spaps 0.7.3 → 0.7.5

package/assets/local-runtime/alembic/versions/000000000001_baseline_consolidated_schema.py

@@ -0,0 +1,1076 @@
+"""baseline_consolidated_schema
+
+Revision ID: 000000000001
+Revises:
+Create Date: 2026-02-09 00:00:00.000000
+
+SPAPS Python Rewrite - Consolidated baseline migration (51 tables)
+Merged auth.users + user_profiles into unified users table
+No Supabase constructs (RLS, auth schema, current_setting())
+All tables use UUID PKs with gen_random_uuid() defaults
+All timestamps are timestamptz with UTC defaults
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision: str = '000000000001'
+down_revision: Union[str, None] = None
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # Enable required extensions
+    op.execute('CREATE EXTENSION IF NOT EXISTS "uuid-ossp"')
+    op.execute('CREATE EXTENSION IF NOT EXISTS "pgcrypto"')
+    op.execute('CREATE EXTENSION IF NOT EXISTS "vector"')
+
+    # ===== CORE IDENTITY =====
+
+    # users table (merged from auth.users + user_profiles)
+    op.execute("""
+        CREATE TABLE users (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            email TEXT UNIQUE,
+            password_hash TEXT,
+            username TEXT,
+            full_name TEXT,
+            avatar_url TEXT,
+            phone TEXT,
+            phone_number TEXT,
+            metadata JSONB,
+            stripe_metadata JSONB,
+            tier TEXT,
+            stripe_customer_id TEXT,
+            default_payment_method TEXT,
+            is_super_admin BOOLEAN DEFAULT false,
+            email_confirmed_at TIMESTAMPTZ,
+            phone_confirmed_at TIMESTAMPTZ,
+            confirmed_at TIMESTAMPTZ,
+            last_sign_in_at TIMESTAMPTZ,
+            banned_until TIMESTAMPTZ,
+            deleted_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+
+    # applications table
+    op.execute("""
+        CREATE TABLE applications (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            name TEXT NOT NULL,
+            slug TEXT UNIQUE NOT NULL,
+            description TEXT,
+            api_key TEXT UNIQUE NOT NULL,
+            allowed_origins TEXT[],
+            webhook_url TEXT,
+            settings JSONB,
+            whitelist_enabled BOOLEAN DEFAULT false,
+            whitelist_count INTEGER DEFAULT 0,
+            publishable_key_hash TEXT,
+            secret_key_hash TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+
+    # user_wallets table
+    op.execute("""
+        CREATE TABLE user_wallets (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+            wallet_address TEXT NOT NULL,
+            chain_type TEXT NOT NULL,
+            is_primary BOOLEAN DEFAULT false,
+            verified_at TIMESTAMPTZ,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_user_wallets_user_id ON user_wallets(user_id)')
+    op.execute('CREATE INDEX idx_user_wallets_wallet_address ON user_wallets(wallet_address)')
+    op.execute('CREATE INDEX idx_user_wallets_chain_type ON user_wallets(chain_type)')
+
+    # user_applications table
+    op.execute("""
+        CREATE TABLE user_applications (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+            application_id UUID NOT NULL REFERENCES applications(id) ON DELETE CASCADE,
+            permissions JSONB,
+            metadata JSONB,
+            app_specific_data JSONB,
+            usage_balance NUMERIC,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_user_applications_user_id ON user_applications(user_id)')
+    op.execute('CREATE INDEX idx_user_applications_application_id ON user_applications(application_id)')
+    op.execute('CREATE UNIQUE INDEX idx_user_applications_unique ON user_applications(user_id, application_id)')
+
+    # ===== AUTH INFRASTRUCTURE =====
+
+    # auth_nonces table
+    op.execute("""
+        CREATE TABLE auth_nonces (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            wallet_address TEXT NOT NULL,
+            nonce TEXT NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            expires_at TIMESTAMPTZ NOT NULL,
+            used BOOLEAN DEFAULT false
+        )
+    """)
+    op.execute('CREATE INDEX idx_auth_nonces_wallet_address ON auth_nonces(wallet_address)')
+    op.execute('CREATE INDEX idx_auth_nonces_expires_at ON auth_nonces(expires_at)')
+
+    # auth_tokens table
+    op.execute("""
+        CREATE TABLE auth_tokens (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            token_hash TEXT UNIQUE NOT NULL,
+            type TEXT NOT NULL,
+            email TEXT,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            expires_at TIMESTAMPTZ NOT NULL,
+            used_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_auth_tokens_user_id ON auth_tokens(user_id)')
+    op.execute('CREATE INDEX idx_auth_tokens_application_id ON auth_tokens(application_id)')
+    op.execute('CREATE INDEX idx_auth_tokens_type ON auth_tokens(type)')
+    op.execute('CREATE INDEX idx_auth_tokens_expires_at ON auth_tokens(expires_at)')
