_credit_refreshes (user_id, month) VALUES (?, ?)",args:[e,t]})).rowsAffected>0}async function Hn(e,t,r,n){let s=`debit:${N()}`,a=await mt(e,t,r,n??"",s);return{ok:a.ok,balance_mc:a.balance_mc,billingKey:s}}async function mt(e,t,r,n,s){if(!Number.isSafeInteger(t)||t<=0)throw new Error("idempotent debit amount must be a positive integer");if(!s||s.length>500)throw new Error("idempotent debit key is required and must be bounded");let a=i();await A(e);let _;try{_=await a.batch([{sql:"UPDATE billing_debits SET amount_mc = ? WHERE idempotency_key = ? AND user_id = ? AND operation = ? AND description = ? AND status = 'claimed'",args:[t,s,e,r,n]},{sql:"INSERT OR IGNORE INTO billing_debits (idempotency_key, user_id, amount_mc, operation, description, status) VALUES (?, ?, ?, ?, ?, 'claimed')",args:[s,e,t,r,n]},{sql:`UPDATE users
-              SET balance_mc = balance_mc - ?
-              WHERE id = ?
-                AND balance_mc >= ?
-                AND (SELECT COALESCE(SUM(remaining_mc), 0)
-                     FROM credit_lots
-                     WHERE user_id = ?
-                       AND remaining_mc > 0
-                       AND (never_expires = 1 OR expires_at > datetime('now'))) >= ?
-                AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed')`,args:[t,e,t,e,t,s,e,t,r,n]},{sql:"UPDATE billing_debits SET status = 'applying' WHERE idempotency_key = ? AND user_id = ? AND amount_mc = ? AND operation = ? AND description = ? AND status = 'claimed' AND changes() = 1",args:[s,e,t,r,n]},{sql:`INSERT OR IGNORE INTO billing_debit_allocations
-                (debit_idempotency_key, lot_id, user_id, amount_mc, expires_at)
-              WITH ordered AS MATERIALIZED (
-                SELECT id,
-                       remaining_mc,
-                       expires_at,
-                       COALESCE(SUM(remaining_mc) OVER (
-                         ORDER BY never_expires ASC, expires_at ASC, granted_at ASC, id ASC
-                         ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
-                       ), 0) AS prior_mc
-                FROM credit_lots
-                WHERE user_id = ? AND remaining_mc > 0 AND (never_expires = 1 OR expires_at > datetime('now'))
-              ), allocation AS (
-                SELECT id, expires_at, MIN(remaining_mc, MAX(0, ? - prior_mc)) AS take_mc
-                FROM ordered
-              )
-              SELECT ?, id, ?, take_mc, expires_at
-              FROM allocation
-              WHERE take_mc > 0
-                AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND status = 'applying')`,args:[e,t,s,e,s]},{sql:`UPDATE credit_lots
-              SET remaining_mc = remaining_mc - COALESCE((
-                SELECT amount_mc FROM billing_debit_allocations
-                WHERE debit_idempotency_key = ? AND lot_id = credit_lots.id
-              ), 0)
-              WHERE id IN (
-                SELECT lot_id FROM billing_debit_allocations WHERE debit_idempotency_key = ?