+
+    # auth_magic_link_states table
+    op.execute("""
+        CREATE TABLE auth_magic_link_states (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            state TEXT UNIQUE NOT NULL,
+            email TEXT NOT NULL,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            metadata JSONB,
+            expires_at TIMESTAMPTZ NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_auth_magic_link_states_application_id ON auth_magic_link_states(application_id)')
+    op.execute('CREATE INDEX idx_auth_magic_link_states_expires_at ON auth_magic_link_states(expires_at)')
+
+    # refresh_tokens table
+    op.execute("""
+        CREATE TABLE refresh_tokens (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            token TEXT UNIQUE NOT NULL,
+            expires_at TIMESTAMPTZ NOT NULL,
+            used_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_refresh_tokens_user_id ON refresh_tokens(user_id)')
+    op.execute('CREATE INDEX idx_refresh_tokens_application_id ON refresh_tokens(application_id)')
+    op.execute('CREATE INDEX idx_refresh_tokens_expires_at ON refresh_tokens(expires_at)')
+
+    # blacklisted_tokens table
+    op.execute("""
+        CREATE TABLE blacklisted_tokens (
+            jti TEXT PRIMARY KEY,
+            user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            expires_at TIMESTAMPTZ NOT NULL,
+            blacklisted_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            reason TEXT,
+            ip_address TEXT,
+            user_agent TEXT
+        )
+    """)
+    op.execute('CREATE INDEX idx_blacklisted_tokens_user_id ON blacklisted_tokens(user_id)')
+    op.execute('CREATE INDEX idx_blacklisted_tokens_expires_at ON blacklisted_tokens(expires_at)')
+
+    # ===== STRIPE / PAYMENTS =====
+
+    # stripe_customers table
+    op.execute("""
+        CREATE TABLE stripe_customers (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            email TEXT,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_stripe_customers_user_id ON stripe_customers(user_id)')
+    op.execute('CREATE INDEX idx_stripe_customers_application_id ON stripe_customers(application_id)')
+
+    # stripe_products table
+    op.execute("""
+        CREATE TABLE stripe_products (
+            stripe_product_id TEXT PRIMARY KEY,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            name TEXT NOT NULL,
+            description TEXT,
+            active BOOLEAN DEFAULT true,
+            images TEXT[],
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            archived_at TIMESTAMPTZ
+        )
+    """)
+    op.execute('CREATE INDEX idx_stripe_products_application_id ON stripe_products(application_id)')
+    op.execute('CREATE INDEX idx_stripe_products_active ON stripe_products(active)')
+
+    # stripe_prices table
+    op.execute("""
+        CREATE TABLE stripe_prices (
+            stripe_price_id TEXT PRIMARY KEY,
+            stripe_product_id TEXT REFERENCES stripe_products(stripe_product_id) ON DELETE CASCADE,
+            active BOOLEAN DEFAULT true,
+            currency TEXT NOT NULL,
+            unit_amount INTEGER,
+            type TEXT NOT NULL,
+            nickname TEXT,
+            recurring JSONB,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_stripe_prices_stripe_product_id ON stripe_prices(stripe_product_id)')
+    op.execute('CREATE INDEX idx_stripe_prices_active ON stripe_prices(active)')
+
+    # checkout_sessions table
+    op.execute("""
+        CREATE TABLE checkout_sessions (
+            session_id TEXT PRIMARY KEY,
+            user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            customer_id TEXT,
+            status TEXT NOT NULL,
+            payment_status TEXT,
+            mode TEXT NOT NULL,
+            success_url TEXT,
+            cancel_url TEXT,
+            amount_total INTEGER,
+            currency TEXT,
+            payment_intent_id TEXT,
+            subscription_id TEXT,
+            metadata JSONB,
+            is_guest BOOLEAN DEFAULT false,
+            customer_email TEXT,
+            expires_at TIMESTAMPTZ,
+            completed_at TIMESTAMPTZ,
+            expired_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_checkout_sessions_user_id ON checkout_sessions(user_id)')
+    op.execute('CREATE INDEX idx_checkout_sessions_application_id ON checkout_sessions(application_id)')
+    op.execute('CREATE INDEX idx_checkout_sessions_status ON checkout_sessions(status)')
+    op.execute('CREATE INDEX idx_checkout_sessions_customer_email ON checkout_sessions(customer_email)')
+
+    # stripe_payments table
+    op.execute("""
+        CREATE TABLE stripe_payments (
+            payment_intent_id TEXT PRIMARY KEY,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            customer_id TEXT,
+            amount INTEGER NOT NULL,
+            currency TEXT NOT NULL,
+            status TEXT NOT NULL,
+            stripe_fee INTEGER,
+            spaps_fee INTEGER,
+            net_amount INTEGER,
+            failure_message TEXT,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_stripe_payments_application_id ON stripe_payments(application_id)')
+    op.execute('CREATE INDEX idx_stripe_payments_customer_id ON stripe_payments(customer_id)')
+    op.execute('CREATE INDEX idx_stripe_payments_status ON stripe_payments(status)')
+
+    # stripe_webhook_events table
+    op.execute("""
+        CREATE TABLE stripe_webhook_events (
+            event_id TEXT PRIMARY KEY,
+            type TEXT NOT NULL,
+            data JSONB NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            processed_at TIMESTAMPTZ
+        )
+    """)
+    op.execute('CREATE INDEX idx_stripe_webhook_events_type ON stripe_webhook_events(type)')
+    op.execute('CREATE INDEX idx_stripe_webhook_events_processed_at ON stripe_webhook_events(processed_at)')
+
+    # subscriptions table
+    op.execute("""
+        CREATE TABLE subscriptions (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+            stripe_customer_id TEXT,
+            stripe_subscription_id TEXT UNIQUE,
+            price_id TEXT,
+            status TEXT NOT NULL,
+            current_period_start TIMESTAMPTZ,
+            current_period_end TIMESTAMPTZ,
+            cancel_at TIMESTAMPTZ,
+            canceled_at TIMESTAMPTZ,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_subscriptions_user_id ON subscriptions(user_id)')
+    op.execute('CREATE INDEX idx_subscriptions_stripe_customer_id ON subscriptions(stripe_customer_id)')
+    op.execute('CREATE INDEX idx_subscriptions_status ON subscriptions(status)')
+
+    # stripe_invoices table
+    op.execute("""
+        CREATE TABLE stripe_invoices (
+            invoice_id TEXT PRIMARY KEY,
+            subscription_id TEXT REFERENCES subscriptions(stripe_subscription_id) ON DELETE SET NULL,
+            customer_id TEXT,
+            amount_paid INTEGER,
+            amount_due INTEGER,
+            currency TEXT NOT NULL,
+            status TEXT NOT NULL,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_stripe_invoices_subscription_id ON stripe_invoices(subscription_id)')
+    op.execute('CREATE INDEX idx_stripe_invoices_customer_id ON stripe_invoices(customer_id)')
+    op.execute('CREATE INDEX idx_stripe_invoices_status ON stripe_invoices(status)')
+
+    # payment_history table
+    op.execute("""
+        CREATE TABLE payment_history (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+            subscription_id UUID REFERENCES subscriptions(id) ON DELETE SET NULL,
+            stripe_payment_intent_id TEXT,
+            amount INTEGER NOT NULL,
+            currency TEXT NOT NULL,
+            status TEXT NOT NULL,
+            description TEXT,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_payment_history_user_id ON payment_history(user_id)')
+    op.execute('CREATE INDEX idx_payment_history_subscription_id ON payment_history(subscription_id)')
+    op.execute('CREATE INDEX idx_payment_history_created_at ON payment_history(created_at)')
+
+    # wallet_payments table
+    op.execute("""
+        CREATE TABLE wallet_payments (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            wallet_address TEXT NOT NULL,
+            chain_type TEXT NOT NULL,
+            transaction_hash TEXT UNIQUE NOT NULL,
+            amount NUMERIC NOT NULL,
+            token_symbol TEXT NOT NULL,
+            usd_value NUMERIC,
+            status TEXT NOT NULL,
+            confirmed_at TIMESTAMPTZ,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_wallet_payments_user_id ON wallet_payments(user_id)')
+    op.execute('CREATE INDEX idx_wallet_payments_wallet_address ON wallet_payments(wallet_address)')
+    op.execute('CREATE INDEX idx_wallet_payments_status ON wallet_payments(status)')
+
+    # guest_checkout_conversions table
+    op.execute("""
+        CREATE TABLE guest_checkout_conversions (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            session_id TEXT REFERENCES checkout_sessions(session_id) ON DELETE CASCADE,
+            guest_email TEXT NOT NULL,
+            converted_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            converted_at TIMESTAMPTZ NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_guest_checkout_conversions_session_id ON guest_checkout_conversions(session_id)')
+    op.execute('CREATE INDEX idx_guest_checkout_conversions_guest_email ON guest_checkout_conversions(guest_email)')
+
+    # ===== CRYPTO =====
+
+    # crypto_invoices table
+    op.execute("""
+        CREATE TABLE crypto_invoices (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            asset TEXT NOT NULL,
+            network TEXT NOT NULL,
+            amount NUMERIC NOT NULL,
+            status TEXT NOT NULL,
+            underpaid BOOLEAN DEFAULT false,
+            overpaid BOOLEAN DEFAULT false,
+            beneficiary TEXT,
+            metadata JSONB,
+            destination JSONB,
+            settlement JSONB,