-              )
-                AND EXISTS (SELECT 1 FROM billing_debits WHERE idempotency_key = ? AND status = 'applying')`,args:[s,s,s]},{sql:"INSERT INTO ledger (user_id, amount_mc, operation, description) SELECT user_id, -amount_mc, operation, description FROM billing_debits WHERE idempotency_key = ? AND status = 'applying'",args:[s]},{sql:"UPDATE billing_debits SET status = 'applied', applied_at = datetime('now') WHERE idempotency_key = ? AND status = 'applying'",args:[s]}],"write")}catch(d){try{let E=(await a.execute({sql:"SELECT user_id, amount_mc, operation, description, status FROM billing_debits WHERE idempotency_key = ? AND status = 'applied' LIMIT 1",args:[s]})).rows[0];if(E&&Number(E.user_id)===e&&Number(E.amount_mc)===t&&String(E.operation)===r&&String(E.description)===n){let m=await a.execute({sql:"SELECT balance_mc FROM users WHERE id = ?",args:[e]});return{ok:!0,balance_mc:Number(m.rows[0]?.balance_mc??0),duplicate:!0}}}catch{}throw d}let o=(await a.execute({sql:"SELECT user_id, amount_mc, operation, description, status FROM billing_debits WHERE idempotency_key = ? LIMIT 1",args:[s]})).rows[0];if(!o||Number(o.user_id)!==e||Number(o.amount_mc)!==t||String(o.operation)!==r||String(o.description)!==n)throw new Error("idempotent debit key conflicts with another debit");let c=await a.execute({sql:"SELECT balance_mc FROM users WHERE id = ?",args:[e]});return{ok:String(o.status)==="applied",balance_mc:Number(c.rows[0]?.balance_mc??0),duplicate:_[2]?.rowsAffected===0&&String(o.status)==="applied"}}async function jn(e,t,r,n,s,a){if(!Number.isSafeInteger(r)||r<0)throw new Error("idempotent debit settlement amount must be a non-negative integer");if(!t||t.length>500)throw new Error("idempotent debit settlement key is required and must be bounded");if(!n||!a)throw new Error("idempotent debit settlement operation and source are required");let _=i();await A(e);let u=`debit-settlement:${v("sha256").update(t).digest("hex")}`,o="wallet_hold_settlement",c=N(),d=JSON.stringify({debitIdempotencyKey:t,refundOperation:n,description:s}),l=async()=>{let T=(await _.execute({sql:`SELECT e.user_id,
-                   e.status,
-                   e.amount_mc AS final_amount_mc,
-                   e.billing_class,
-                   e.source_surface,
-                   e.settled_at,
-                   d.amount_mc AS held_amount_mc
-            FROM billing_events e
-            JOIN billing_debits d ON d.idempotency_key = ?
-            WHERE e.idempotency_key = ?
-              AND d.user_id = e.user_id
-              AND d.status = 'applied'
-            LIMIT 1`,args:[t,u]})).rows[0];if(!T)return null;if(Number(T.user_id)!==e||String(T.billing_class)!==o||String(T.source_surface)!==a)throw new Error("idempotent debit settlement key conflicts with another settlement");if(String(T.status)!=="settled")return null;let q=Number(T.held_amount_mc),w=Number(T.final_amount_mc);if(!Number.isSafeInteger(q)||!Number.isSafeInteger(w)||w<0||w>q)throw new Error("idempotent debit settlement receipt is invalid");let Ue=q-w,Q=await _.execute({sql:`WITH ordered AS (
-              SELECT a.amount_mc,
-                     a.expires_at,
-                     COALESCE(SUM(a.amount_mc) OVER (
-                       ORDER BY a.expires_at ASC, a.lot_id ASC
-                       ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
-                     ), 0) AS prior_mc
-              FROM billing_debit_allocations a
-              WHERE a.debit_idempotency_key = ?
-            ), refunds AS (
-              SELECT expires_at,
-                     amount_mc - MIN(amount_mc, MAX(0, ? - prior_mc)) AS refund_mc
-              FROM ordered
-            )
-            SELECT (SELECT COUNT(*) FROM ordered) AS allocation_count,
-                   COALESCE(SUM(CASE WHEN expires_at > ? THEN refund_mc ELSE 0 END), 0) AS credited_refund_mc
-            FROM refunds`,args:[t,w,String(T.settled_at)]}),Z=Number(Q.rows[0]?.allocation_count??0)>0?Number(Q.rows[0]?.credited_refund_mc??0):0,De=await _.execute({sql:"SELECT balance_mc FROM users WHERE id = ?",args:[e]});return{balance_mc:Number(De.rows[0]?.balance_mc??0),final_amount_mc:w,refund_mc:Z,expired_refund_mc:Ue-Z,duplicate:!0}},E;try{E=await _.batch([{sql:`INSERT OR IGNORE INTO billing_events
-                (id, user_id, idempotency_key, billing_class, source_surface, status, amount_mc, metadata)
-              VALUES (?, ?, ?, ?, ?, 'settling', ?, ?)`,args:[c,e,u,o,a,r,d]},{sql:`WITH ordered AS (
-                SELECT a.lot_id,
-                       a.amount_mc,
-                       a.expires_at,
-                       COALESCE(SUM(a.amount_mc) OVER (
-                         ORDER BY a.expires_at ASC, a.lot_id ASC
-                         ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
-                       ), 0) AS prior_mc
-                FROM billing_debit_allocations a
-                WHERE a.debit_idempotency_key = ?