+            expires_at TIMESTAMPTZ,
+            settled_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_crypto_invoices_application_id ON crypto_invoices(application_id)')
+    op.execute('CREATE INDEX idx_crypto_invoices_status ON crypto_invoices(status)')
+
+    # ledger_transactions table
+    op.execute("""
+        CREATE TABLE ledger_transactions (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            invoice_id UUID REFERENCES crypto_invoices(id) ON DELETE CASCADE,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            asset TEXT NOT NULL,
+            network TEXT NOT NULL,
+            amount NUMERIC NOT NULL,
+            source TEXT NOT NULL,
+            dedupe_key TEXT UNIQUE NOT NULL,
+            state_detail TEXT,
+            settlement JSONB,
+            settled_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_ledger_transactions_invoice_id ON ledger_transactions(invoice_id)')
+    op.execute('CREATE INDEX idx_ledger_transactions_application_id ON ledger_transactions(application_id)')
+
+    # crypto_webhook_dedupes table
+    op.execute("""
+        CREATE TABLE crypto_webhook_dedupes (
+            dedupe_key TEXT PRIMARY KEY,
+            payload JSONB NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+
+    # app_receiving_addresses table
+    op.execute("""
+        CREATE TABLE app_receiving_addresses (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            asset TEXT NOT NULL,
+            network TEXT NOT NULL,
+            destination_type TEXT NOT NULL,
+            destination_address TEXT NOT NULL,
+            destination_details JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_app_receiving_addresses_application_id ON app_receiving_addresses(application_id)')
+
+    # chain_sync_state table
+    op.execute("""
+        CREATE TABLE chain_sync_state (
+            provider TEXT PRIMARY KEY,
+            cursor TEXT,
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+
+    # ===== ENTITLEMENTS =====
+
+    # entitlements table
+    op.execute("""
+        CREATE TABLE entitlements (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            crypto_invoice_id UUID REFERENCES crypto_invoices(id) ON DELETE SET NULL,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            beneficiary_user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            beneficiary_email TEXT,
+            entitlement_type TEXT NOT NULL,
+            entitlement_key TEXT NOT NULL,
+            source TEXT NOT NULL,
+            stripe_product_id TEXT REFERENCES stripe_products(stripe_product_id) ON DELETE SET NULL,
+            stripe_price_id TEXT REFERENCES stripe_prices(stripe_price_id) ON DELETE SET NULL,
+            stripe_subscription_id TEXT,
+            stripe_session_id TEXT,
+            stripe_invoice_id TEXT,
+            manual_grant_id TEXT,
+            manual_grant_reason TEXT,
+            granted_by_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            revoked_by_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            revoked_reason TEXT,
+            starts_at TIMESTAMPTZ,
+            ends_at TIMESTAMPTZ,
+            revoked_at TIMESTAMPTZ,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_entitlements_crypto_invoice_id ON entitlements(crypto_invoice_id)')
+    op.execute('CREATE INDEX idx_entitlements_application_id ON entitlements(application_id)')
+    op.execute('CREATE INDEX idx_entitlements_beneficiary_user_id ON entitlements(beneficiary_user_id)')
+    op.execute('CREATE INDEX idx_entitlements_beneficiary_email ON entitlements(beneficiary_email)')
+    op.execute('CREATE INDEX idx_entitlements_entitlement_key ON entitlements(entitlement_key)')
+    op.execute('CREATE INDEX idx_entitlements_source ON entitlements(source)')
+
+    # entitlement_mappings table
+    op.execute("""
+        CREATE TABLE entitlement_mappings (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            stripe_price_id TEXT REFERENCES stripe_prices(stripe_price_id) ON DELETE CASCADE,
+            entitlement_key TEXT NOT NULL,
+            entitlement_type TEXT NOT NULL,
+            duration_days INTEGER,
+            metadata JSONB,
+            is_active BOOLEAN DEFAULT true,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_entitlement_mappings_application_id ON entitlement_mappings(application_id)')
+    op.execute('CREATE INDEX idx_entitlement_mappings_stripe_price_id ON entitlement_mappings(stripe_price_id)')
+
+    # entitlement_events table
+    op.execute("""
+        CREATE TABLE entitlement_events (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            entitlement_id UUID REFERENCES entitlements(id) ON DELETE CASCADE,
+            event_type TEXT NOT NULL,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            email TEXT,
+            entitlement_key TEXT,
+            source TEXT,
+            previous_state JSONB,
+            new_state JSONB,