-              ), refunds AS (
-                SELECT lot_id,
-                       expires_at,
-                       amount_mc - MIN(amount_mc, MAX(0, ? - prior_mc)) AS refund_mc
-                FROM ordered
-              )
-              UPDATE users
-              SET balance_mc = balance_mc + CASE
-                WHEN EXISTS (SELECT 1 FROM ordered) THEN COALESCE(
-                  (SELECT SUM(refund_mc) FROM refunds WHERE expires_at > datetime('now')),
-                  0
-                )
-                -- Holds created before allocation provenance cannot be safely
-                -- tied back to a source lot. Treat their unused portion as
-                -- expired instead of minting spendable credits with a guessed
-                -- expiry.
-                ELSE 0
-              END
-              WHERE id = ?
-                AND EXISTS (
-                  SELECT 1
-                  FROM billing_events e
-                  JOIN billing_debits d ON d.idempotency_key = ?
-                  WHERE e.idempotency_key = ?
-                    AND e.user_id = ?
-                    AND e.billing_class = ?
-                    AND e.source_surface = ?
-                    AND e.status = 'settling'
-                    AND d.user_id = e.user_id
-                    AND d.status = 'applied'
-                    AND e.amount_mc BETWEEN 0 AND d.amount_mc
-                )`,args:[t,r,e,t,u,e,o,a]},{sql:`UPDATE billing_events
-              SET status = 'applying'
-              WHERE idempotency_key = ?
-                AND user_id = ?
-                AND billing_class = ?
-                AND source_surface = ?
-                AND status = 'settling'
-                AND changes() = 1`,args:[u,e,o,a]},{sql:`WITH ordered AS (
-                SELECT a.lot_id,
-                       a.amount_mc,
-                       a.expires_at,
-                       COALESCE(SUM(a.amount_mc) OVER (
-                         ORDER BY a.expires_at ASC, a.lot_id ASC
-                         ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
-                       ), 0) AS prior_mc
-                FROM billing_debit_allocations a
-                WHERE a.debit_idempotency_key = ?
-              ), refunds AS (
-                SELECT lot_id,
-                       expires_at,
-                       amount_mc - MIN(amount_mc, MAX(0, ? - prior_mc)) AS refund_mc
-                FROM ordered
-              )
-              UPDATE credit_lots
-              SET remaining_mc = remaining_mc + COALESCE((SELECT refund_mc FROM refunds WHERE refunds.lot_id = credit_lots.id), 0)
-              WHERE id IN (
-                SELECT lot_id FROM refunds
-                WHERE refund_mc > 0 AND expires_at > datetime('now')
-              )
-                AND EXISTS (SELECT 1 FROM billing_events WHERE idempotency_key = ? AND status = 'applying')`,args:[t,r,u]},{sql:`WITH ordered AS (
-                SELECT a.amount_mc,
-                       a.expires_at,
-                       COALESCE(SUM(a.amount_mc) OVER (
-                         ORDER BY a.expires_at ASC, a.lot_id ASC
-                         ROWS BETWEEN UNBOUNDED PRECEDING AND 1 PRECEDING
-                       ), 0) AS prior_mc
-                FROM billing_debit_allocations a
-                WHERE a.debit_idempotency_key = ?
-              ), refunds AS (
-                SELECT expires_at,
-                       amount_mc - MIN(amount_mc, MAX(0, ? - prior_mc)) AS refund_mc
-                FROM ordered
-              ), credited AS (
-                SELECT e.user_id,
-                       CASE
-                         WHEN EXISTS (SELECT 1 FROM ordered) THEN COALESCE(
-                           (SELECT SUM(refund_mc) FROM refunds WHERE expires_at > datetime('now')),
-                           0
-                         )
-                         ELSE 0
-                       END AS refund_mc
-                FROM billing_events e
-                JOIN billing_debits d ON d.idempotency_key = ?
-                WHERE e.idempotency_key = ?
-                  AND e.status = 'applying'
-              )
-              INSERT INTO ledger (user_id, amount_mc, operation, description)
-              SELECT user_id,
-                     refund_mc,
-                     ?,
-                     ?
-              FROM credited
-              WHERE refund_mc > 0`,args:[t,r,t,u,n,s]},{sql:`UPDATE billing_events
-              SET status = 'settled', settled_at = datetime('now')
-              WHERE idempotency_key = ?