+            triggered_by TEXT,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_entitlement_events_entitlement_id ON entitlement_events(entitlement_id)')
+    op.execute('CREATE INDEX idx_entitlement_events_application_id ON entitlement_events(application_id)')
+    op.execute('CREATE INDEX idx_entitlement_events_user_id ON entitlement_events(user_id)')
+    op.execute('CREATE INDEX idx_entitlement_events_event_type ON entitlement_events(event_type)')
+
+    # entitlement_projection_log table
+    op.execute("""
+        CREATE TABLE entitlement_projection_log (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            invoice_id UUID REFERENCES crypto_invoices(id) ON DELETE CASCADE,
+            status TEXT NOT NULL,
+            detail TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            processed_at TIMESTAMPTZ
+        )
+    """)
+    op.execute('CREATE INDEX idx_entitlement_projection_log_invoice_id ON entitlement_projection_log(invoice_id)')
+
+    # ===== WEBHOOKS =====
+
+    # webhooks table
+    op.execute("""
+        CREATE TABLE webhooks (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            url TEXT NOT NULL,
+            secret TEXT NOT NULL,
+            events TEXT[] NOT NULL,
+            is_active BOOLEAN DEFAULT true,
+            headers JSONB,
+            retry_config JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_webhooks_application_id ON webhooks(application_id)')
+
+    # webhook_events table
+    op.execute("""
+        CREATE TABLE webhook_events (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            type TEXT NOT NULL,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            data JSONB NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            schema_version INTEGER DEFAULT 1
+        )
+    """)
+    op.execute('CREATE INDEX idx_webhook_events_application_id ON webhook_events(application_id)')
+    op.execute('CREATE INDEX idx_webhook_events_type ON webhook_events(type)')
+
+    # webhook_deliveries table
+    op.execute("""
+        CREATE TABLE webhook_deliveries (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            webhook_id UUID REFERENCES webhooks(id) ON DELETE CASCADE,
+            event_type TEXT NOT NULL,
+            payload JSONB NOT NULL,
+            response_status INTEGER,
+            response_body TEXT,
+            delivered_at TIMESTAMPTZ,
+            retry_count INTEGER DEFAULT 0,
+            attempt INTEGER DEFAULT 1,
+            error_message TEXT
+        )
+    """)
+    op.execute('CREATE INDEX idx_webhook_deliveries_webhook_id ON webhook_deliveries(webhook_id)')
+    op.execute('CREATE INDEX idx_webhook_deliveries_delivered_at ON webhook_deliveries(delivered_at)')
+
+    # ===== EMAIL =====
+
+    # email_templates table
+    op.execute("""
+        CREATE TABLE email_templates (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            template_key TEXT UNIQUE NOT NULL,
+            name TEXT NOT NULL,
+            description TEXT,
+            subject TEXT NOT NULL,
+            html_body TEXT NOT NULL,
+            text_body TEXT,
+            from_email TEXT,
+            from_name TEXT,
+            reply_to TEXT,
+            variables JSONB,
+            sample_context JSONB,
+            is_active BOOLEAN DEFAULT true,
+            category TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_email_templates_application_id ON email_templates(application_id)')
+    op.execute('CREATE INDEX idx_email_templates_category ON email_templates(category)')
+
+    # email_log table
+    op.execute("""
+        CREATE TABLE email_log (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            template_id UUID REFERENCES email_templates(id) ON DELETE SET NULL,
+            user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            owner_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            to_email TEXT NOT NULL,
+            template_key TEXT,
+            subject TEXT NOT NULL,
+            status TEXT NOT NULL,
+            mailgun_message_id TEXT,
+            error_message TEXT,
+            sent_at TIMESTAMPTZ,
+            delivered_at TIMESTAMPTZ,
+            opened_at TIMESTAMPTZ,
+            clicked_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_email_log_application_id ON email_log(application_id)')
+    op.execute('CREATE INDEX idx_email_log_template_id ON email_log(template_id)')
+    op.execute('CREATE INDEX idx_email_log_user_id ON email_log(user_id)')
+    op.execute('CREATE INDEX idx_email_log_to_email ON email_log(to_email)')
+    op.execute('CREATE INDEX idx_email_log_status ON email_log(status)')
+
+    # email_whitelist table
+    op.execute("""
+        CREATE TABLE email_whitelist (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            email TEXT NOT NULL,
+            tier TEXT,
+            bypass_payment BOOLEAN DEFAULT false,
+            metadata JSONB,
+            created_by TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_email_whitelist_application_id ON email_whitelist(application_id)')
+    op.execute('CREATE INDEX idx_email_whitelist_email ON email_whitelist(email)')
+
+    # ===== CFO / QUICKBOOKS =====
+
+    # cfo_connections table
+    op.execute("""
+        CREATE TABLE cfo_connections (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            client_name TEXT NOT NULL,
+            realm_id TEXT NOT NULL,
+            company_name TEXT NOT NULL,
+            encrypted_refresh_token TEXT NOT NULL,
+            token_expires_at TIMESTAMPTZ NOT NULL,
+            accounting_method TEXT,
+            risk_tier TEXT,
+            status TEXT NOT NULL,
+            connected_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_cfo_connections_user_id ON cfo_connections(user_id)')
+    op.execute('CREATE INDEX idx_cfo_connections_realm_id ON cfo_connections(realm_id)')
+
+    # cfo_auth_codes table
+    op.execute("""
+        CREATE TABLE cfo_auth_codes (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            code TEXT UNIQUE NOT NULL,
+            user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            company_name TEXT NOT NULL,
+            realm_id TEXT NOT NULL,
+            encrypted_auth_data TEXT NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            expires_at TIMESTAMPTZ NOT NULL,
+            used_at TIMESTAMPTZ
+        )
+    """)
+    op.execute('CREATE INDEX idx_cfo_auth_codes_user_id ON cfo_auth_codes(user_id)')
+    op.execute('CREATE INDEX idx_cfo_auth_codes_expires_at ON cfo_auth_codes(expires_at)')
+
+    # cfo_magic_links table
+    op.execute("""
+        CREATE TABLE cfo_magic_links (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            token TEXT UNIQUE NOT NULL,
+            client_name TEXT NOT NULL,
+            connection_id UUID REFERENCES cfo_connections(id) ON DELETE CASCADE,
+            expires_at TIMESTAMPTZ NOT NULL,
+            used_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_cfo_magic_links_connection_id ON cfo_magic_links(connection_id)')
+    op.execute('CREATE INDEX idx_cfo_magic_links_expires_at ON cfo_magic_links(expires_at)')
+
+    # ===== DAYRATE =====
+
+    # dayrate_config table
+    op.execute("""
+        CREATE TABLE dayrate_config (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            base_rate INTEGER NOT NULL,
+            available_days TEXT[],
+            slots TEXT[],
+            fill_tiers JSONB,
+            time_tiers JSONB,
+            horizon_weeks INTEGER,
+            meeting_link TEXT,
+            min_notice_hours INTEGER,
+            timezone TEXT,
+            slot_definitions JSONB,
+            currency TEXT,
+            product_name TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_dayrate_config_application_id ON dayrate_config(application_id)')
+
+    # dayrate_bookings table
+    op.execute("""
+        CREATE TABLE dayrate_bookings (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            date DATE NOT NULL,
+            slot_type TEXT NOT NULL,
+            client_email TEXT NOT NULL,
+            client_name TEXT,
+            price_paid INTEGER NOT NULL,
+            stripe_session_id TEXT,
+            stripe_payment_intent_id TEXT,
+            status TEXT NOT NULL,
+            metadata JSONB,
+            booking_group_id TEXT,
+            expires_at TIMESTAMPTZ,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_dayrate_bookings_application_id ON dayrate_bookings(application_id)')
+    op.execute('CREATE INDEX idx_dayrate_bookings_user_id ON dayrate_bookings(user_id)')
+    op.execute('CREATE INDEX idx_dayrate_bookings_date ON dayrate_bookings(date)')
+    op.execute('CREATE INDEX idx_dayrate_bookings_status ON dayrate_bookings(status)')
+
+    # ===== SECURE MESSAGES =====
+
+    # secure_messages table
+    op.execute("""
+        CREATE TABLE secure_messages (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            patient_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            practitioner_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            encrypted_content TEXT NOT NULL,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_secure_messages_application_id ON secure_messages(application_id)')
+    op.execute('CREATE INDEX idx_secure_messages_patient_id ON secure_messages(patient_id)')
+    op.execute('CREATE INDEX idx_secure_messages_practitioner_id ON secure_messages(practitioner_id)')
+
+    # ===== DOCUMENTATION =====
+
+    # documentation_categories table
+    op.execute("""
+        CREATE TABLE documentation_categories (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            name TEXT NOT NULL,
+            slug TEXT UNIQUE NOT NULL,
+            description TEXT,
+            order_index INTEGER,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+
+    # documentation table
+    op.execute("""
+        CREATE TABLE documentation (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            slug TEXT UNIQUE NOT NULL,