-                AND status = 'applying'`,args:[u]}],"write")}catch(g){try{let T=await l();if(T)return T}catch{}throw g}let m=await l();if(!m)throw new Error("idempotent debit settlement did not reach a durable settled state");return{...m,duplicate:E[0]?.rowsAffected===0}}async function qn(e,t=50){return(await i().execute({sql:"SELECT * FROM ledger WHERE user_id = ? ORDER BY created_at DESC LIMIT ?",args:[e,t]})).rows.map(n=>({id:Number(n.id),user_id:Number(n.user_id),amount_mc:Number(n.amount_mc),operation:String(n.operation),description:n.description!=null?String(n.description):null,stripe_pi:n.stripe_pi!=null?String(n.stripe_pi):null,created_at:String(n.created_at)}))}async function Wn(e,t,r){let n=i(),s=r.refund.map(()=>"?").join(", "),a=r.grant.map(()=>"?").join(", "),_=r.purchase.map(()=>"?").join(", "),u=await n.execute({sql:`SELECT
-      COALESCE(SUM(CASE WHEN amount_mc < 0 AND operation NOT IN (${s}) THEN -amount_mc ELSE 0 END), 0) AS spent_mc,
-      COALESCE(SUM(CASE WHEN amount_mc > 0 AND operation IN (${s}) THEN amount_mc ELSE 0 END), 0) AS refunded_mc,
-      COALESCE(SUM(CASE WHEN amount_mc > 0 AND operation IN (${a}) THEN amount_mc ELSE 0 END), 0) AS granted_mc,
-      COALESCE(SUM(CASE WHEN amount_mc > 0 AND operation IN (${_}) THEN amount_mc ELSE 0 END), 0) AS purchased_mc,
-      COALESCE(SUM(amount_mc), 0) AS net_mc
-      FROM ledger WHERE user_id = ? AND created_at >= ?`,args:[...r.refund,...r.refund,...r.grant,...r.purchase,e,t]}),o=await n.execute({sql:`SELECT operation, -SUM(amount_mc) AS mc, COUNT(*) AS count
-      FROM ledger
-      WHERE user_id = ? AND created_at >= ? AND amount_mc < 0 AND operation NOT IN (${s})
-      GROUP BY operation
-      ORDER BY mc DESC, operation ASC`,args:[e,t,...r.refund]}),c=u.rows[0];return{spent_mc:Number(c?.spent_mc??0),refunded_mc:Number(c?.refunded_mc??0),granted_mc:Number(c?.granted_mc??0),purchased_mc:Number(c?.purchased_mc??0),net_mc:Number(c?.net_mc??0),by_operation:o.rows.map(d=>({operation:String(d.operation),mc:Number(d.mc),count:Number(d.count)}))}}async function Bn(e){return(await i().execute({sql:"SELECT 1 FROM ledger WHERE stripe_pi = ? LIMIT 1",args:[e]})).rows.length>0}async function Ce(e,t){let r=i();for(let s=0;s<8;s+=1){let _=(await r.execute({sql:`SELECT
-              u.balance_mc AS cached_balance_mc,
-              COUNT(l.id) AS lot_count,
-              COALESCE(SUM(CASE
-                WHEN l.remaining_mc > 0
-                  AND (l.never_expires = 1 OR l.expires_at > datetime('now'))
-                THEN l.remaining_mc ELSE 0 END), 0) AS projected_balance_mc
-            FROM users u
-            LEFT JOIN credit_lots l ON l.user_id = u.id
-            WHERE u.id = ?