+            title TEXT NOT NULL,
+            content TEXT NOT NULL,
+            category_id UUID REFERENCES documentation_categories(id) ON DELETE SET NULL,
+            category TEXT,
+            tags TEXT[],
+            metadata JSONB,
+            related_endpoints JSONB,
+            last_updated TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            version INTEGER DEFAULT 1,
+            is_published BOOLEAN DEFAULT true
+        )
+    """)
+    op.execute('CREATE INDEX idx_documentation_category_id ON documentation(category_id)')
+    op.execute('CREATE INDEX idx_documentation_is_published ON documentation(is_published)')
+
+    # doc_embeddings table
+    op.execute("""
+        CREATE TABLE doc_embeddings (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            doc_id UUID REFERENCES documentation(id) ON DELETE CASCADE,
+            embedding vector,
+            chunk_index INTEGER NOT NULL,
+            chunk_text TEXT NOT NULL,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_doc_embeddings_doc_id ON doc_embeddings(doc_id)')
+
+    # error_documentation table
+    op.execute("""
+        CREATE TABLE error_documentation (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            code TEXT UNIQUE NOT NULL,
+            http_status INTEGER NOT NULL,
+            message TEXT NOT NULL,
+            description TEXT,
+            possible_causes TEXT[],
+            solutions TEXT[],
+            related_errors TEXT[],
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+
+    # endpoint_documentation table
+    op.execute("""
+        CREATE TABLE endpoint_documentation (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            method TEXT NOT NULL,
+            path TEXT NOT NULL,
+            description TEXT,
+            authentication TEXT,
+            request_body JSONB,
+            response_body JSONB,
+            error_codes JSONB[],
+            rate_limit TEXT,
+            deprecated BOOLEAN DEFAULT false,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_endpoint_documentation_method_path ON endpoint_documentation(method, path)')
+
+    # code_examples table
+    op.execute("""
+        CREATE TABLE code_examples (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            title TEXT NOT NULL,
+            description TEXT,
+            language TEXT NOT NULL,
+            code TEXT NOT NULL,
+            dependencies JSONB,
+            output TEXT,
+            doc_id UUID REFERENCES documentation(id) ON DELETE CASCADE,
+            endpoint TEXT,
+            error_code TEXT,
+            feature TEXT,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_code_examples_doc_id ON code_examples(doc_id)')
+    op.execute('CREATE INDEX idx_code_examples_language ON code_examples(language)')
+
+    # ===== AUDIT & SECURITY =====
+
+    # audit_logs table
+    op.execute("""
+        CREATE TABLE audit_logs (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            admin_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            admin_email TEXT,
+            action TEXT NOT NULL,
+            resource_type TEXT,
+            resource_id TEXT,
+            resource_data JSONB,
+            error_details JSONB,
+            ip_address TEXT,
+            user_agent TEXT,
+            application_id UUID REFERENCES applications(id) ON DELETE SET NULL,
+            severity TEXT,
+            timestamp TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_audit_logs_admin_user_id ON audit_logs(admin_user_id)')
+    op.execute('CREATE INDEX idx_audit_logs_application_id ON audit_logs(application_id)')
+    op.execute('CREATE INDEX idx_audit_logs_action ON audit_logs(action)')
+    op.execute('CREATE INDEX idx_audit_logs_timestamp ON audit_logs(timestamp)')
+
+    # audit_logs_archive table
+    op.execute("""
+        CREATE TABLE audit_logs_archive (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            admin_user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            admin_email TEXT,
+            action TEXT NOT NULL,
+            resource_type TEXT,
+            resource_id TEXT,
+            resource_data JSONB,
+            error_details JSONB,
+            ip_address TEXT,
+            user_agent TEXT,
+            application_id UUID REFERENCES applications(id) ON DELETE SET NULL,
+            severity TEXT,
+            timestamp TIMESTAMPTZ NOT NULL,
+            archived_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_audit_logs_archive_admin_user_id ON audit_logs_archive(admin_user_id)')
+    op.execute('CREATE INDEX idx_audit_logs_archive_timestamp ON audit_logs_archive(timestamp)')
+
+    # security_alerts table
+    op.execute("""
+        CREATE TABLE security_alerts (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            alert_type TEXT NOT NULL,
+            user_id UUID REFERENCES users(id) ON DELETE SET NULL,
+            elevated_by TEXT,
+            severity TEXT NOT NULL,
+            details JSONB,
+            timestamp TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+            ip_address TEXT,
+            user_agent TEXT
+        )
+    """)
+    op.execute('CREATE INDEX idx_security_alerts_user_id ON security_alerts(user_id)')
+    op.execute('CREATE INDEX idx_security_alerts_alert_type ON security_alerts(alert_type)')
+    op.execute('CREATE INDEX idx_security_alerts_severity ON security_alerts(severity)')
+    op.execute('CREATE INDEX idx_security_alerts_timestamp ON security_alerts(timestamp)')
+
+    # ===== USAGE =====
+
+    # usage_records table
+    op.execute("""
+        CREATE TABLE usage_records (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            user_id UUID REFERENCES users(id) ON DELETE CASCADE,
+            application_id UUID REFERENCES applications(id) ON DELETE CASCADE,
+            feature TEXT NOT NULL,
+            quantity INTEGER NOT NULL,
+            metadata JSONB,
+            created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+        )
+    """)
+    op.execute('CREATE INDEX idx_usage_records_user_id ON usage_records(user_id)')
+    op.execute('CREATE INDEX idx_usage_records_application_id ON usage_records(application_id)')
+    op.execute('CREATE INDEX idx_usage_records_feature ON usage_records(feature)')
+    op.execute('CREATE INDEX idx_usage_records_created_at ON usage_records(created_at)')
+
+
+def downgrade() -> None:
+    # Drop tables in reverse dependency order
+    op.execute('DROP TABLE IF EXISTS usage_records CASCADE')
+    op.execute('DROP TABLE IF EXISTS security_alerts CASCADE')
+    op.execute('DROP TABLE IF EXISTS audit_logs_archive CASCADE')
+    op.execute('DROP TABLE IF EXISTS audit_logs CASCADE')
+    op.execute('DROP TABLE IF EXISTS code_examples CASCADE')
+    op.execute('DROP TABLE IF EXISTS endpoint_documentation CASCADE')
+    op.execute('DROP TABLE IF EXISTS error_documentation CASCADE')
+    op.execute('DROP TABLE IF EXISTS doc_embeddings CASCADE')
+    op.execute('DROP TABLE IF EXISTS documentation CASCADE')
+    op.execute('DROP TABLE IF EXISTS documentation_categories CASCADE')
+    op.execute('DROP TABLE IF EXISTS secure_messages CASCADE')
+    op.execute('DROP TABLE IF EXISTS dayrate_bookings CASCADE')
+    op.execute('DROP TABLE IF EXISTS dayrate_config CASCADE')
+    op.execute('DROP TABLE IF EXISTS cfo_magic_links CASCADE')
+    op.execute('DROP TABLE IF EXISTS cfo_auth_codes CASCADE')
+    op.execute('DROP TABLE IF EXISTS cfo_connections CASCADE')
+    op.execute('DROP TABLE IF EXISTS email_whitelist CASCADE')
+    op.execute('DROP TABLE IF EXISTS email_log CASCADE')
+    op.execute('DROP TABLE IF EXISTS email_templates CASCADE')
+    op.execute('DROP TABLE IF EXISTS webhook_deliveries CASCADE')
+    op.execute('DROP TABLE IF EXISTS webhook_events CASCADE')
+    op.execute('DROP TABLE IF EXISTS webhooks CASCADE')
+    op.execute('DROP TABLE IF EXISTS entitlement_projection_log CASCADE')
+    op.execute('DROP TABLE IF EXISTS entitlement_events CASCADE')
+    op.execute('DROP TABLE IF EXISTS entitlement_mappings CASCADE')
+    op.execute('DROP TABLE IF EXISTS entitlements CASCADE')
+    op.execute('DROP TABLE IF EXISTS chain_sync_state CASCADE')
+    op.execute('DROP TABLE IF EXISTS app_receiving_addresses CASCADE')
+    op.execute('DROP TABLE IF EXISTS crypto_webhook_dedupes CASCADE')
+    op.execute('DROP TABLE IF EXISTS ledger_transactions CASCADE')
+    op.execute('DROP TABLE IF EXISTS crypto_invoices CASCADE')
+    op.execute('DROP TABLE IF EXISTS guest_checkout_conversions CASCADE')
+    op.execute('DROP TABLE IF EXISTS wallet_payments CASCADE')
+    op.execute('DROP TABLE IF EXISTS payment_history CASCADE')
+    op.execute('DROP TABLE IF EXISTS stripe_invoices CASCADE')
+    op.execute('DROP TABLE IF EXISTS subscriptions CASCADE')
+    op.execute('DROP TABLE IF EXISTS stripe_webhook_events CASCADE')
+    op.execute('DROP TABLE IF EXISTS stripe_payments CASCADE')
+    op.execute('DROP TABLE IF EXISTS checkout_sessions CASCADE')
+    op.execute('DROP TABLE IF EXISTS stripe_prices CASCADE')
+    op.execute('DROP TABLE IF EXISTS stripe_products CASCADE')
+    op.execute('DROP TABLE IF EXISTS stripe_customers CASCADE')
+    op.execute('DROP TABLE IF EXISTS blacklisted_tokens CASCADE')
+    op.execute('DROP TABLE IF EXISTS refresh_tokens CASCADE')
+    op.execute('DROP TABLE IF EXISTS auth_magic_link_states CASCADE')
+    op.execute('DROP TABLE IF EXISTS auth_tokens CASCADE')
+    op.execute('DROP TABLE IF EXISTS auth_nonces CASCADE')
+    op.execute('DROP TABLE IF EXISTS user_applications CASCADE')
+    op.execute('DROP TABLE IF EXISTS user_wallets CASCADE')
+    op.execute('DROP TABLE IF EXISTS applications CASCADE')
+    op.execute('DROP TABLE IF EXISTS users CASCADE')
+
+    # Drop extensions
+    op.execute('DROP EXTENSION IF EXISTS "vector"')
+    op.execute('DROP EXTENSION IF EXISTS "pgcrypto"')
+    op.execute('DROP EXTENSION IF EXISTS "uuid-ossp"')