-            GROUP BY u.id, u.balance_mc`,args:[e]})).rows[0];if(!_)return 0;if(Number(_.lot_count??0)===0&&(await A(Number(e)),(await r.execute({sql:"SELECT 1 FROM credit_lots WHERE user_id = ? LIMIT 1",args:[e]})).rows.length>0))continue;let u=Number(_.cached_balance_mc??0),o=Number(_.projected_balance_mc??0);if(u===o||(await r.execute({sql:"UPDATE users SET balance_mc = ? WHERE id = ? AND balance_mc = ?",args:[o,e,u]})).rowsAffected===1)return o}let n=await r.execute({sql:"SELECT balance_mc FROM users WHERE id = ? LIMIT 1",args:[e]});return Number(n.rows[0]?.balance_mc??0)}var Gn=p.object({id:p.string(),user_id:p.number(),status:p.string().default("pending"),client_domain:p.string(),session_path:p.string(),request:p.string(),result:p.string().nullable(),error:p.string().nullable(),created_at:p.string(),updated_at:p.string()}),Yn=p.object({id:p.number(),job_id:p.string(),phase:p.string(),completed_at:p.string(),output_summary:p.string()});async function Kn(e){return(await i().execute({sql:"SELECT id, subject, sent_at, opened_at FROM inbox_messages WHERE user_id = ? AND deleted_at IS NULL ORDER BY sent_at DESC, id DESC",args:[e]})).rows.map(r=>({id:String(r.id),subject:String(r.subject),sent_at:String(r.sent_at),opened_at:r.opened_at!=null?String(r.opened_at):null}))}async function $n(e,t){let n=(await i().execute({sql:"SELECT id, subject, body_md, source, sent_at, opened_at FROM inbox_messages WHERE id = ? AND user_id = ? AND deleted_at IS NULL",args:[t,e]})).rows[0];if(n)return{id:String(n.id),subject:String(n.subject),body_md:String(n.body_md),source:String(n.source),sent_at:String(n.sent_at),opened_at:n.opened_at!=null?String(n.opened_at):null}}async function Jn(e,t){let r=i();await r.execute({sql:"UPDATE inbox_messages SET opened_at = datetime('now') WHERE id = ? AND user_id = ? AND deleted_at IS NULL AND opened_at IS NULL",args:[t,e]});let s=(await r.execute({sql:"SELECT opened_at FROM inbox_messages WHERE id = ? AND user_id = ? AND deleted_at IS NULL",args:[t,e]})).rows[0];return s&&s.opened_at!=null?String(s.opened_at):null}async function Vn(e,t){return(await i().execute({sql:"UPDATE inbox_messages SET deleted_at = datetime('now') WHERE id = ? AND user_id = ? AND deleted_at IS NULL",args:[t,e]})).rowsAffected>0}async function zn(e,t,r,n="operator"){let s=N();return await i().execute({sql:"INSERT INTO inbox_messages (id, user_id, subject, body_md, source) VALUES (?, ?, ?, ?, ?)",args:[s,e,t,r,n]}),s}async function Qn(){return(await i().execute("SELECT id FROM users WHERE active = 1")).rows.map(t=>Number(t.id))}export{Lt as a,ve as b,ke as c,O as d,ae as e,W as f,Be as g,Ge as h,_e as i,ee as j,te as k,re as l,ne as m,se as n,ie as o,k as p,U as q,le as r,It as s,i as t,xt as u,yt as v,Ct as w,nt as x,Ut as y,Dt as z,vt as A,kt as B,Xt as C,st as D,Ft as E,Mt as F,Pt as G,Ht as H,jt as I,qt as J,Wt as K,Bt as L,Gt as M,Yt as N,Re as O,Ae as P,Kt as Q,$t as R,Jt as S,Vt as T,zt as U,Qt as V,Zt as W,er as X,tr as Y,rr as Z,nr as _,sr as $,ir as aa,ar as ba,or as ca,_r as da,ur as ea,it as fa,cr as ga,dr as ha,Er as ia,lr as ja,Tr as ka,pr as la,mr as ma,Nr as na,gr as oa,K as pa,Lr as qa,br as ra,Sr as sa,Rr as ta,Ar as ua,wr as va,Or as wa,fr as xa,hr as ya,Y as za,Ir as Aa,xr as Ba,yr as Ca,Cr as Da,Ur as Ea,Dr as Fa,ut as Ga,ct as Ha,vr as Ia,kr as Ja,Xr as Ka,Fr as La,Mr as Ma,Pr as Na,Hr as Oa,jr as Pa,ye as Qa,qr as Ra,Wr as Sa,Br as Ta,Gr as Ua,Yr as Va,Kr as Wa,$r as Xa,Jr as Ya,Vr as Za,zr as _a,Qr as $a,Zr as ab,en as bb,tn as cb,rn as db,nn as eb,sn as fb,an as gb,on as hb,_n as ib,un as jb,cn as kb,dn as lb,En as mb,ln as nb,Tn as ob,pn as pb,mn as qb,Nn as rb,gn as sb,Ln as tb,bn as ub,Sn as vb,Rn as wb,An as xb,lt as yb,wn as zb,On as Ab,fn as Bb,pt as Cb,hn as Db,In as Eb,xn as Fb,yn as Gb,Cn as Hb,Un as Ib,Dn as Jb,D as Kb,vn as Lb,kn as Mb,Xn as Nb,Fn as Ob,Mn as Pb,Pn as Qb,Hn as Rb,mt as Sb,jn as Tb,qn as Ub,Wn as Vb,Bn as Wb,Ce as Xb,Gn as Yb,Yn as Zb,Kn as _b,$n as $b,Jn as ac,Vn as bc,zn as cc,Qn as dc};